chore(deps): batch pending Dependabot bumps

.github/dependabot.yml

@@ -4,18 +4,34 @@ updates:
     directory: "/"
     schedule:
       interval: monthly
+    groups:
+      github-actions:
+        patterns:
+          - "*"
   - package-ecosystem: pip
     directory: "/.github/workflows"
     schedule:
       interval: monthly
+    groups:
+      workflow-python:
+        patterns:
+          - "*"
   - package-ecosystem: pip
     directory: "/docs"
     schedule:
       interval: monthly
+    groups:
+      docs-python:
+        patterns:
+          - "*"
   - package-ecosystem: pip
     directory: "/"
     schedule:
       interval: monthly
     versioning-strategy: lockfile-only
     allow:
       - dependency-type: "all"
+    groups:
+      python-lockfile:
+        patterns:
+          - "*"

.github/workflows/build-constraints.txt

@@ -1,4 +1,3 @@
-# Constraints for building source distributions
-# pytest-dependency uses a legacy setup.py incompatible with setuptools 81+
-# See: https://github.com/RKrahl/pytest-dependency/issues/91
-setuptools<81
+# Cap setuptools in isolated sdist builds.
+# pytest-dependency 0.6.1 supports setuptools 81+ (https://github.com/RKrahl/pytest-dependency/issues/91).
+setuptools<85

.github/workflows/constraints.txt

@@ -1,2 +1,2 @@
-bump-my-version==1.3.0
-nox==2026.2.9
+bump-my-version==1.5.1
+nox==2026.8.17

.github/workflows/labeler.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out the repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Run Labeler
         uses: crazy-max/ghaction-github-labeler@v6

.github/workflows/release.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out the repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 2
 
@@ -53,21 +53,21 @@ jobs:
 
       - name: Publish package on PyPI
         if: steps.check-version.outputs.tag
-        uses: pypa/gh-action-pypi-publish@v1.13.0
+        uses: pypa/gh-action-pypi-publish@v1.14.2
         with:
           user: __token__
           password: ${{ secrets.PYPI_TOKEN }}
 
       - name: Publish package on TestPyPI
         if: "! steps.check-version.outputs.tag"
-        uses: pypa/gh-action-pypi-publish@v1.13.0
+        uses: pypa/gh-action-pypi-publish@v1.14.2
         with:
           user: __token__
           password: ${{ secrets.TEST_PYPI_TOKEN }}
-          repository_url: https://test.pypi.org/legacy/
+          repository-url: https://test.pypi.org/legacy/
 
       - name: Publish the release notes
-        uses: release-drafter/release-drafter@v7.1.1
+        uses: release-drafter/release-drafter@v7.7.0
         with:
           publish: ${{ steps.check-version.outputs.tag != '' }}
           tag: ${{ steps.check-version.outputs.tag }}

.github/workflows/tests.yml

@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: Check out the repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Python ${{ matrix.python }}
         uses: actions/setup-python@v6
@@ -67,7 +67,7 @@ jobs:
           print("result={}".format(result), file=open(os.environ['GITHUB_OUTPUT'], 'a'))
 
       - name: Restore pre-commit cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         if: matrix.session == 'pre-commit'
         with:
           path: ~/.cache/pre-commit
@@ -99,7 +99,7 @@ jobs:
     needs: tests
     steps:
       - name: Check out the repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Install the pinned version of uv
         uses: astral-sh/setup-uv@v7
@@ -127,6 +127,6 @@ jobs:
           nox --session=coverage -- xml
 
       - name: Upload coverage report
-        uses: codecov/codecov-action@v6.0.0
+        uses: codecov/codecov-action@v7.1.1
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

docs/requirements.txt

@@ -1,11 +1,11 @@
-aiohttp==3.14.1
+aiohttp==3.14.3
 autodoc-pydantic==2.2.0
 furo==2025.12.19
-linkify-it-py==2.1.0
-matplotlib==3.11.0
+linkify-it-py==2.2.0
+matplotlib==3.11.2
 myst-nb==1.4.0
 sphinx==9.1.0
 sphinx-click==6.2.0
 sphinx-copybutton==0.5.2
 sphinx-design==0.7.0
-ipywidgets==8.1.8
+ipywidgets==8.1.9

noxfile.py

@@ -57,7 +57,7 @@ def session_install_uv_package(session: Session, packages: list[str]) -> None:
     export_args = ["uv", "export", "--only-dev", "--no-hashes", "-o", requirements_tmp]
     session.run_install(*export_args, silent=True, env=env)
 
-    # Build constraints to pin setuptools for packages with legacy setup.py
+    # Build constraints to cap setuptools in isolated sdist builds.
     # See: https://github.com/RKrahl/pytest-dependency/issues/91
     build_constraints = Path(__file__).parent / ".github/workflows/build-constraints.txt"