Update CI dependencies (4.1)

.github/publish.yaml

@@ -1,4 +1,4 @@
-# yaml-language-server: $schema=https://raw.githubusercontent.com/camptocamp/tag-publish/1.3.1/tag_publish/schema.json
+# yaml-language-server: $schema=https://raw.githubusercontent.com/camptocamp/tag-publish/1.3.3/tag_publish/schema.json
 
 docker:
   images:

.github/publish/pyproject.toml

@@ -8,5 +8,5 @@ name = "Publish"
 version = "0.0.0"
 requires-python = ">=3.14"
 dependencies = [
-    "tag-publish[docker]==1.3.1",
+    "tag-publish[docker]==1.3.3",
 ]

.github/workflows/main.yaml

@@ -40,7 +40,7 @@ jobs:
       - run: pre-commit run --all-files --color=always
       - run: git diff --exit-code --patch > /tmp/pre-commit.patch; git diff --color; git reset --hard || true
         if: failure()
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: Apply pre-commit fix.patch
           path: /tmp/pre-commit.patch
@@ -62,7 +62,7 @@ jobs:
         run: make tests
         env:
           PRIVATE_SSH_KEY: ${{secrets.PRIVATE_SSH_KEY}}
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: results
           path: results
@@ -72,7 +72,7 @@ jobs:
 
       - name: Acceptance
         run: make acceptance
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: acceptance
           path: acceptance_tests/results
@@ -88,7 +88,7 @@ jobs:
 
       # The image is given to the publishing job, which is the only one with the write permissions.
       - run: docker save --output=/tmp/images.docker camptocamp/shared_config_manager:latest
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: images.docker
           path: /tmp/images.docker
@@ -119,7 +119,7 @@ jobs:
           version: latest-known
           cache-python: true
 
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: images.docker
           path: /tmp/
@@ -133,7 +133,7 @@ jobs:
 
       - run: git diff --exit-code --patch > /tmp/dpkg-versions.patch; git diff --color; git reset --hard || true
         if: failure()
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: Update dpkg versions list.patch
           path: /tmp/dpkg-versions.patch

.pre-commit-config.yaml

@@ -39,7 +39,7 @@ repos:
           - --test=utils:tests
       - id: uv-lock
         additional_dependencies:
-          - uv==0.13.4 # pypi
+          - uv==0.13.5 # pypi
         files: ^\.github/publish/pyproject\.toml$
   - repo: https://github.com/codespell-project/codespell
     rev: v2.4.3

ci/requirements.txt

@@ -1,5 +1,5 @@
 c2cciutils==1.7.5
-pre-commit==4.6.2
-poetry-dynamic-versioning==1.10.0
+pre-commit==4.7.0
+poetry-dynamic-versioning==1.10.1
 certifi>=2026.10.19 # not directly required, pinned by Snyk to avoid a vulnerability
 filelock>=4.2.1 # not directly required, pinned by Snyk to avoid a vulnerability