From 1fd8f1646bc8bd76e6a08a8c2793a6ca424b06c0 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 2 Nov 2026 00:36:13 +0000
Subject: [PATCH] ci(deps): update non-major dependencies

---
 .github/workflows/agent-quality.yml |   4 +-
 .github/workflows/ci.yml            |  12 +-
 .github/workflows/cli-interface.yml |   2 +-
 .github/workflows/codeql.yml        |   4 +-
 .github/workflows/conda-forge.yml   |   2 +-
 .github/workflows/docs.yml          |   2 +-
 .github/workflows/mutation.yml      |   2 +-
 .github/workflows/pip-audit.yml     |   2 +-
 .github/workflows/release.yml       |   4 +-
 .github/workflows/repo-eval.yml     |   6 +-
 .github/workflows/scorecard.yml     |   2 +-
 .github/workflows/stack-health.yml  |   2 +-
 dokimi/requirements-ci.lock.txt     |  40 +++---
 dokimi/requirements-ci.txt          |   2 +-
 dokimi/requirements.lock.txt        | 194 ++++++++++++++--------------
 15 files changed, 143 insertions(+), 137 deletions(-)

diff --git a/.github/workflows/agent-quality.yml b/.github/workflows/agent-quality.yml
index 6f42eb7c4..eab787e98 100644
--- a/.github/workflows/agent-quality.yml
+++ b/.github/workflows/agent-quality.yml
@@ -132,7 +132,7 @@ jobs:
           # A here-string, not a pipe: grep -q may exit early, and under pipefail the pipe's printf would get SIGPIPE.
           if grep -qvE "$DOCS" <<< "$files"; then set_code true "$scope changes code"; exit 0; fi
           set_code false "$scope changes only documentation"
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         if: steps.changes.outputs.code == 'true'
         with:
           python-version: '3.13'
@@ -211,7 +211,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: '3.13'
           cache: pip
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index dc4abe517..bec3e6bfc 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -56,7 +56,7 @@ jobs:
         with:
           persist-credentials: false
           fetch-depth: 0
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: '3.13'
       # The tools, hash-locked in dokimi/requirements-ci.lock.txt (input:
@@ -245,7 +245,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: '3.13'
           cache: pip
@@ -308,7 +308,7 @@ jobs:
           # Full history on the coverage leg only: the changed-lines gate diffs
           # against the base branch. The other legs need the tree alone.
           fetch-depth: ${{ matrix.coverage && '0' || '1' }}
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: ${{ matrix.python-version }}
           cache: pip
@@ -396,7 +396,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: '3.13'
       # The `[ragas]` extra is not in requirements.txt or the lock; this job is
@@ -428,7 +428,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: ${{ matrix.python-version }}
           # Downloads and built wheels only: pip still resolves the ranges fresh.
@@ -471,7 +471,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: '3.13'
           cache: pip
diff --git a/.github/workflows/cli-interface.yml b/.github/workflows/cli-interface.yml
index efb0c3db0..9667489c7 100644
--- a/.github/workflows/cli-interface.yml
+++ b/.github/workflows/cli-interface.yml
@@ -50,7 +50,7 @@ jobs:
         with:
           persist-credentials: false
           fetch-depth: 0
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: '3.13'
       - name: Install dependencies
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index c59408bc8..4a196b00e 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -46,10 +46,10 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
-      - uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee  # v4.39.0
+      - uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370  # v4.39.1
         with:
           languages: ${{ matrix.language }}
           build-mode: none
-      - uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee  # v4.39.0
+      - uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370  # v4.39.1
         with:
           category: /language:${{ matrix.language }}
diff --git a/.github/workflows/conda-forge.yml b/.github/workflows/conda-forge.yml
index ba0c31b91..c4850f4a9 100644
--- a/.github/workflows/conda-forge.yml
+++ b/.github/workflows/conda-forge.yml
@@ -52,7 +52,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: '3.13'
       # The micromamba binary only: no environment-name, so the action creates
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 38285d8fc..6e730862d 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -56,7 +56,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: '3.13'  # ci.yml's single-version Python
           cache: pip
diff --git a/.github/workflows/mutation.yml b/.github/workflows/mutation.yml
index 71a950765..5c12a86c3 100644
--- a/.github/workflows/mutation.yml
+++ b/.github/workflows/mutation.yml
@@ -30,7 +30,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: '3.13'
           cache: pip
diff --git a/.github/workflows/pip-audit.yml b/.github/workflows/pip-audit.yml
index f021559a3..302dd15d1 100644
--- a/.github/workflows/pip-audit.yml
+++ b/.github/workflows/pip-audit.yml
@@ -42,7 +42,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: '3.13'
       # pip-audit comes from the hash-locked tools lock (requirements-ci.txt pins it).
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0ca000a62..cee209cec 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -43,7 +43,7 @@ jobs:
           # if the tag does not exist).
           ref: ${{ inputs.tag && format('refs/tags/{0}', inputs.tag) || '' }}
           persist-credentials: false
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: '3.13'
       - name: Release readiness
@@ -116,4 +116,4 @@ jobs:
         with:
           name: dist
           path: dist
-      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33  # v1.14.2
+      - uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086  # v1.14.3
diff --git a/.github/workflows/repo-eval.yml b/.github/workflows/repo-eval.yml
index a44766dc0..2a0203308 100644
--- a/.github/workflows/repo-eval.yml
+++ b/.github/workflows/repo-eval.yml
@@ -117,7 +117,7 @@ jobs:
         with:
           persist-credentials: false
           fetch-depth: 0
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: '3.13'
       # A SHA is taken as it is; a tag is resolved to the commit it names, so the
@@ -294,7 +294,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: '3.13'
       - name: Install dokimi
@@ -362,7 +362,7 @@ jobs:
         with:
           persist-credentials: false
           fetch-depth: 0
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: '3.13'
       - name: Install dokimi
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 7cc736879..8df7b896c 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -55,7 +55,7 @@ jobs:
           name: scorecard-sarif
           path: results.sarif
           retention-days: 5
-      - uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee  # v4.39.0
+      - uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370  # v4.39.1
         with:
           sarif_file: results.sarif
           category: scorecard
diff --git a/.github/workflows/stack-health.yml b/.github/workflows/stack-health.yml
index c2147dcd3..34f6e1563 100644
--- a/.github/workflows/stack-health.yml
+++ b/.github/workflows/stack-health.yml
@@ -26,7 +26,7 @@ jobs:
         with:
           persist-credentials: false
           fetch-depth: 0
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
+      - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: '3.13'
       - name: Report
diff --git a/dokimi/requirements-ci.lock.txt b/dokimi/requirements-ci.lock.txt
index 9bf3e7a9e..a067a2a58 100644
--- a/dokimi/requirements-ci.lock.txt
+++ b/dokimi/requirements-ci.lock.txt
@@ -1589,26 +1589,26 @@ urllib3==2.8.0 \
     #   id
     #   requests
     #   twine
-uv==0.13.4 \
-    --hash=sha256:05e4332791b4d55b6dde8695b7fa6079b26991519f44760887c5dfbd5ca4fe53 \
-    --hash=sha256:205a4f93e568fb24f45a2f3834f1c0a8f1adb5f396bf473c71030ed707dce048 \
-    --hash=sha256:25cc14ff4fd8335d3be2cc493a621a003fdafcb0fb1c953c905daabe4def5ab8 \
-    --hash=sha256:3a9dcb6762c3ba249d8c084315ba03839082af3ece3536cc4164ec735c351d68 \
-    --hash=sha256:4e6b08578c920b86910897f36bb6da7229c8e7e0187976570e2a538cb28b777e \
-    --hash=sha256:52b5c753a7c2d5f8323a70bb4c93118988356331d0758afa6446c81f974e7196 \
-    --hash=sha256:5d89d1028c2e22977d9215cbb79cfe12559cb0c8a507a12e2f3a7e47930cf1bf \
-    --hash=sha256:77062b02856c74697f48328d8a6583ab07e6da0a993e86c2db46f3d1da27c637 \
-    --hash=sha256:7b3cdf868e5415631fe797b648c0d6945d38d388f23367bdd0b6332e80a1fcb0 \
-    --hash=sha256:8ae6ff2b07892379dc767c9064c2b8bbfac88e767edac7ce28e1b0f15d86abb4 \
-    --hash=sha256:95f4eb2b991b53b50ec2b18ab612fca8ba1e7a75a47af0331fb8bcd21da3eb03 \
-    --hash=sha256:b0bff5b9a5061f7a35b1d0c1a94c19af134222c48eb7aadc42f85a038be1b248 \
-    --hash=sha256:b2ff80397273fff0e02c20eacae6882834c811827d6fc08f658db156fe754386 \
-    --hash=sha256:b4bbacea78c9db136cd2ec3147cbfd9ed910b4db5e1877109bd74d0e73bb2eaf \
-    --hash=sha256:d333f01852b817ba05612de31474739da1af7e5463d119b30a9c4331eba1f408 \
-    --hash=sha256:d86a5dec8ab30c70519c71ca5085c8aaf28664836cbc600951cedaa3fc678cbf \
-    --hash=sha256:deffa5a4afdb48f3e44fb26e80377d256b330ddcad0373daff4b54f6162b43a4 \
-    --hash=sha256:e90ab42825587821096cb0d071e387468da38cfa22818c91f9c0b3c0453048e8 \
-    --hash=sha256:fb0e2028d9a8929884344afb7d91d0f65d9783f640d28aede89fca3602bedde9
+uv==0.13.5 \
+    --hash=sha256:0548460d46c8667488b1f089e936f29f0edfb1cc753f9152ffbd8bc84a46aa20 \
+    --hash=sha256:0e03f5717bdaaf5ab4e2df361d2395e36b515946f56ef4bed88801aeb9959fb0 \
+    --hash=sha256:1fb29fc46ba12033e2ef95a95ac79d649e71bbb1358419bbbcbd19d86026ef2f \
+    --hash=sha256:2386c2dc9b59fc1d39b1c500e4319d71d3268232eb3b38e29cd6775d6269e8d4 \
+    --hash=sha256:2386e8dbfe110ff2f8ec8bd344dd18bf39eb9eb54e1edeeb87c3b85c34229cd3 \
+    --hash=sha256:309a74d3c488bfaa3ba7bff759da73193d8781729c0a01274f4940fd32bb5712 \
+    --hash=sha256:337a14829bb499e114989df4f908f134ff37f1fb6c33497541cfb05b28080e39 \
+    --hash=sha256:469cca66de1b17c75b9b9de806a64cffb57cba5e42b1e30d0bba6fa72a146f58 \
+    --hash=sha256:4f62680fe58c5a83fd539e38f1956c2b577b1f5939c9020aa4c7f0addda2f4ad \
+    --hash=sha256:8d092d07d2389909027c2ed4965ade1bd46bbcecceb26686ff40927684f8c457 \
+    --hash=sha256:91e58e304b63b6c91bac5561459ab0c3ea24f17bc01ea9359d69fed72142978f \
+    --hash=sha256:979409b8c9a78df140ffb19c53f511b7a73526da8d1d5e36558833055e371c6c \
+    --hash=sha256:a42c85fa8156e1e5e2cecdbc77bb818ea1dcf5f78b8e2a8f84c7fe4f16f0702e \
+    --hash=sha256:d162669e3a7811c584b03690eaa11e796ad1d309aa8229d5dfe3cbcd68a90400 \
+    --hash=sha256:d3fd5db55c20feb672ea457361aba29ab68b9ae69a14d98ad6c138b5f86dcca4 \
+    --hash=sha256:e01481ae5212e45ee7c85fad5fc67f06b0ee0329a7c3c289dc529da884b03881 \
+    --hash=sha256:f4e55a6e2a1089fe74ed50fbdf2df0f6f336ee148ad232b05932db5deee8007e \
+    --hash=sha256:f867c5ec24c563afaae730a13e46cdf74a1a0b64c134286ff99762a96e2abf40 \
+    --hash=sha256:fa8d26e08e34c29c0c4e820cf3181757086d547240b4f4d31ff1d8bd810ca946
     # via -r requirements-ci.txt
 virtualenv==21.14.13 \
     --hash=sha256:5fbb04138a4861580b78ba9110d529a26bc48fcc93c8ec36bc0202eeed96a788 \
diff --git a/dokimi/requirements-ci.txt b/dokimi/requirements-ci.txt
index 6a7b8926a..4c46ef59c 100644
--- a/dokimi/requirements-ci.txt
+++ b/dokimi/requirements-ci.txt
@@ -24,4 +24,4 @@ build
 # build with --no-isolation, so setuptools comes from this lock, hashed, not from PyPI.
 setuptools
 twine
-uv==0.13.4
+uv==0.13.5
diff --git a/dokimi/requirements.lock.txt b/dokimi/requirements.lock.txt
index 24aa39e0b..9924f2207 100644
--- a/dokimi/requirements.lock.txt
+++ b/dokimi/requirements.lock.txt
@@ -190,13 +190,13 @@ attrs==26.1.0 \
     #   aiohttp
     #   jsonschema
     #   referencing
-boto3==1.43.109 \
-    --hash=sha256:703a81baed186d31e27cf50065d25a9faeb704f009e7c56b0f002ca52a328896 \
-    --hash=sha256:c829bc3352e1e3922d8fe1db10b697182ac411b64ce5fc3acb0a06a29837417e
+boto3==1.43.118 \
+    --hash=sha256:ab8f3d2c622ef039338b4f228d97ea55f1abd573d84bb9b9a5ee8cb6780c0ccd \
+    --hash=sha256:c0620f799e0f0c222ba42c337b65cdbcd3da38a3121187f634d8926cbbb28a9c
     # via litellm
-botocore==1.43.109 \
-    --hash=sha256:46b15bea4d942aaea6d7ab7c4b8a3a7290305064a3b41a6cb271cde9da3ba371 \
-    --hash=sha256:cd00edff465264fb448e36acc9ee29a828f738fff3746270b3f685a19194a5a6
+botocore==1.43.118 \
+    --hash=sha256:7f3f9d88cc9e847587690f82a42e3c3c292c3026c92c1e60d68a9310018e003f \
+    --hash=sha256:a45d7ae570674161e4a3542d8c68633bf7503f92d1de781ef7361b79488eda6f
     # via
     #   boto3
     #   s3transfer
@@ -206,6 +206,7 @@ certifi==2026.10.19 \
     # via
     #   httpcore
     #   httpx
+    #   litellm
     #   requests
 cffi==2.1.1 ; platform_python_implementation != 'PyPy' \
     --hash=sha256:046bfc24911b37851ee1b51aab8bffe713d89c68c6a057b09484ce9fd5f69b4e \
@@ -1033,85 +1034,90 @@ hyperframe==6.1.0 \
     --hash=sha256:b03380493a519fce58ea5af42e4a42317bf9bd425596f7a0835ffce80f1a42e5 \
     --hash=sha256:f630908a00854a7adeabd6382b43923a4c4cd4b821fcb527e6ab9e15382a3b08
     # via h2
-hypothesis==6.170.1 \
-    --hash=sha256:0029ebe0254225c6ed09e8c9af72615a8aead8b9e0b9dbfe090f900091128bbe \
-    --hash=sha256:053b9caf23fa67c794e4e97bb5e1227a2df4458ea7c90df6709b32526da34d1c \
-    --hash=sha256:06eb369864d57f62a949ffa5e739a633fd04d6fec5720007fa2a2bcada3fb3e1 \
-    --hash=sha256:0a174a2e035e6482a8c16a4d91e4cc5f6dcdebd8863975f3d8fe05530c34892e \
-    --hash=sha256:122592adc790761f36ee7c4cae5d0f6dc9bcdb4fbc67da831182344c000ff8bb \
-    --hash=sha256:13018543d7b34be035a0c23d81f00b72ac2e95c9c85794dcbfed47fa6a1c7615 \
-    --hash=sha256:145ed887aecddb256c9411d25732667205d799a7d7a1684433837a83f85bb98d \
-    --hash=sha256:17879d8552e229c63d90a030bd532f39d0a83cbb627972cd2b1844aaa202a4ab \
-    --hash=sha256:18a134b71da8088606aaa05ffc2c3914a63ccf79d46b3254dc79b5ef64558eee \
-    --hash=sha256:18ba438f706d361ea9ac2de7b769ca25881d4cf00e3feee2b891e9fe3de8ede3 \
-    --hash=sha256:1a006851707ea7515b62c5a03e23296bf09e34112f0cb5a3ae9f30859cdbb4c8 \
-    --hash=sha256:1a2dabb1d6c353754f6389405a22213df7515bbeaeeb5906c36c2e82e445b9f7 \
-    --hash=sha256:1cf7690f49ae7922ee492a25bea6c23848a7f9a6e13613e9f90d1deebe9dc259 \
-    --hash=sha256:20be39e51b82aefbf18046db1eee980bc42c4ef51acd0d354b3ae692665bca49 \
-    --hash=sha256:23c5902e448c88170da7e41106f5385afaf8212296a0d8bdfcdda7120c94ac67 \
-    --hash=sha256:26547b7c21d6d79ccb9bc5e0049ac1d658271e4a51d46939649ee1a5c9b05a25 \
-    --hash=sha256:267a6bab1d4d1507436aa1b29c6a6c803bc7b9319a53d05ab22d3333931b23e9 \
-    --hash=sha256:2ce83bda98f8e440a72160a7e88cf1e1a56dffe13257674634e286ac3dd1c08a \
-    --hash=sha256:2e935a2e56ec685c4d77e4f3b5f8e15399e963affcd7a8294c387b9a631af73a \
-    --hash=sha256:301e5df534b8d15d57e0e396006ad86be0dbd88f51f869a3748ec71d7f65cbe8 \
-    --hash=sha256:30934f50e0ed702d2587a678654429dfde2715ab3816cbc4fa98bc44bb9afd40 \
-    --hash=sha256:321522b7cc2872acebd65161bfeed4ef86a7034a64f049b072eac7e79502598f \
-    --hash=sha256:33dedc326fed1cc7c0c9516ce8242d10555548d758d0c33596e44ae0751d07a0 \
-    --hash=sha256:3da1275beae2a1b55fa22898c64f48d1bf5f9c4989210bc55ba7db616415c4ce \
-    --hash=sha256:4192f0950603f1c68f57888244b2a23141050f747db8dc67e76ca7e98f959ce3 \
-    --hash=sha256:42d4c4941d525d11a40343544066c3aed62fff1b1c5ca7273276c8d3f765cfe9 \
-    --hash=sha256:4374786217336d3fa330a05f0ae5bca6b3c44faff5da0fab1dec4ea5d65a92db \
-    --hash=sha256:45da111e2f8f8e34bf3652dd9b4bbc2aebe0403089c56e96f99c3a5895d17840 \
-    --hash=sha256:474db1373058df30b3645ed0558b500d4f7ece7635178ea3910e4558ef188fcd \
-    --hash=sha256:4fbfaa122cd4e451f83f8bf86f02fda6029355869084bcbc944cb9afa406f632 \
-    --hash=sha256:61fdcf062bd0e6524195f1722164918e4cb02cea16d15afa0fe1ba9bf03bbe16 \
-    --hash=sha256:6377456a522fb23784f56aa9f93c1b660cefdbecf642a91c730fd688adb0fa40 \
-    --hash=sha256:64ee5038df772afeb08274f309151d3637eb70dd10e7d2ca48278f9b5217d427 \
-    --hash=sha256:65ee2eef76cccaa51a1365829a9b7337a79d722c294ff56ae0affe702178bf20 \
-    --hash=sha256:6641e78a823f6cd50cd608fb3fc1ba8addf8d24080380e09407551e8410bd6b3 \
-    --hash=sha256:6694f6f8b22d1d37b501e9300a2d47d0c46549180ded39ec636f14873bae4d40 \
-    --hash=sha256:66e97cf9b1eab169b9f896a03219d9906219a2dfad0d4f0e03674476f311597a \
-    --hash=sha256:6c15cefed05f7f7a682c3fd6d33b1667491ab6fb66289e77d204685e3db6661a \
-    --hash=sha256:6cb263b857da574791b97d7a7ef2c648508c42655808267483bdae97536a2c03 \
-    --hash=sha256:74ba044bee849ea5993b86606defee93b11b075270bbd3a63a16595c150f7a77 \
-    --hash=sha256:756c1a14d853ea1598aec96bc20d62fed9b0ccf79946121cfe64a8c1e213c671 \
-    --hash=sha256:7d68243fc960e2a5f202ac978ee45b2a7e92d41b9e4c1bca59a5948a1c922700 \
-    --hash=sha256:804f35f16c2232c800e4755d74704f1168a10d2ceed176e08361f6ccccd235f0 \
-    --hash=sha256:80a6eac4b7d255f2ee30c8e430b0f76e3073cd6598672ad4184eee0992ec9b4e \
-    --hash=sha256:8cf4a2e5c162a5bcbfa468c9466b2f63730a20648c2b26587d8226b371badd92 \
-    --hash=sha256:8feadd37ea8aebb73be6439bf9cfb939de3019b68c9589d5bef17661fa032de4 \
-    --hash=sha256:94ada8c2ffb27e792811248be916b839549d0f165f67d5f29f81947ad2388397 \
-    --hash=sha256:9847ca75cfd3f7b216fce3f0249462f4546856ab80b374b3b924475923d30a40 \
-    --hash=sha256:985d005a54061620047b9bf7d93b9380d0bcff5f7fb7601b98efb81541923363 \
-    --hash=sha256:988061b6a7e4ddf124ca5bd52ab45cf0bfe93915c09dcce40e3e2e00b9cab682 \
-    --hash=sha256:9ad1b2e74a3eb8c8812477cc6c907d0c3c4c8f92d9b50a5ec12d666d33c537a2 \
-    --hash=sha256:9c0c2135c977cbae2a8612d8d6d3468b4de21eaf8b5b2461200fd008421c8053 \
-    --hash=sha256:9c1b478fde40e9f4fdd46667c800c523944db73aa7be69f0596f405f433afd36 \
-    --hash=sha256:9f647b5f42d3238773f2388234b62ece817379d26b03d71e05a164224c9a636c \
-    --hash=sha256:a12e6f79d7ed5342f3e0165a30da04c32b986d03a187dad82c6f86382f968703 \
-    --hash=sha256:a916623adb9e44d4e4299b8bdfcfe372e3817632f0c1598a22a7e3bd42aa554b \
-    --hash=sha256:aa85e14fcf88d4cb9dec429cb633feb1ac8e94f1901ff661349405b8e679c5c6 \
-    --hash=sha256:ae4e46d1a5b6172d1f77d7ba3c44a05a9a8e54c27541c0730c1cf4987481a685 \
-    --hash=sha256:b07e4522763e1e9ee0363eeb74b44eda27c1fbf538ebc1dea9583f0b8107be12 \
-    --hash=sha256:b25578a64b07c3f551709549e150f2ca7ad756a94378508822c6389cd07b7ae6 \
-    --hash=sha256:b632f06092224a909543e4037d4f55c791ff1afdcbb31c1b6b283e9a22435361 \
-    --hash=sha256:b69f76bf1bbbeadc960e43b286e8968cc5c442e346e5b1d393487c05f53e9f7a \
-    --hash=sha256:bdf190cf0f19b0d6a9fa8150d949fff75afefb0a6969690701e4d7fcace2d6a5 \
-    --hash=sha256:be07bf11adcf7b37536a4c893b63d34af95e358966de1232a5711c0193b04a59 \
-    --hash=sha256:cd35b966e21ae0097ef216c1e7762c973ad55bb25f8f852a0e622621aec3e131 \
-    --hash=sha256:cfdffc5ebd986725fe551f3431980d77dd149bf622619af9b8e7da78dbdf3a38 \
-    --hash=sha256:d832f8977d8b568586c3078ca9700855b21a590e4c558d71d84fb47512175431 \
-    --hash=sha256:d9cc3a4ef49014897d3a3919bb5728f347f89ba4cb495057fed6d24b6b9fdff0 \
-    --hash=sha256:da45db70cd60f74524400c2cd91260c6a5afdfa66f751eaa2a7ea9bafeb80dce \
-    --hash=sha256:dcc6b2f974a9658ea66c33cbc9536b8d8a00a52ff9c302a0850d1153a86b0522 \
-    --hash=sha256:e35a7e2b2781b79024abebbaf54d766d88728c309141982c48e382b1aaeef3b5 \
-    --hash=sha256:e7426d21b4897ddd91f361458d4a8c8a7fa9b2eafe17d0db0311b3f17a093b17 \
-    --hash=sha256:e8193b1cdc1d5dd264d958497f4ee9911714586e1df4e60e3f03a9af2112656e \
-    --hash=sha256:eee2d7bf96ede692b694da1a7b038f4744e592be5add40bf1a2817feb9c72354 \
-    --hash=sha256:f0d4353e2333e3e502853830c07733b0fa952f65b27b4ef58ac7f3e1ca09079a \
-    --hash=sha256:f10b19eff9daff21e8d07552de36e9f447009994946a223bc32da21cd0dbd196 \
-    --hash=sha256:f6f783c7124e96f64fc4bdf899dee651758088c2328bf0129f6614c63e273d34 \
-    --hash=sha256:fc288207cc92193f7dad5f780da99b8c1d5d099d168acb13bda32f209a3d90df
+hypothesis==6.170.10 \
+    --hash=sha256:059fe8f22b2f5ec2f631641a8936f5e1cfeee3f510d5ff646d628cb63914d80e \
+    --hash=sha256:074c12733616a7cbe69fcd199520c2d778638f2c6e9933177c5840cfd88b8968 \
+    --hash=sha256:0b259b5c779a56e9c2c164d8fc498eb09402fc770d356fcfdf9e0164cc8d1c9e \
+    --hash=sha256:0e1778767f512485d5bb4f22e086ebac1b9c8c722e5050e67e3e23c0babde4b3 \
+    --hash=sha256:0f4975e1b99ede6050dc29e2f7cb7bc54bec16ed36d09ad4952a033724eab808 \
+    --hash=sha256:145db7cc76dcea97610763322fc524a59755a223c9917f204edc2b764c1ee16e \
+    --hash=sha256:16692bd55e9238c0e135ec69a878ce428eb8fa4105d263ba368579cbb03c9664 \
+    --hash=sha256:1b9c9094d700da8a3b93d1215f38c5b296668a6c06abe289b0e1d9cf27c7dde8 \
+    --hash=sha256:1fc68bacd358f50796b5f99fa7251dd79a44f87b8380b5004ab04c02c13e9fc8 \
+    --hash=sha256:22477187d1192fd257296a111ebb11d47d3604c157de3bce37743db2672e8169 \
+    --hash=sha256:247913bc67df4254685981d38ebbb457c0e2774e75b4df05c20ef22794dbdc82 \
+    --hash=sha256:25392de32e25cd96225120f47c43ece4acc649231a329ee22fe0ee96d607935f \
+    --hash=sha256:27591f7b18c0cc9e8cafb8e49d1b96dd8e8b2f196313ec30bcc24df82d6b3b17 \
+    --hash=sha256:281c5e350de077d8966848ab06627cd1409e4af75b6469edd2a69b667cd9bfc6 \
+    --hash=sha256:2c284832e23a3bc3c3bbb3952990c763f5500993af94b486bf0c8645f0f7ae05 \
+    --hash=sha256:30755b74dae730e5ef6adea63489fcc024442cb33229325b2499c34fbe79f130 \
+    --hash=sha256:318c6182ee8804d320a9e65c58c86b38765b3957f218633989dbb44f499bb63b \
+    --hash=sha256:3496eba28636a9261eb2536069781c70a9a2e4bd05a19e9bca7fdf816330661b \
+    --hash=sha256:362643097168042599fe1a74bc0fa9f90e00319db1b2aa5235372ddae2c2760b \
+    --hash=sha256:377e36d334b089227c6a0caf096deaa6c5de5793845c8af19466aa59875c6ed7 \
+    --hash=sha256:37bc4d1042520a22ff1decfc544a563db9a480d02dd579412c40aebe97486dbc \
+    --hash=sha256:3d5853c0e45f7cfd7efcaba541f8a79e96713faabe63b4927dc29a388e446462 \
+    --hash=sha256:3eb66c1fd2c32397677e0b02525af076f71412ed79f313fb87f8c3787c1acbce \
+    --hash=sha256:4348e9a7cd22deb1b48efc3be6bf14ce1e4d91017f9e92ce0271eb4258f92f86 \
+    --hash=sha256:4548644c949b0f07e2abc6f046c494aec996c2a4f6dd922edf81439ffa921d38 \
+    --hash=sha256:45748b17b51590f2e3a9521b287b8656653a09f501a48d19c3faf1a93786ea5b \
+    --hash=sha256:49696d2eab15995e1c8a8123ab50caa8461ab8ef3d1888130af20d6b148bf0a6 \
+    --hash=sha256:4fbe7d081fb965020dd8310edf509f81320a7e313441f6cf64c76cfd4ae717d4 \
+    --hash=sha256:5229be344bb054251dcdd065183b241cdb5e0feae41c1e674b1071581fd52adc \
+    --hash=sha256:58c0e0f4b4ce8c1f9ca65076985cdc444934e705d45bafb26085a11c9f85d545 \
+    --hash=sha256:59334fff27ee8c35eee5735e5fbc368ebbbd06ead38aee35f43d3169df492a49 \
+    --hash=sha256:5c90f2a34c2451aa7c7646f3adc36f85f83fdbe9fe2d2e8b9e09c109ff94057b \
+    --hash=sha256:5e67813166a335e75a61c4071fd366059a504da3f7362bc23f929ea68d1ce11b \
+    --hash=sha256:60d374756b91f6704612d545727e307f32a2cdefd2486f2e07ec8ce84500d4d2 \
+    --hash=sha256:61fc2e6c1eeed3574f53bd601416ca62bb2df3b911f8c48e5ea45614ccfc24d7 \
+    --hash=sha256:62ce90fe5908f9a25db689ff0a7b9430d0e59f6248f54b175acbd80feb1dd388 \
+    --hash=sha256:6306c29a3ec7d2a7362259cfee1b28b5accab30fc730cf0212bfbab1f705e1b5 \
+    --hash=sha256:63b62d761fc416337a7b0d53d659ce2b39d452ef2436720361a9b62433f4ea8a \
+    --hash=sha256:6598ed2ca654f368f705ede06581bd51fe1271cc4435e53f68eae04d999935d6 \
+    --hash=sha256:66e7062b270050059991379bbc32c4ede385e7d017d097417de90871d8b24956 \
+    --hash=sha256:66e98e32434d95ff7a920e15999d7ba99ecdc8feb7507308326fa8b98bba505a \
+    --hash=sha256:673522a2e64e87ec6d262c60abaeb54e8fa9ec3fee89bd437ec729a08fee6d9c \
+    --hash=sha256:6af4bafcb620340af92c7bc2a51a8f8bfa4bf4c30b4b41bec5d9b9bf50a1421f \
+    --hash=sha256:6bdf0a28d14137b8e9ed2df27d9fe14b1bb19f70fa185de768ca9e4e63b0ba86 \
+    --hash=sha256:7781fc8d31266d510625d0bc268f71ff62ffce27e9475cbd99de32f2c2f2b7e5 \
+    --hash=sha256:7944698604f072fbe548b9431fbd1da2ab379dba59a49a8c89e8b469cc75528c \
+    --hash=sha256:7ae9353ea0735b8742b7987263a35fc5d4639da867da899ebac7378586b121f4 \
+    --hash=sha256:7d4131bf514ed35728fe48026bd22df1bb13818d2eaf78b6096c85ba4b43657d \
+    --hash=sha256:851e719b58745e04f54a6e2f3a4baff7fb2634084ea631c2a0e91b14899c5951 \
+    --hash=sha256:87b9d12556ab76ab3e93266baf8e15553947480429449ecb4350cfb015ffc278 \
+    --hash=sha256:8cc944e8f41f7b63dbb470ede33eb4a93fa2f5792628078dbf7fcf7963ab0a17 \
+    --hash=sha256:8ead4b7fcc1943228f3427f49196923db48e0a027d4414de24f5f0c4c85557b3 \
+    --hash=sha256:9dadab134befcdd90cbe1dc61b9f75962e1f3ba5d0938fe7e05dbb5a4931da0c \
+    --hash=sha256:9ecd315990409cbcb42e3e8d1efba7fadc476536a0b5a8fdce92645fb2b1834b \
+    --hash=sha256:a1f3b7959833850029d27154f7bcd9217899743418e6ad68418c8a99fc600b81 \
+    --hash=sha256:aba08c5c435aef7c775f0b8a29abea35d3c6a5103c18a94300b1c5907595fcd3 \
+    --hash=sha256:af4a81764fed05167d243ae1fb769c10b2f876a765d2feecf6b8fb94f08c1c9e \
+    --hash=sha256:b1051f0c017f893b74e89885df7651a74dac537cc21590cf83282bf50414d19d \
+    --hash=sha256:b2e2cc0f5fa45d98ced80b22edbbc8c75e459576328482d5867cd735c77c87c2 \
+    --hash=sha256:b36da9c5a62cb183557cedc26b09b8edc0732e89667d363b81227668d03d1833 \
+    --hash=sha256:b9d902ed51fe3752c5b80cad4363caa97f6de524a890538d16b46c8120b05b98 \
+    --hash=sha256:bd739e43e2c17c95eee447cb18210efe6b574a1eb98963487a91d04a320ff51f \
+    --hash=sha256:bdeec686f6ffd93ad1e4dc987f44ad7add94b87e70641161f6744b26decf49f9 \
+    --hash=sha256:c3a551f2ef55d8eb80f8a317d28a7d596e4efb3424fae6e2bf349a4f8b41fdac \
+    --hash=sha256:c7644883a95ea2b008377de6709f44d3b470da6bebee15c30ddec2961b24e42b \
+    --hash=sha256:c76ad3c16bf0255b54973b353c3f2820620295f660fd722fa5dacf0c63c15529 \
+    --hash=sha256:ca5c29ea3d8b52879185979065fc18f0344bd48c3d5605f17104319c8580411b \
+    --hash=sha256:cea039f0d2b3f5a17522b4930ba58a7378ac00d2b65d80c5f80eb9e9198cc025 \
+    --hash=sha256:d24cab5d8aba6d5123328bab7549db85c85dd643d9e447843fca0cd8aecda7c5 \
+    --hash=sha256:d9e9382fefd14dae873a9a1436e85123bfd734d4ae598f45adc847094d5e65db \
+    --hash=sha256:da06ca8faddbc1b0c2478a9ca7905e29468cb8b1c8c89b424b4bd33b0a953841 \
+    --hash=sha256:dfb4d083b37e487fa38c116c6bb59eff6040703cd0aa7c26d046d60017e430d1 \
+    --hash=sha256:e7202eafde1072da3391a5d1f7c6564e3a875fb772c1027e0da5eb525122d5b6 \
+    --hash=sha256:ea5c05a54dba10c850c7c8d61235aa2daa8d9b9014dde491c2547c43099bfb78 \
+    --hash=sha256:eb481aaadb630ed7e359a2ea3afe78620fc4dffc77cb72666e3d7f5c38461b9c \
+    --hash=sha256:ee86b110943f5e29da96e0c6b3574ea98a4d6558de9bfc68705b2c7e3b9f75d9 \
+    --hash=sha256:f1c88fff8605db4729458c6578f7ef5ca081073565aad6300266120b086ec560 \
+    --hash=sha256:f31798845add21ff3e026e6e974a0c399c2f70903115a623ebf8db4889f6fd90 \
+    --hash=sha256:f952aaf30bbd21e13e79b347c606fc5579fb7806963641db795082541d2f2a35 \
+    --hash=sha256:fb5bea198edecd5c575673cf684e8a3fa20c8f343ffe895555d0940b83a222d8 \
+    --hash=sha256:fd59b50cd1e562f180276a80a8fc1d51f5738846d71a53f0abba625b30230461 \
+    --hash=sha256:fd7d36ab2f10e477d937ef7b2ab64a8469137fa9ffd26f0149267a1339563a52 \
+    --hash=sha256:fdfbe9587f5937e943d63629978559c0b79ea6254faaafd63b18c09e473e43aa
     # via -r requirements-test.txt
 idna==3.20 \
     --hash=sha256:a7db850025b95ded1eae8a46181a1a6c56c92c96f0e2b005d9ff8dc0210cab44 \
@@ -1263,15 +1269,15 @@ jsonschema-specifications==2025.9.1 \
     --hash=sha256:98802fee3a11ee76ecaca44429fda8a41bff98b00a0f2838151b113f210cc6fe \
     --hash=sha256:b540987f239e745613c7a9176f3edb72b832a4ac465cf02712288397832b5e8d
     # via jsonschema
-litellm==1.106.0 \
-    --hash=sha256:5c84cc7d928cdb6ec57c5d87f221e3d27ca755958ebae389d5663f822b6f7a19 \
-    --hash=sha256:791625a05eb1481d14633d593c19dfaa4b91ad69ec9c3e0886a72855cd76c1d1 \
-    --hash=sha256:79bdfc1acb725e8ce75acfdb4913156a350faba835a39091338d320548e78593 \
-    --hash=sha256:8a4ef54208bd36295fefae37004846edc23e20640803e81abddb02e073aa6ab6 \
-    --hash=sha256:a570458fbfd3d760f8e8176bf67e3519c380894324425723ac0e843d94e812f0 \
-    --hash=sha256:bae66b279ad1043471acfe6ed5a31b6b4cebf39eb309fa46a5c0ab6c69a00105 \
-    --hash=sha256:eeb604f06c27ab5373e2e05e4c1f14980fd87de3a09bd9a9dc2ddab7069bd34e \
-    --hash=sha256:f1c5de99aa3c8ce6fa5b0b940a701b219714db47ce406b194fe530712eb7b9aa
+litellm==1.106.4 \
+    --hash=sha256:1c2b7d072a47c3f04032764d8143ed6ade8c354a331f4ad5ab9b9d5b1ba2dd4c \
+    --hash=sha256:1dc78af5a710715b1807a73d1b378d4d1fd82a4f4a13e45179b76287cbbabba9 \
+    --hash=sha256:7dd40a6c2a495bdf0b80151d140c8b65fe77f7fecadef989c244d78c646c3a97 \
+    --hash=sha256:9ea61a1660528d5d72459acefa38762de3bda3c20fe1f44eab674ec3b72f9238 \
+    --hash=sha256:9f36a1d4a58fec0286e87f1bae5eab2819077b28efb9d77a310a0d78b4ae07f5 \
+    --hash=sha256:d4cd1c1cab5c1e7f32d6a06a74e88176575fcbf427e8a4b6a434207aca007fb4 \
+    --hash=sha256:f99a2c5615f26c7cb3b38b3d7657643d866852495a1d48b8c847b27cc1727949 \
+    --hash=sha256:fb5dbe12d8789cc8c44dcf6a7f76eeef5e219007384b6a0ac74b3784203c216c
     # via
     #   -r requirements-test.txt
     #   -r requirements.txt