Merge branch 'main' into dependabot/pip/main/openai-2.41.1

.github/workflows/codeql.yml

@@ -38,12 +38,12 @@ jobs:
         run: uv sync --all-extras --dev
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
           queries: security-and-quality
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4
         with:
           category: "/language:${{ matrix.language }}"

.github/workflows/dependency-review.yml

@@ -16,10 +16,10 @@ jobs:
       - uses: actions/checkout@v6
 
       - name: Dependency Review
-        uses: actions/dependency-review-action@v4
+        uses: actions/dependency-review-action@v5
         with:
           fail-on-severity: high
-          fail-on-scopes: changes
+          fail-on-scopes: direct
           license-check: true
           # Project is GPL-3.0-or-later; flag licenses that would taint it.
           deny-licenses: AGPL-1.0-only, AGPL-1.0-or-later, AGPL-3.0-only, AGPL-3.0-or-later, SSPL-1.0, BUSL-1.1

requirements.txt

@@ -1,12 +1,12 @@
-anthropic==0.105.2
+anthropic==0.109.1
 google-genai==2.8.0
 jinja2==3.1.6
 openai==2.41.1
-pre-commit==4.5.0
+pre-commit==4.6.0
 pyyaml==6.0.3
 questionary==2.1.1
 requests==2.34.2
 rich==15.0.0
-ruff==0.15.16
+ruff==0.15.17
 toml==0.10.2
 typer==0.26.7