chore(deps): update dev tooling and patch vulnerable transitive deps

Dev tooling (direct, dev group):
- bump minimums: ruff 0.15.17, pytest 9.1.0, pytest-asyncio 1.4.0,
  pyright 1.1.410; keep the ruff pre-commit rev in sync.
- lock-only refresh (unpinned): pre-commit 4.6.0, sphinx-gallery 0.21.0,
  sphinxcontrib-mermaid 2.0.2.

Security (transitive, dev-only via sphinx-autobuild / anyio; not shipped in
the wheel): starlette 1.0.0 -> 1.3.1, idna 3.11 -> 3.18, anyio -> 4.14.0,
clearing all 6 open Dependabot alerts (2 high, 3 moderate, 1 low).

Signed-off-by: Fernando Macedo <fgmacedo@gmail.com>

Author: fgmacedo

.pre-commit-config.yaml

@@ -9,7 +9,7 @@ repos:
         exclude: docs/auto_examples
 - repo: https://github.com/astral-sh/ruff-pre-commit
   # Ruff version.
-  rev: v0.15.13
+  rev: v0.15.17
   hooks:
     # Run the linter.
     - id: ruff

pyproject.toml

@@ -34,15 +34,15 @@ io = ["PyYAML >= 6.0", "jsonschema >= 4.18"]
 
 [dependency-groups]
 dev = [
-    "ruff >=0.15.13",
+    "ruff >=0.15.17",
     "pre-commit",
     "mypy",
-    "pytest >=9.0.3",
+    "pytest >=9.1.0",
     "pytest-cov >=7.1.0",
     "pytest-sugar >=1.1.1",
     "pytest-mock >=3.15.1",
     "pytest-benchmark >=5.2.3",
-    "pytest-asyncio >=1.3.0",
+    "pytest-asyncio >=1.4.0",
     "pydot",
     "django >=6.0.3; python_version >='3.12'",
     "django >=5.2.14; python_version <'3.12'",
@@ -59,7 +59,7 @@ dev = [
     "babel >=2.18.0",
     "pytest-xdist>=3.8.0",
     "pytest-timeout>=2.4.0",
-    "pyright>=1.1.408",
+    "pyright>=1.1.410",
     "PyYAML >=6.0",
     "jsonschema >=4.18",
 ]