Merge branch 'main' into threat-model

Author: spoorcc

.github/workflows/build.yml

@@ -66,7 +66,7 @@ jobs:
 
       - name: Set up Ruby
         if: ${{ matrix.platform != 'windows-latest' }}
-        uses: ruby/setup-ruby@c4e5b1316158f92e3d49443a9d58b31d25ac0f8f  #v1.306.0
+        uses: ruby/setup-ruby@6aaa311d81eba98ae12eaffbcb63296ace0efcde  #v1.307.0
         with:
           ruby-version: 3.3 # See also devcontainer
 

.github/workflows/dependency-review.yml

@@ -29,4 +29,4 @@ jobs:
         with:
           persist-credentials: false
       - name: 'Dependency Review'
-        uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4.9.0
+        uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0

pyproject.toml

@@ -69,9 +69,9 @@ development = [
     'pydocstyle==6.3.0',
     'radon==6.0.1',
     'xenon==0.9.3',
-    'types-PyYAML==6.0.12.20260508',
+    'types-PyYAML==6.0.12.20260510',
     'codespell==2.4.2',
-    'mypy==2.0.0',
+    'mypy==2.1.0',
     #'flake8==5.0.4', # version 6.x.x requires python >= 3.8.1 (but 3.7 support window is until 2023-06-27)
     'bandit==1.9.4',
     'vulture==2.16',
@@ -83,7 +83,7 @@ development = [
     "tomli; python_version < '3.11'", # Tomllib is default in 3.11, required for letting codespell read the pyproject.toml
     'pre-commit==4.6.0',
     'ruff==0.15.12',
-    'hypothesis==6.152.4',
+    'hypothesis==6.152.6',
     'import-linter==2.11',
 ]
 docs = [
@@ -102,7 +102,7 @@ docs = [
 test = ['pytest==9.0.3', 'pytest-cov==7.1.0', 'behave==1.3.3', 'cyclonedx-python-lib[json-validation]==11.7.0']
 casts = ['asciinema==2.4.0']
 build = [
-    'nuitka==4.0.8',
+    'nuitka==4.1',
     "tomli; python_version < '3.11'", # Tomllib is default in 3.11, required for letting codespell read the pyproject.toml]
     "setuptools-scm==10.0.5", # For determining version
 ]