chore(deps)(deps-dev): bump the all-dependencies group across 1 directory with 11 updates (#247)

* chore(deps)(deps-dev): bump the all-dependencies group across 1 directory with 11 updates

Bumps the all-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [icalendar](https://github.com/collective/icalendar) | `7.2.2` | `7.3.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.3` | `0.16.4` |
| [anyio](https://github.com/agronholm/anyio) | `4.12.1` | `4.14.2` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.1.4` | `2026.7.22` |
| [cffi](https://github.com/python-cffi/cffi) | `2.0.0` | `2.1.1` |
| [gevent](https://github.com/gevent/gevent) | `25.9.1` | `26.8.0` |
| [greenlet](https://github.com/python-greenlet/greenlet) | `3.3.1` | `3.5.5` |
| [idna](https://github.com/kjd/idna) | `3.15` | `3.19` |
| [tzdata](https://github.com/python/tzdata) | `2025.3` | `2026.3` |
| [zope-event](https://github.com/zopefoundation/zope.event) | `6.1` | `6.2` |
| [zope-interface](https://github.com/zopefoundation/zope.interface) | `8.2` | `8.6` |



Updates `icalendar` from 7.2.2 to 7.3.0
- [Release notes](https://github.com/collective/icalendar/releases)
- [Changelog](https://github.com/collective/icalendar/blob/main/CHANGES.rst)
- [Commits](collective/icalendar@v7.2.2...v7.3.0)

Updates `ruff` from 0.16.3 to 0.16.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.3...0.16.4)

Updates `anyio` from 4.12.1 to 4.14.2
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](agronholm/anyio@4.12.1...4.14.2)

Updates `certifi` from 2026.1.4 to 2026.7.22
- [Commits](certifi/python-certifi@2026.01.04...2026.07.22)

Updates `cffi` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/python-cffi/cffi/releases)
- [Commits](python-cffi/cffi@v2.0.0...v2.1.1)

Updates `gevent` from 25.9.1 to 26.8.0
- [Release notes](https://github.com/gevent/gevent/releases)
- [Changelog](https://github.com/gevent/gevent/blob/master/docs/changelog_pre.rst)
- [Commits](gevent/gevent@25.9.1...26.8.0)

Updates `greenlet` from 3.3.1 to 3.5.5
- [Changelog](https://github.com/python-greenlet/greenlet/blob/master/CHANGES.rst)
- [Commits](python-greenlet/greenlet@3.3.1...3.5.5)

Updates `idna` from 3.15 to 3.19
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.15...v3.19)

Updates `tzdata` from 2025.3 to 2026.3
- [Release notes](https://github.com/python/tzdata/releases)
- [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md)
- [Commits](python/tzdata@2025.3...2026.3)

Updates `zope-event` from 6.1 to 6.2
- [Changelog](https://github.com/zopefoundation/zope.event/blob/master/CHANGES.rst)
- [Commits](zopefoundation/zope.event@6.1...6.2)

Updates `zope-interface` from 8.2 to 8.6
- [Changelog](https://github.com/zopefoundation/zope.interface/blob/master/CHANGES.rst)
- [Commits](zopefoundation/zope.interface@8.2...8.6)

---
updated-dependencies:
- dependency-name: icalendar
  dependency-version: 7.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: ruff
  dependency-version: 0.16.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: anyio
  dependency-version: 4.14.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: certifi
  dependency-version: 2026.7.22
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: cffi
  dependency-version: 2.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: gevent
  dependency-version: 26.8.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: greenlet
  dependency-version: 3.5.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: idna
  dependency-version: '3.19'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: tzdata
  dependency-version: '2026.3'
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: zope-event
  dependency-version: '6.2'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: zope-interface
  dependency-version: '8.6'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(deps): regenerate device-constraints.txt from uv.lock

Dependabot edited config/device-constraints.txt directly, bumping
transitive pins (anyio, certifi, cffi, gevent, greenlet, idna, tzdata,
zope-event, zope-interface) to versions uv.lock never resolved to. The
fleet would have been pinned to a closure CI never tested, which is the
exact drift tests/test_device_constraints.py exists to catch.

Regenerated from the lock, so the net change is icalendar 7.2.2 -> 7.3.0,
matching the uv.lock bump in this PR.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* ci: bump the hardcoded ruff pin in build.yaml to 0.16.4

build.yaml pip-installs its own ruff, so the Lint & Format job kept
linting with 0.16.3 while this PR moves pyproject (and every dev/
pre-commit run) to 0.16.4 — the job would go green against a ruff
nobody else is using.

Verified clean: ruff 0.16.4 check and format --check both pass.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jeff Culverhouse <jeff@graystorm.com>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: 3 people

.github/workflows/build.yaml

@@ -70,7 +70,7 @@ jobs:
         if: needs.changes.outputs.python == 'true'
         run: |
           python -m pip install --upgrade "pip==26.0"
-          pip install "ruff==0.16.3" "bandit[toml]==1.7.10"
+          pip install "ruff==0.16.4" "bandit[toml]==1.7.10"
 
       - name: Ruff lint
         if: needs.changes.outputs.python == 'true'

config/device-constraints.txt

@@ -56,7 +56,7 @@ httpcore==1.0.9
     # via httpx
 httpx==0.28.1
     # via pulse-os
-icalendar==7.2.2
+icalendar==7.3.0
     # via
     #   pulse-os
     #   recurring-ical-events

pyproject.toml

@@ -11,7 +11,7 @@ requires-python = ">=3.13"
 dependencies = [
     "astral==3.2",
     "httpx==0.28.1",
-    "icalendar==7.2.2",
+    "icalendar==7.3.0",
     "recurring-ical-events>=3.8.2",
     "packaging==26.3",
     "paho-mqtt==2.1.0",
@@ -55,7 +55,7 @@ dev = [
     "pre-commit>=4.6.2",
     "pytest>=9.1.1",
     "pytest-cov>=7.0.0",
-    "ruff==0.16.3",
+    "ruff==0.16.4",
     "types-requests>=2.33.0.20260712",
 ]