Combined PRs

.github/workflows/codeql-analysis.yml

@@ -44,7 +44,7 @@ jobs:
 
     - name: Set up Python
       if: matrix.language == 'python'
-      uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+      uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
 
     - name: Install dependencies
       # Needed for pycurl

.github/workflows/node-ci.yml

@@ -30,7 +30,7 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
             persist-credentials: false
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+      - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
           node-version: 24.5.0
           cache: 'npm'

.github/workflows/zizmor.yml

@@ -24,7 +24,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup Python
-        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
       - name: Run zizmor
         run: pipx run zizmor --format sarif . > results.sarif
       - name: Upload SARIF file

Dockerfile

@@ -3,7 +3,7 @@ ARG PYTHON_IMAGE_VERSION=3.13.7-slim-bookworm
 
 # First things first, we build an image which is where we're going to compile
 # our static assets with. We use this stage in development.
-FROM node:24.5.0-bookworm AS static-deps
+FROM node:24.7.0-bookworm AS static-deps
 
 WORKDIR /opt/warehouse/src/
 

requirements/deploy.in

@@ -1,2 +1,2 @@
 gunicorn==23.0.0
-ddtrace==3.12.0
+ddtrace==3.12.4

requirements/deploy.txt

@@ -4,72 +4,72 @@
 #
 #    pip-compile --allow-unsafe --generate-hashes --output-file=requirements/deploy.txt requirements/deploy.in
 #
-bytecode==0.16.2 \
-    --hash=sha256:0a7dea0387ec5cae5ec77578690c5ca7470c8a202c50ce64a426d86380cddd7f \
-    --hash=sha256:f05020b6dc1f48cdadd946f7c3a03131ba0f312bd103767c5d75559de5c308f8
+bytecode==0.17.0 \
+    --hash=sha256:0c37efa5bd158b1b873f530cceea2c645611d55bd2dc2a4758b09f185749b6fd \
+    --hash=sha256:64fb10cde1db7ef5cc39bd414ecebd54ba3b40e1c4cf8121ca5e72f170916ff8
     # via ddtrace
-ddtrace==3.12.0 \
-    --hash=sha256:02637eecbe74aeca9d8f4dfdd1e07554dc50701ee101d3c5184394c8667849a6 \
-    --hash=sha256:03ed129f303f29b72cefa2f24891ccd046f938eef18af8d3332a993caea5c4d5 \
-    --hash=sha256:06a25a8da94a6bcb4cc38a1332cd972f92e09e1b8a5bc473a93d1ce11eaa57d1 \
-    --hash=sha256:0ae9178c6cefe21bad62b639be8c0e77b4276cb7009a60bd9c731a682456b56c \
-    --hash=sha256:0d80791eda140e485a696884ac3d7ae9a257c7fe4bb4543e35f3b3f0d2138884 \
-    --hash=sha256:15407a4db494ff3b9b0c2ad34f664180195ee21f5579bec25145e0a69a52528d \
-    --hash=sha256:224facf97759e5ff1dad9397690f8a29751378bdf61fd1a141a623c891409f33 \
-    --hash=sha256:25657e4e925d82012e9b8b15bcbf47fea6bdee85d4ce437be1d299c3bce9d604 \
-    --hash=sha256:279cdb064ca1dc98a637a38a5de76fc5d103080315148c7d4011101e53483b05 \
-    --hash=sha256:2d9b5f88d7d38bfeb1820e4e6fafd702947a392c95e2cfc966bd4812da9014ea \
-    --hash=sha256:32b967a6fd932f87e4e19e69a9ffbeeadbc76c715aee414773ded720451f1390 \
-    --hash=sha256:32e6b7d9100c209efa4c1d782d19b76e4e402a5f02454a6dbf900bd3927afc5e \
-    --hash=sha256:32f0cb40892d53a302719431c445958488436f7e47e59c6fb83d22d379c48b29 \
-    --hash=sha256:35f019beb3313ff35125ada2f4245e6ad7e5bf13c64b280ab77bcf6333e916d4 \
-    --hash=sha256:37be6011d5c6293209d97e980cbc02432aa1051e21b0880d1fab1411298fcff8 \
-    --hash=sha256:3b6e64525ad5aa89c2e1f0f9da2eff0726352699742b50bf768e82105bf6cdd8 \
-    --hash=sha256:4722794ebf583850c7b8bb7cb39cdd730870b5fdab57137c4f35cb96286f3e52 \
-    --hash=sha256:4bd17b9d95fd3bb6166dbf11e4bf6eafae72723db15dd0d6b8d2adb9b2e5367a \
-    --hash=sha256:555bb03ac7ee00a62472935256cfac9ee70da6cf6f83813a0d12754ed6c59e7e \
-    --hash=sha256:573c7332ad71b815c46e6b225be367098db24a0b8b93c2b3c59bde1a29f8f126 \
-    --hash=sha256:5944a791510b4a0a43a3d407f2eb84077f4198719398320e764203c0e7b55ceb \
-    --hash=sha256:5d43e823998f8483e8dfdab48ece492ea1c27836785b67857073befd65f95bea \
-    --hash=sha256:5ef608fbf855e8ac4655a81fdaaf7749dc579242bbddc55335c0345f31289fc4 \
-    --hash=sha256:5ef73f0d8b85501f68844c75c94eee0e73f8be9397d2641c7b0ff71c217e8759 \
-    --hash=sha256:636e3c8ec23d46496f322e34b4fa1893a52447b77db10d5e6e2ccc541b03fe53 \
-    --hash=sha256:66fcb1d23728079717f736ba4c5737a743b5e1e8a399dfdeab49433204c0ada3 \
-    --hash=sha256:70a63c5c1e396f9653b2c84396f2791313a8207dee9a46e04f3f5a760d00a7f4 \
-    --hash=sha256:7129e225aeb10118dcafdb2bcefd00dbd4ead5d13cbfba0401a7d0242b1f7a6b \
-    --hash=sha256:7627b71e12427cafb6d105366a5ccbc9b00ca2e41e078b92a2a91373f354508b \
-    --hash=sha256:7aa93ee84dfefe6fff08d42575a045fba5d910271bf680e5507d0b2a7647642a \
-    --hash=sha256:7ae4d2025446f4ff388733dd9e356b419a51b20aad1a2dcb0e8c541f560d747b \
-    --hash=sha256:7cb2669030c523de5c3e75c94a24e069eb673132b2088ec5d54174b8caaf2412 \
-    --hash=sha256:7e87d46cc235e636049c8a26ccdebc5ea37ff6f7a4c96e4bf8aa6b19fdc4bc39 \
-    --hash=sha256:84939c0a97a90673efd29baca5b32c8b85e499202bfeab05c86aeb0fe8b03e1a \
-    --hash=sha256:8a23596a7eaef2bd4f0d758c890f137b84504a6522436520d8a430f8e8669bc7 \
-    --hash=sha256:8bd30a7ccd2fd28b49fe2b7e570c5fcc46089309c42d8488bf773b62437da81c \
-    --hash=sha256:8c484a1e6037a731b700044403d7aa159de079527682f3ec51778b19ccdb0495 \
-    --hash=sha256:9019a31b9fbcb5e741b7111cfbb5af106f18a550caae4cfd19a6a87e08fbb38b \
-    --hash=sha256:99a49eedbfcd635814a0963a8a2dfba72799d03b058202786fbc2666e1ca61fe \
-    --hash=sha256:9a7643a68306b20f197a30757657baefc5272c9d0902228bf372771243da4d39 \
-    --hash=sha256:9d74ecd51531bd747d6a97158b33a60c545fb809cf4cf11d14b54fc59177166e \
-    --hash=sha256:9d8f8c12ce6ec5c1cca63ef4e5dbd836521e224fecbcd4cdb3fd179c7659492c \
-    --hash=sha256:a20a2ca9685ada9a50486d98afb9cdc22946e64952c92ca5989291498ca4f0f0 \
-    --hash=sha256:a436671fcfceea69c25bc58b49359f62ceaee6336010eb8ad40cce1fcd98fad9 \
-    --hash=sha256:acc9e2c0e965966e952618a1c3d9e00f6bfca757cf47dbe718e44ec68c7a9b99 \
-    --hash=sha256:af1d7594c1390c902c5b2e3fa8943957e9784cb129c9613a68b1632633c6962a \
-    --hash=sha256:b3a2dffce7f8305e6b40f4df4aeba91b38dda5c4a29bbd7f862169c288a4f48d \
-    --hash=sha256:b4d6ae49e66e2e6530a8601ccda16bcb99a88a8cb38e9a04e8a41b2ef8a6f022 \
-    --hash=sha256:ba7dcdbd405d149555608d1c419a8e150d3746a65e2a287831c9e397d33eab35 \
-    --hash=sha256:c45137230d9e8e819948065ed4792cf487cc4626ce2fdcd2d3712aa024b7536a \
-    --hash=sha256:cedb4a4517e85590599bdab63ac1bcc4c182d0af8b719a55cd0cf31ace2f8a28 \
-    --hash=sha256:d4999042f6b9d163204ae4ac09f34c53c533696678a1736289cf60224670a657 \
-    --hash=sha256:d85b5814770752cefac929920e5666954f63c4c33c10f561cca5b733af6a7ef7 \
-    --hash=sha256:de56b02a5241cdde170d839a6cacbc386b498bf286ade00715be630a30f8a0d9 \
-    --hash=sha256:df1db83add4e51e171102fbf63ee600b5d25f76f3844c192a01001a56ee3a06f \
-    --hash=sha256:e1361f70c042e5a959aff8349638bc8068498fd8b7e389e99780465096e98a02 \
-    --hash=sha256:e889904764ebf509c6726b295130af39fcfbd6f727047243fb136c2e59e08959 \
-    --hash=sha256:eeaf9696c37861d3bbce620f583c03304ffa00376f7283e5766b216b829f24c1 \
-    --hash=sha256:f36e4880ec084fb485291948884e8d8b2ad676caabb890fe7c16eda4fff37b8d \
-    --hash=sha256:f96c9f82c2341250b5b567f5189387de3d1d4712100ff24a1c1e84232ac13f21 \
-    --hash=sha256:fad55fabd9bff9b53525f915ef9a4378a18bfb1cdbea20cf66ebf414262ad96f
+ddtrace==3.12.4 \
+    --hash=sha256:018d19e2a1e7585df65d938ae51c385d673e8001b66827a47e499ade3b227ad2 \
+    --hash=sha256:0c1d3f7f93146653f8ed06d8cd54030b2c902ceca6de55f6df7f40d23037181e \
+    --hash=sha256:0de9563bad27007fd64059e3b5bb3a791184e39619fdb096044e68a454b4427b \
+    --hash=sha256:0f5ab24c82fc7532386b02530f90fed2964718cea296adf6d35fc31bd30d301d \
+    --hash=sha256:18dfe9a1a02bfa4ef4f614122135509f454abeff625039b764bc461462ba0923 \
+    --hash=sha256:196f114a70b75320876f6861c10435c6d4ea50e0f406328b0862a021c344d002 \
+    --hash=sha256:1b3be9452bc76f730203b86272f8312c7e195b3125f964900df3f41c39ec0c94 \
+    --hash=sha256:1e8cc90fdcd7f021d06383b88c0e40726706c06088dddd528e31cf3c65a9fea9 \
+    --hash=sha256:222dc483f22a065795f473cad6fc6e798ecf9da9f4fc99ca87f1ba70f34d21b1 \
+    --hash=sha256:2ebae69206957837341cd94bbe78e5242395f7571455dfe911b56ea2f7404ada \
+    --hash=sha256:2edf755f4bfd823ce8b560c233cb17137ef79d097bc1ade7914f684b39011bcb \
+    --hash=sha256:30bd9e57923a99d5b4e6562976e9f7307d685caff1544b3d2f7438e6ef8e87e8 \
+    --hash=sha256:3936243dc989b8e8e3bb004262abe68a1cc3e0b9356671c01233b84d2c837903 \
+    --hash=sha256:3bf18fd5898940fb7f236b4c9796f0ee517eb755fd0c17965d3a0342f865ee5a \
+    --hash=sha256:4200e8b057b29ce3ba0889a9d423e4d105b0ba35d4bd58ba2670763018909623 \
+    --hash=sha256:42d46f17baaa5040e4f438544603033af8eeec32067c3712a9e620392d75f484 \
+    --hash=sha256:46de7dd48256d8e347f2ab436644bd8946d3605caedb150eb46327a9f5b005b6 \
+    --hash=sha256:4d5c9ddacecb0072292360813b453129998ca293e13c542fa51771c7734ef03a \
+    --hash=sha256:5845d7c2ed46b44e02bd5d36ca7f8e80a4e942683473c867393b9fd4553f9d64 \
+    --hash=sha256:585b7b26f03c64390c800e180304639b4226c34c533f16bc6cd9c328ee4f727a \
+    --hash=sha256:62a48fc36308919afb1fae22a268a96cff3448f1feb860db97d130498ddfa428 \
+    --hash=sha256:66c007170698e3d12638d03e80f02e93c3bb3e55e96a7f5517e638056562ec1a \
+    --hash=sha256:6b5b150e9d362f7242159dd5a5a7107f1be091282c0ee69301fb7ede60f28d3c \
+    --hash=sha256:6dad7ca193810beb931e81b7430dd074a53bf8f8bd5bdc19acd198d460b2438a \
+    --hash=sha256:734d782d9f64de378f632516554b9da0dfbf54cf1bb7be4bb1085165e7c052ad \
+    --hash=sha256:751ce0410405113286bd558fd402f8a58f5b455cee4deb467ae9ae87e5713547 \
+    --hash=sha256:77de49365f55033d7e14b544f92d0cae71969b78c4ab8642c3340124e0200739 \
+    --hash=sha256:7d6117fabcd98d3a696d1f80314c9b9e4325b362b31714551efd729a02152ff1 \
+    --hash=sha256:7fc1449d511e04e8b2596eee6d1ad2d3420dff23f6dfd8a899c5e3e03dfe8ba5 \
+    --hash=sha256:80e0acbbe85365f113bf6e57f77a82f0e0612a7a4cb57f16e9e184748a2bc478 \
+    --hash=sha256:87fbd5126f8339bcb508a52455f58b0c92870a1c3748849a4d6543198b5f8752 \
+    --hash=sha256:8ff1c70da37c05a29f0be091b0fdc6bb1d91d448f56861c51df614649441070c \
+    --hash=sha256:9de7aa6b6ea3d41f8f20c5e00dd85b2f2b3bb1591f3b7deab5d4c527620c3cb3 \
+    --hash=sha256:9f639f70f1689ec1a1049cd64132491ee09bcfe7609d73f8c220e38261611045 \
+    --hash=sha256:9fd79c44ecffb36ac5b3168f0f196778ed0dd538beb07961ce10e06b8045af35 \
+    --hash=sha256:a08cd25234358a2427494d4059ee12afc83e083bad65f2bd62417fd935caa737 \
+    --hash=sha256:a4f2dabbc95e5c6bf4c43eb141e94021789c81a929588f4000f876f89882c124 \
+    --hash=sha256:aa0606a07e7d05881f2ef1172f4175733ae3006bfc3c7cfd58b82ea3ed75c914 \
+    --hash=sha256:b331bc0c3000cea1fd70febcf004b5a617c63b9050094f08100891a23638986d \
+    --hash=sha256:b8f99761f946b2b7cc2ea4cba821a7a94d05a9eb8cd8a3feabdb49eeacc18bb9 \
+    --hash=sha256:c422977fc4f6e9ba7d4eef9b7e6ce00f8b81c68b034682c6a63eb5c9670e37d8 \
+    --hash=sha256:c4f66c48eca7d6759766fcaf24ac3a65e712e62ae7b1f521a7da2b8d7f101849 \
+    --hash=sha256:d0b3ec8228950e7ff68c39537630cd12880656d96461ef021d6484b2df8dba84 \
+    --hash=sha256:d0b694838e6c7ea2da6de7ccd7b866ec439c49fa40b68ac46f657163cb571d93 \
+    --hash=sha256:d0c5b84d066ca3d60da9636df526382416dae4288f66fcdaca7a2e765ca2f0bd \
+    --hash=sha256:dd0ac6ba50d36689bf0eeadc88ce91b60bc863036f3dea90dd5656f39bce3ac4 \
+    --hash=sha256:e55b911d5b9f1bd73731870962809f9089677f4d3736d52587b4ba76eee56962 \
+    --hash=sha256:e78957120c64bd56ce5592bc10587d7c0d1ca68f21f5b46f6a18dafbc43ad234 \
+    --hash=sha256:e89a17cdb4b5442b97a219e8522b9c665cf7a5116f7e97049dd145f837bad5b1 \
+    --hash=sha256:ebde5af8c5d98f435d7dec960c97151142a4b302e94c20da79ed58fe8a08052e \
+    --hash=sha256:ed76d10787fc288ea94808ce601df243fc3953c7142baefac446015bed799790 \
+    --hash=sha256:eda3b6ebd275f7f7272f45f4e8ee0e0720c1e217c80140270f8c5e415e11133e \
+    --hash=sha256:efde4b33502f3897993a564ee56d0ea30a65d658d616d16c5ef23c850d0e3417 \
+    --hash=sha256:fad78414731b242e86016a124299f2f41575ccf58444edca777b425dbd9faf0c \
+    --hash=sha256:fbe90ff2c914c753116807ddffde9065ecbf9944bdc4932862c3f5835485004d \
+    --hash=sha256:fbf2543856b4ed5a1d6ac59c82f8c76cef5f4ef65361d59f60ce01db92a4c8d1 \
+    --hash=sha256:fd804c06d62926cc18a354987f7d5c1fecd1da30983041d3f98bc402d9d23713 \
+    --hash=sha256:fe03b8f513513e28c35bc792cd7ef0602b21cbcfe71d17a2dd962aee23e980d9 \
+    --hash=sha256:fe644904b44d39a93eb40fb033aef26a03e4096d135ee844b71ed49d1bd647ad \
+    --hash=sha256:fe967af58f2e0033caa977c512a4bfb7af3c6f5ad57e9bdef9241609a4d8a99b \
+    --hash=sha256:ff1812b1d7e8344088a978f1d4f621257fe1ad5d8efc07317a3c90c280e5bdc4
     # via -r requirements/deploy.in
 envier==0.6.1 \
     --hash=sha256:3309a01bb3d8850c9e7a31a5166d5a836846db2faecb79b9cb32654dd50ca9f9 \
@@ -106,9 +106,9 @@ protobuf==6.32.0 \
     --hash=sha256:ba377e5b67b908c8f3072a57b63e2c6a4cbd18aea4ed98d2584350dbf46f2783 \
     --hash=sha256:d52691e5bee6c860fff9a1c86ad26a13afbeb4b168cd4445c922b7e2cf85aaf0
     # via ddtrace
-typing-extensions==4.14.1 \
-    --hash=sha256:38b39f4aeeab64884ce9f74c94263ef78f3c22467c8724005483154c26648d36 \
-    --hash=sha256:d1e1e3b58374dc93031d6eda2420a48ea44a36c2b4766a4fdeb3710755731d76
+typing-extensions==4.15.0 \
+    --hash=sha256:0cea48d173cc12fa28ecabc3b837ea3cf6f38c6d1136f85cbaaf598984861466 \
+    --hash=sha256:f0fa19c6845758ab08074a0cfa8b7aecb71c999ca73d62883bc25cc018c4e548
     # via
     #   ddtrace
     #   opentelemetry-api

requirements/docs-blog.txt

@@ -334,9 +334,9 @@ mkdocs-get-deps==0.2.0 \
     --hash=sha256:162b3d129c7fad9b19abfdcb9c1458a651628e4b1dea628ac68790fb3061c60c \
     --hash=sha256:2bf11d0b133e77a0dd036abeeb06dec8775e46efa526dc70667d8863eefc6134
     # via mkdocs
-mkdocs-material==9.6.17 \
-    --hash=sha256:221dd8b37a63f52e580bcab4a7e0290e4a6f59bd66190be9c3d40767e05f9417 \
-    --hash=sha256:48ae7aec72a3f9f501a70be3fbd329c96ff5f5a385b67a1563e5ed5ce064affe
+mkdocs-material==9.6.18 \
+    --hash=sha256:a2eb253bcc8b66f8c6eaf8379c10ed6e9644090c2e2e9d0971c7722dc7211c05 \
+    --hash=sha256:dbc1e146a0ecce951a4d84f97b816a54936cdc9e1edd1667fc6868878ac06701
     # via
     #   -r requirements/docs-blog.in
     #   material-plausible-plugin
@@ -511,9 +511,9 @@ pillow==11.3.0 \
     # via
     #   -r requirements/docs-blog.in
     #   cairosvg
-platformdirs==4.3.8 \
-    --hash=sha256:3d512d96e16bcb959a814c9f348431070822a6496326a4be0911c40b5a74c2bc \
-    --hash=sha256:ff7059bb7eb1179e2685604f4aaf157cfd9535242bd23742eadc3c13542139b4
+platformdirs==4.4.0 \
+    --hash=sha256:abd01743f24e5287cd7a5db3752faf1a2d65353f38ec26d98e25a6db65958c85 \
+    --hash=sha256:ca753cf4d81dc309bc67b0ea38fd15dc97bc30ce419a7f58d13eb3bf14c4febf
     # via mkdocs-get-deps
 pycparser==2.22 \
     --hash=sha256:491c8be9c040f5390f5bf44a5b07752bd07f56edf992381b05c701439eec10f6 \
@@ -594,9 +594,9 @@ pyyaml-env-tag==1.1 \
     --hash=sha256:17109e1a528561e32f026364712fee1264bc2ea6715120891174ed1b980d2e04 \
     --hash=sha256:2eb38b75a2d21ee0475d6d97ec19c63287a7e140231e4214969d0eac923cd7ff
     # via mkdocs
-requests==2.32.4 \
-    --hash=sha256:27babd3cda2a6d50b30443204ee89830707d396671944c998b5975b031ac2b2c \
-    --hash=sha256:27d0316682c8a29834d3264820024b62a36942083d52caf2f14c0591336d3422
+requests==2.32.5 \
+    --hash=sha256:2462f94637a34fd532264295e186976db0f5d453d1cdd31473c85a6a161affb6 \
+    --hash=sha256:dbba0bac56e100853db0ea71b82b4dfd5fe2bf6d3754a8893c3af500cec7d7cf
     # via
     #   cachecontrol
     #   mkdocs-material

requirements/docs-dev.txt

@@ -22,9 +22,9 @@ babel==2.17.0 \
     --hash=sha256:0c54cffb19f690cdcc52a3b50bcbf71e07a808d1c80d549f2459b9d2cf0afb9d \
     --hash=sha256:4d0b53093fdfb4b21c92b5213dba5a1b23885afa8383709427046b21c366e5f2
     # via sphinx
-beautifulsoup4==4.13.4 \
-    --hash=sha256:9bbbb14bfde9d79f38b8cd5f8c7c85f4b8f2523190ebed90e950a8dea4cb1c4b \
-    --hash=sha256:dbb3c4e1ceae6aefebdaf2423247260cd062430a410e38c66f2baa50a8437195
+beautifulsoup4==4.13.5 \
+    --hash=sha256:5e70131382930e7c3de33450a2f54a63d5e4b19386eab43a5b34d594268f3695 \
+    --hash=sha256:642085eaa22233aceadff9c69651bc51e8bf3f874fb6d7104ece2beb24b47c4a
     # via furo
 certifi==2025.8.3 \
     --hash=sha256:e564105f78ded564e3ae7c923924435e1daa7463faeab5bb932bc53ffae63407 \
@@ -311,9 +311,9 @@ pyyaml==6.0.2 \
     # via
     #   myst-parser
     #   sphinxcontrib-mermaid
-requests==2.32.4 \
-    --hash=sha256:27babd3cda2a6d50b30443204ee89830707d396671944c998b5975b031ac2b2c \
-    --hash=sha256:27d0316682c8a29834d3264820024b62a36942083d52caf2f14c0591336d3422
+requests==2.32.5 \
+    --hash=sha256:2462f94637a34fd532264295e186976db0f5d453d1cdd31473c85a6a161affb6 \
+    --hash=sha256:dbba0bac56e100853db0ea71b82b4dfd5fe2bf6d3754a8893c3af500cec7d7cf
     # via sphinx
 roman-numerals-py==3.1.0 \
     --hash=sha256:9da2ad2fb670bcf24e81070ceb3be72f6c11c440d73bd579fbeca1e9f330954c \
@@ -331,9 +331,9 @@ snowballstemmer==3.0.1 \
     --hash=sha256:6cd7b3897da8d6c9ffb968a6781fa6532dce9c3618a4b127d920dab764a19064 \
     --hash=sha256:6d5eeeec8e9f84d4d56b847692bacf79bc2c8e90c7f80ca4444ff8b6f2e52895
     # via sphinx
-soupsieve==2.7 \
-    --hash=sha256:6e60cc5c1ffaf1cebcc12e8188320b72071e922c2e897f737cadce79ad5d30c4 \
-    --hash=sha256:ad282f9b6926286d2ead4750552c8a6142bc4c783fd66b0293547c8fe6ae126a
+soupsieve==2.8 \
+    --hash=sha256:0cc76456a30e20f5d7f2e14a98a4ae2ee4e5abdc7c5ea0aafe795f344bc7984c \
+    --hash=sha256:e2dd4a40a628cb5f28f6d4b0db8800b8f581b65bb380b97de22ba5ca8d72572f
     # via beautifulsoup4
 sphinx==8.2.3 \
     --hash=sha256:398ad29dee7f63a75888314e9424d40f52ce5a6a87ae88e7071e80af296ec348 \
@@ -348,9 +348,9 @@ sphinx==8.2.3 \
     #   sphinx-reredirects
     #   sphinxcontrib-httpdomain
     #   sphinxcontrib-mermaid
-sphinx-autobuild==2024.10.3 \
-    --hash=sha256:158e16c36f9d633e613c9aaf81c19b0fc458ca78b112533b20dafcda430d60fa \
-    --hash=sha256:248150f8f333e825107b6d4b86113ab28fa51750e5f9ae63b59dc339be951fb1
+sphinx-autobuild==2025.8.25 \
+    --hash=sha256:9cf5aab32853c8c31af572e4fecdc09c997e2b8be5a07daf2a389e270e85b213 \
+    --hash=sha256:b750ac7d5a18603e4665294323fd20f6dcc0a984117026d1986704fa68f0379a
     # via -r requirements/docs-dev.in
 sphinx-basic-ng==1.0.0b2 \
     --hash=sha256:9ec55a47c90c8c002b5960c57492ec3021f5193cb26cebc2dc4ea226848651c9 \
@@ -396,13 +396,13 @@ sphinxcontrib-serializinghtml==2.0.0 \
     --hash=sha256:6e2cb0eef194e10c27ec0023bfeb25badbbb5868244cf5bc5bdc04e4464bf331 \
     --hash=sha256:e9d912827f872c029017a53f0ef2180b327c3f7fd23c87229f7a8e8b70031d4d
     # via sphinx
-starlette==0.47.2 \
-    --hash=sha256:6ae9aa5db235e4846decc1e7b79c4f346adf41e9777aebeb49dfd09bbd7023d8 \
-    --hash=sha256:c5847e96134e5c5371ee9fac6fdf1a67336d5815e09eb2a01fdb57a351ef915b
+starlette==0.47.3 \
+    --hash=sha256:6bc94f839cc176c4858894f1f8908f0ab79dfec1a6b8402f6da9be26ebea52e9 \
+    --hash=sha256:89c0778ca62a76b826101e7c709e70680a1699ca7da6b44d38eb0a7e61fe4b51
     # via sphinx-autobuild
-typing-extensions==4.14.1 \
-    --hash=sha256:38b39f4aeeab64884ce9f74c94263ef78f3c22467c8724005483154c26648d36 \
-    --hash=sha256:d1e1e3b58374dc93031d6eda2420a48ea44a36c2b4766a4fdeb3710755731d76
+typing-extensions==4.15.0 \
+    --hash=sha256:0cea48d173cc12fa28ecabc3b837ea3cf6f38c6d1136f85cbaaf598984861466 \
+    --hash=sha256:f0fa19c6845758ab08074a0cfa8b7aecb71c999ca73d62883bc25cc018c4e548
     # via beautifulsoup4
 urllib3==2.5.0 \
     --hash=sha256:3fc47733c7e419d4bc3f6b3dc2b4f890bb743906a30d56ba4a5bfa4bbff92760 \