Merge main; carry ruff bump into its new manifest pin (0.16.1)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: lelia

.github/actions/setup-docker/action.yml

@@ -19,10 +19,10 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
+    - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
       if: inputs.enable-qemu == 'true'
-    - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
-    - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+    - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
+    - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
       with:
         username: ${{ inputs.dockerhub-username }}
         password: ${{ inputs.dockerhub-token }}

.github/actions/setup-sfw/action.yml

@@ -27,7 +27,7 @@ runs:
   using: "composite"
   steps:
     - if: ${{ inputs.python == 'true' || inputs.uv == 'true' }}
-      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
       with:
         python-version: "3.12"
 

.github/workflows/release.yml

@@ -66,7 +66,7 @@ jobs:
 
       - name: Publish to PyPI
         if: steps.version_check.outputs.pypi_exists != 'true'
-        uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # v1.14.1
+        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
 
       - name: Set up Docker publishing
         uses: ./.github/actions/setup-docker

pyproject.toml

@@ -40,18 +40,18 @@ classifiers = [
 
 [project.optional-dependencies]
 test = [
-    "pytest>=7.4.0",
-    "pytest-cov>=4.1.0",
-    "pytest-mock>=3.12.0",
-    "pytest-asyncio>=0.23.0",
-    "pytest-watch >=4.2.0"
+    "pytest==9.1.1",
+    "pytest-cov==7.1.0",
+    "pytest-mock==3.15.1",
+    "pytest-asyncio==1.4.0",
+    "pytest-watch==4.2.0"
 ]
 dev = [
-    "ruff>=0.3.0",
-    "twine", # for building
-    "uv>=0.1.0",  # for dependency management
-    "pre-commit",
-    "hatch"
+    "ruff==0.16.1",
+    "twine==7.0.0", # for building
+    "uv==0.12.0",  # for dependency management
+    "pre-commit==4.6.1",
+    "hatch==1.17.1"
 ]
 
 [project.scripts]