Combined PRs

.github/workflows/codeql-analysis.yml

@@ -54,7 +54,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
+      uses: github/codeql-action/init@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -68,7 +68,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
+      uses: github/codeql-action/autobuild@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -81,6 +81,6 @@ jobs:
     #   ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
+      uses: github/codeql-action/analyze@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/zizmor.yml

@@ -28,7 +28,7 @@ jobs:
       - name: Run zizmor
         run: pipx run zizmor --format sarif . > results.sarif
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
+        uses: github/codeql-action/upload-sarif@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
         with:
           # Path to SARIF file relative to the root of the repository
           sarif_file: results.sarif

Dockerfile

@@ -3,7 +3,7 @@ ARG PYTHON_IMAGE_VERSION=3.13.5-slim-bookworm
 
 # First things first, we build an image which is where we're going to compile
 # our static assets with. We use this stage in development.
-FROM node:24.4.0-bookworm AS static-deps
+FROM node:24.4.1-bookworm AS static-deps
 
 WORKDIR /opt/warehouse/src/
 

requirements/deploy.in

@@ -1,2 +1,2 @@
 gunicorn==23.0.0
-ddtrace==3.10.2
+ddtrace==3.11.1

requirements/deploy.txt

@@ -8,68 +8,68 @@ bytecode==0.16.2 \
     --hash=sha256:0a7dea0387ec5cae5ec77578690c5ca7470c8a202c50ce64a426d86380cddd7f \
     --hash=sha256:f05020b6dc1f48cdadd946f7c3a03131ba0f312bd103767c5d75559de5c308f8
     # via ddtrace
-ddtrace==3.10.2 \
-    --hash=sha256:01a27b7306709acd5e9c9b6be5ed17b63529f6a588c5e96794f72d0d3ace9bb5 \
-    --hash=sha256:099a3d96dc8644accf740ed38cdd428598c706a18c68cb5a93b72dd694c843a7 \
-    --hash=sha256:0b79aed288a92fe2c08746678f754946cacb030db458424f16965cf9c10f553b \
-    --hash=sha256:0c8d31398cbfc50e742b4e5cb808d841636b0afc6c2e792894d262274acb172a \
-    --hash=sha256:0e4eb2da24364245a7621cad6585cc85038cd035ad600cc226772c5d216fa1a7 \
-    --hash=sha256:0f507e9fae08dfb4daefbe3e7d006700217e1ee09ebade2a68def7eb12c7ea4f \
-    --hash=sha256:116378e9273df04f6417d198288f23b652eb2ce6b0ae8d3873ba3f54e631a3cd \
-    --hash=sha256:177aeced4d72d5c2f3ff666c08c93381cf5b91823726e6c36d69eab911c8591a \
-    --hash=sha256:187daf47937c41855cb763584bd2c93867670fe5f79bd363fd50f29a134993fc \
-    --hash=sha256:1963cd9341310841945de29dd7112c9eddb1d1c955477a45910de15647211f10 \
-    --hash=sha256:1f7e0bbe40d8ce96da40e0a33b0f2937df8166187907f028837a9a5b91b93248 \
-    --hash=sha256:25153050982d7471e17a387701eb47408e328750649feb4b0f59f7ef84a716d0 \
-    --hash=sha256:25c1eeea0e70b1a8571b96a32f1304fddc29dd61bc1e2afeca5ebb9b0377a5c9 \
-    --hash=sha256:2c4d52cab57d240ac063d01cbe2ced6c49e3f5bc54604b5892c02d2a94faec4e \
-    --hash=sha256:2eb35c7f0df53fb7df1eea320ef22e9f81412e597a682957787272c6c5e1a475 \
-    --hash=sha256:2f54170194291bd093f1c8719be9803038d19fbb2a272386bc8cc1e7990a9117 \
-    --hash=sha256:30c38af11eeadd760b4ed73126348687497b9d9f81bda174550d9ca055c37ec1 \
-    --hash=sha256:321b2e1f8d448a28b5825b29867929efa30ce74f41e6271746962e069fe133bc \
-    --hash=sha256:3667827078f6c30e5c842b074f83341a86c9b29d22a8c52328c481d3a19af452 \
-    --hash=sha256:37cc3be6575d6172a8bd179cafc37592c13f0cce0102b221b6581e4864b0ad1a \
-    --hash=sha256:3b1397badcd7d441b11dc37dff2bdc7b96bd641ab49656a3f45a9ed59a7cd8a7 \
-    --hash=sha256:3fcec5affb7e14e18c501433fc36928452a93e262383ffaf10b61890aded9557 \
-    --hash=sha256:46afc63a056cdbcf0fc2ebed8804180a8e1029cf5a8beb3c11596b92dab2f21c \
-    --hash=sha256:552f1e968588915f6e8b5940a37bd8b0423f7e2de38dc448af111875a1ea1608 \
-    --hash=sha256:58c5b122016f9ca31e2e6792d2adb3bb3c47b09f87a5fd2190bbf767188af9f1 \
-    --hash=sha256:5d3512ba065eb2b23e59582b0e4a53e54a738e047ee92a844b0d995786f95b2c \
-    --hash=sha256:6d6a66043c26ec2e941e1b6a195a6b93aab220fed0ac00ea58d467449f75a319 \
-    --hash=sha256:6e84247f37bd0765ddf201fecb340461bbadfb1faa5ccaecfb64cb78ce14cd66 \
-    --hash=sha256:6ff0904e20077e0821b6a5f0747b9623ac820cc9ddaa1df8110eb6454c9e2dc5 \
-    --hash=sha256:7287fa48491c3f3effa9f299101091d9138ffbc8e29667af4d100186bf54793b \
-    --hash=sha256:7626b5791b27412f8bdb25e9bc6a6a4b12526e670c0ad8c6a7a65a42e73cdd9e \
-    --hash=sha256:79fc49153db5f237b7bf55a3e406dfffc5f5e6ebb932b27547ddcf251240d1c9 \
-    --hash=sha256:7d08d197fadc82c15de034c1a1575c3cf9de6d399acd456e99b858fbec23b37f \
-    --hash=sha256:7e06880a7384e163e2ec1de8a6db76a43f6e81519a9e9925b3fbda5d13ac0cbb \
-    --hash=sha256:7e5a71056c316e3e332acab01077b824a877484867d339bdbcf5aee316a0fb76 \
-    --hash=sha256:887de4156874c3da8924cd2e07eb5816f73ca6e95fa9e30fa201927464c49c19 \
-    --hash=sha256:8945f8a11bb3f3b9140c5c18ff13a388729488ccaac1ae8a6c11097c9cc2b9e0 \
-    --hash=sha256:94636505c762880dbe4f43bd85d351a2efd747121722c859110e454c31defbd3 \
-    --hash=sha256:9a1c17e361ed03bade97ef968e1e77705b25cbb0f64ce73bd8c413d4f89b47f8 \
-    --hash=sha256:b09bad2ef8b28e18d0cef1469c2e9568ea362a8eb5170e13bfdb397afab34bfd \
-    --hash=sha256:b3ab8ab9c41fc4718356b8581acc372b9d0245586749768a44ba4a426c897311 \
-    --hash=sha256:b9a3daf8294a51ccbdc63f13d8819a151e8c9a0ad314e416fe8f2c1f6ae7c0f6 \
-    --hash=sha256:c09c648f02d67069658e6fdfaea151ff1656153a11772c788807e1c97e280b23 \
-    --hash=sha256:c233784d4dc38dfba61ea4c0628e9704ffe5d4807bf3f6975f810d108ee51690 \
-    --hash=sha256:c8c0e813dae5e5efb865a7469d4829d2fef54759770c28727a3f5ac4a605ea53 \
-    --hash=sha256:cac39b508e664bac09413ce3b8de3973bf56265ffa6e32157f846889f68e92ff \
-    --hash=sha256:cb9b6309162265a4bbcb2fcd05e2114609e6c7df2a59e258a81924cae353cc93 \
-    --hash=sha256:d1ddf83df85991293dc2c4ba3d2fcdc08b34638e6beb93f7fec8c9a91b2cd56d \
-    --hash=sha256:d32cddde88b15c1df4955726120ab097f8ab69de36dcafb0aeeee316a7a75a31 \
-    --hash=sha256:d57315b42159d14ba493145048af2edb42b2bc542035edd135fd7605698bf2d0 \
-    --hash=sha256:da87062acd79ddba5686fa348bbb890aec96d5adbcaba6094ca26babfbcc1c15 \
-    --hash=sha256:dac945fcb92ffef337aac2b7de39fcae34c06ab18d47a212fcbddf9e7f94e241 \
-    --hash=sha256:dee9c5639e71f4186d39da16b2b875cbfd608cae499c2aabde4a1f9ae62364ba \
-    --hash=sha256:e10efd12085f799a4080755a426e4e2260e56b994a9783d93a06f3108aa34c7e \
-    --hash=sha256:e723d16d6905127b911a62b46998de8766ec2a2d0ff426e087b2c7ab2141ad31 \
-    --hash=sha256:eb6f6bc048fc4e1a65440afe45830e5b5a568fa0e03e23243c528ae570074713 \
-    --hash=sha256:ed4a3cb73f8839544f382d17b9de930e33e11e3341c22093dd92fdafcb637bb1 \
-    --hash=sha256:f06e83a005efba4e6817f4d894b2d4a5387d1e50b774eb0e43b8610f27779adf \
-    --hash=sha256:f6d3cb9d1afffa194f047506dc43d5740575c704176b14752b8887f45fb9fadd \
-    --hash=sha256:f8ad7e8ee8b77348f8b71b0c18def25b9446daa1693a07fdf5eeb64c4702e6cb \
-    --hash=sha256:ff0d8bc52a99ad04d1e75196d4b3ad3884d4d33600733acc414f9c09766fe5a3
+ddtrace==3.11.1 \
+    --hash=sha256:014bc387f0bea8e7cac9d7cb44a2bf90931819d1092681129c0e92f23de6f48d \
+    --hash=sha256:03b498cb758536bd84e2532aa3dcc7d17328aac8e8a13ad9462c5efdb3c5819a \
+    --hash=sha256:04f168443822a27776f46858717b3abc172fd5c7ee11e9cb9f2d59258f0e4467 \
+    --hash=sha256:0b1f19a41f09462f5bcf60097b218185f444991ea5ed0fe6f35e4ac801ac395b \
+    --hash=sha256:0b5987139f3c466ad3bf9205382fd6a01697e09edda96b535c3589d3dde6e830 \
+    --hash=sha256:0cecb32f822423635c132cf77b6f196261545fb1b1e29233372a104d348396ce \
+    --hash=sha256:117ac361adc47b828b1185e47562a781523ca7f4a99be02f047e441fdaca31ae \
+    --hash=sha256:145921c9bb43070af53e110f16585c455614e26b63acd1f0121e3e0289a49518 \
+    --hash=sha256:151cb4de5955b4ef0e745afef69296e7e726af4796f245c49c8166e677081f09 \
+    --hash=sha256:15e3c6efa35005ecc830e1d046b96943170404419d70b50fc0e0d2eb1eae5247 \
+    --hash=sha256:15ef9a07586f57db1651865bff9c083206bf88d33893ceaadd3e2905dc1a3e15 \
+    --hash=sha256:173c5e626f2cab113404df436a7e0046ac815494d45100d706989afe53c34bd5 \
+    --hash=sha256:2259fd6ac70086d32d935cfa206cd1005bbf041e8195e7c80a205f9afd3dac1e \
+    --hash=sha256:233acf3ac1901bb1b5df7ea67b7ab0617b930f574ccc416fee5710d38192a893 \
+    --hash=sha256:28fa66e0eaf7af935fde59c9ce02001fde607542e550cd5acbb28c021188801a \
+    --hash=sha256:2a1835491eaaa240cde28ac906d114b30fdfedb00beecf2d1d705da900962f5a \
+    --hash=sha256:311b5b9edf330231482987cf008052433365beb3811b1109d4ab89ea0906d8e1 \
+    --hash=sha256:34b0a6ce685eeca1883e3f8ea3258ea7709bd98555336cd59063ea5d27c00a32 \
+    --hash=sha256:364d380342a296ce785a12031af0119f335ff81baa8f859bd6d0df24f4e62e00 \
+    --hash=sha256:367714f199a810a5b0397f142ab95e2f0dd3d927de9c37dff93937a1b0a81477 \
+    --hash=sha256:38a45491165bbbefcb7083dcaa183c3b75742563eaefad1c54b012fd79418bbb \
+    --hash=sha256:43cc4664da33c32f138a705a76eea02ef2038b63101bcf7d75e3ad9354d1f0a9 \
+    --hash=sha256:464f5f7815935d5110dcf839172f7855d968f95e16bae68eebdb80e38df11420 \
+    --hash=sha256:4eaf90ac462137f81cde1710ba04ada1c350c8a9f471204c51f2803730efebe4 \
+    --hash=sha256:4fbcd059b6d89f20f02e44527e2f1d1f4f85ce9f0e104de1c57ff45c2fe6af75 \
+    --hash=sha256:53b793ff963b89d4612b4c5ae572c2cf9d7b068b2d66f4759aca872a77396e69 \
+    --hash=sha256:581899e9321b10ef7aa1c230058f9be04e7f0b015eb5ee7289d4b3d3015d3a1f \
+    --hash=sha256:618a710e6a89630e473e1bb88aaedd9981bfdc683fd2897b1da6d89c1927f1ac \
+    --hash=sha256:62f240ca4278204150624391a7cae33ef953136f0ec26ff622b0a57f78f32db2 \
+    --hash=sha256:6442c865565c808c138ed22b605da36841eec5774b54f5544061c1652842c979 \
+    --hash=sha256:6a2d93abff958f9225677c9221fe0e92d3b1895cd884cefaa7ef0220f4f30eb4 \
+    --hash=sha256:6f5ecb6b2d9f9fa8fd274ef2abd86ed4e703678edd5ecb0d73bbb104fc773e24 \
+    --hash=sha256:706b58b9591bd8fbffe92bc56927cdfef15ed3fdb64f107516f52a9bc2d74dbd \
+    --hash=sha256:738705fafe0fe13803f0e9a7a080c410f956bb9d9a58ee98ee59f33acc3bc273 \
+    --hash=sha256:73a58d473a73890651fa7c48754cf6ff44b5fec038b233a0fcec54707022e991 \
+    --hash=sha256:7bdc14f7fe037808e0ee8c25df3a665a0267511a97a37e38a9f893a8c30f1459 \
+    --hash=sha256:855dd7df5a6478cbef2d6fe88d84c0cce31edba950085bd9eb39431e8d70807f \
+    --hash=sha256:86b6077934a9e164595646ab16de25291a9d6b30a77cfe380e37cb9b371a1b4b \
+    --hash=sha256:8eaa1da5c3a8cc6e7800a624facd56e2446513d98f358cd68884babbb2ee2faf \
+    --hash=sha256:91ce000337affad4a0cfec51d5cf985d5d8a88780985f4a893bca284085364c2 \
+    --hash=sha256:9891f68daaaee5455a595fdaabfd02740bbd9bef59b51951ec091b4a5412dbfe \
+    --hash=sha256:9b235e7ef3f510762396e393380f9ae3432b9ef48b60b3a9c9b1cf685cb3179c \
+    --hash=sha256:9b46ed51f82bf1f563fc8319508a6e9f4f8c00a157230e99b96b698348ee254e \
+    --hash=sha256:a0f7f769bab0babca5bccd73468adcb8a3cde7a91b5447fd076371c9c502bca7 \
+    --hash=sha256:a204c8c935922208b8bd1dae999a954fb87027e00870f8667d4107daa50175a6 \
+    --hash=sha256:a79b1edb78063fcd7cfd81c77679c006cf5319bdba8a4e5854101a12114c2e5f \
+    --hash=sha256:a8cc4c9253932fdf7fde8686b91091e2f67129e9c783b85db35cffbcbbeb84b1 \
+    --hash=sha256:b337fb801e2d323aab0195f1954a18012423ac1d5591c294e0534c3ad413c542 \
+    --hash=sha256:ba7fb19505cbf31537e94b6ba08608c906e26c97f31d236791dbcd78e4fa79c9 \
+    --hash=sha256:c08a218fb42e168af81408f9d9ccfb4d1ba8cb7c1623473e0cc9bfb792a73086 \
+    --hash=sha256:c5adb89b167415d7b627532f23ee8888655bf6fc2da5c59ece8e5e3997ef7642 \
+    --hash=sha256:cd597485e461287d451b01fde15ed6dfec24fa07260e3f225a0091a1352aac12 \
+    --hash=sha256:cfa21abd17c8583f3243316d20ce91b8818ad0d1c219db35ead59f896778e3fd \
+    --hash=sha256:d433140669aa1b97f4bfc8d6ec08512c4f527e054dac847eacf773034facf774 \
+    --hash=sha256:eb8e4b9021476994d1ef5623408bfef8898d0acc8c73e8596d95c4bf97ab03bc \
+    --hash=sha256:ec0143c8a0aecfc062270ba41e4305b8a6987ca4f80a08532dd6957465926f4f \
+    --hash=sha256:ed23fa741afc6cde263fdf581afdb5cfbf5c6922fbd2ee385df08fa08f504fe4 \
+    --hash=sha256:ed7d0f9bafd6eb098870fa20efa98eacc22c04ff1db79eb6c2c279823a54cbd9 \
+    --hash=sha256:f30b36e4a94070582ef3102ca9fe9ef7245ea540bb1b883f52085113d3d79be5 \
+    --hash=sha256:f3145e4c28cebd57c71b43b708ae7ac566b01661a5b8c5d999039a541e0e1801 \
+    --hash=sha256:fef4c8dfcb3fc0575624653991015ea6060e40b60da05f83b0bae04f93807126
     # via -r requirements/deploy.in
 envier==0.6.1 \
     --hash=sha256:3309a01bb3d8850c9e7a31a5166d5a836846db2faecb79b9cb32654dd50ca9f9 \
@@ -87,9 +87,9 @@ legacy-cgi==2.6.3 \
     --hash=sha256:4c119d6cb8e9d8b6ad7cc0ddad880552c62df4029622835d06dfd18f438a8154 \
     --hash=sha256:6df2ea5ae14c71ef6f097f8b6372b44f6685283dc018535a75c924564183cdab
     # via ddtrace
-opentelemetry-api==1.35.0 \
-    --hash=sha256:a111b959bcfa5b4d7dffc2fbd6a241aa72dd78dd8e79b5b1662bda896c5d2ffe \
-    --hash=sha256:c4ea7e258a244858daf18474625e9cc0149b8ee354f37843415771a40c25ee06
+opentelemetry-api==1.36.0 \
+    --hash=sha256:02f20bcacf666e1333b6b1f04e647dc1d5111f86b8e510238fcc56d7762cda8c \
+    --hash=sha256:9a72572b9c416d004d492cbc6e61962c0501eaf945ece9b5a0f56597d8348aa0
     # via ddtrace
 packaging==25.0 \
     --hash=sha256:29572ef2b1f17581046b3a2227d5c611fb25ec70ca1ba8554b24b0e69331a484 \

requirements/docs-blog.txt

@@ -224,9 +224,9 @@ gitdb==4.0.12 \
     --hash=sha256:5ef71f855d191a3326fcfbc0d5da835f26b13fbcba60c32c21091c349ffdb571 \
     --hash=sha256:67073e15955400952c6565cc3e707c554a4eea2e428946f7a4c162fab9bd9bcf
     # via gitpython
-gitpython==3.1.44 \
-    --hash=sha256:9e0e10cda9bed1ee64bc9a6de50e7e38a9c9943241cd7f585f6df3ed28011110 \
-    --hash=sha256:c87e30b26253bf5418b01b0660f818967f3c503193838337fe5e573331249269
+gitpython==3.1.45 \
+    --hash=sha256:85b0ee964ceddf211c41b9f27a49086010a190fd8132a24e21f362a4b36a791c \
+    --hash=sha256:8908cb2e02fb3b93b7eb0f2827125cb699869470432cc885f019b8fd0fccff77
     # via mkdocs-rss-plugin
 idna==3.10 \
     --hash=sha256:12f65c9b470abda6dc35cf8e63cc574b1c52b11df2c86030af0ac09b01b13ea9 \
@@ -332,9 +332,9 @@ mkdocs-get-deps==0.2.0 \
     --hash=sha256:162b3d129c7fad9b19abfdcb9c1458a651628e4b1dea628ac68790fb3061c60c \
     --hash=sha256:2bf11d0b133e77a0dd036abeeb06dec8775e46efa526dc70667d8863eefc6134
     # via mkdocs
-mkdocs-material==9.6.15 \
-    --hash=sha256:64adf8fa8dba1a17905b6aee1894a5aafd966d4aeb44a11088519b0f5ca4f1b5 \
-    --hash=sha256:ac969c94d4fe5eb7c924b6d2f43d7db41159ea91553d18a9afc4780c34f2717a
+mkdocs-material==9.6.16 \
+    --hash=sha256:8d1a1282b892fe1fdf77bfeb08c485ba3909dd743c9ba69a19a40f637c6ec18c \
+    --hash=sha256:d07011df4a5c02ee0877496d9f1bfc986cfb93d964799b032dd99fe34c0e9d19
     # via
     #   -r requirements/docs-blog.in
     #   material-plausible-plugin
@@ -521,9 +521,9 @@ pygments==2.19.2 \
     --hash=sha256:636cb2477cec7f8952536970bc533bc43743542f70392ae026374600add5b887 \
     --hash=sha256:86540386c03d588bb81d44bc3928634ff26449851e99741617ecb9037ee5ec0b
     # via mkdocs-material
-pymdown-extensions==10.16 \
-    --hash=sha256:71dac4fca63fabeffd3eb9038b756161a33ec6e8d230853d3cecf562155ab3de \
-    --hash=sha256:f5dd064a4db588cb2d95229fc4ee63a1b16cc8b4d0e6145c0899ed8723da1df2
+pymdown-extensions==10.16.1 \
+    --hash=sha256:aace82bcccba3efc03e25d584e6a22d27a8e17caa3f4dd9f207e49b787aa9a91 \
+    --hash=sha256:d6ba157a6c03146a7fb122b2b9a121300056384eafeec9c9f9e584adfdb2a32d
     # via mkdocs-material
 python-dateutil==2.9.0.post0 \
     --hash=sha256:37dd54208da7e1cd875388217d5e00ebd4179249f90fb72437e91a35459a0ad3 \

requirements/docs-dev.txt

@@ -4,6 +4,10 @@
 #
 #    pip-compile --allow-unsafe --generate-hashes --output-file=requirements/docs-dev.txt requirements/docs-dev.in
 #
+accessible-pygments==0.0.5 \
+    --hash=sha256:40918d3e6a2b619ad424cb91e556bd3bd8865443d9f22f1dcdf79e33c8046872 \
+    --hash=sha256:88ae3211e68a1d0b011504b2ffc1691feafce124b845bd072ab6f9f66f34d4b7
+    # via furo
 alabaster==1.0.0 \
     --hash=sha256:c00dca57bca26fa62a6d7d0a9fcce65f3e026e9bfe33e9c538fd3fbb2144fd9e \
     --hash=sha256:fc6786402dc3fcb2de3cabd5fe455a2db534b371124f1f21de8731783dec828b
@@ -134,9 +138,9 @@ docutils==0.21.2 \
     # via
     #   myst-parser
     #   sphinx
-furo==2024.8.6 \
-    --hash=sha256:6cd97c58b47813d3619e63e9081169880fbe331f0ca883c871ff1f3f11814f5c \
-    --hash=sha256:b63e4cee8abfc3136d3bc03a3d45a76a850bada4d6374d24c1716b0e01394a01
+furo==2025.7.19 \
+    --hash=sha256:4164b2cafcf4023a59bb3c594e935e2516f6b9d35e9a5ea83d8f6b43808fe91f \
+    --hash=sha256:bdea869822dfd2b494ea84c0973937e35d1575af088b6721a29c7f7878adc9e3
     # via -r requirements/docs-dev.in
 h11==0.16.0 \
     --hash=sha256:4e35b956cf45792e4caa5885e69fba00bdbc6ffafbfa020300e549b208ee5ff1 \
@@ -247,6 +251,7 @@ pygments==2.19.2 \
     --hash=sha256:636cb2477cec7f8952536970bc533bc43743542f70392ae026374600add5b887 \
     --hash=sha256:86540386c03d588bb81d44bc3928634ff26449851e99741617ecb9037ee5ec0b
     # via
+    #   accessible-pygments
     #   furo
     #   sphinx
 pyyaml==6.0.2 \
@@ -391,9 +396,9 @@ sphinxcontrib-serializinghtml==2.0.0 \
     --hash=sha256:6e2cb0eef194e10c27ec0023bfeb25badbbb5868244cf5bc5bdc04e4464bf331 \
     --hash=sha256:e9d912827f872c029017a53f0ef2180b327c3f7fd23c87229f7a8e8b70031d4d
     # via sphinx
-starlette==0.47.1 \
-    --hash=sha256:5e11c9f5c7c3f24959edbf2dffdc01bba860228acf657129467d8a7468591527 \
-    --hash=sha256:aef012dd2b6be325ffa16698f9dc533614fb1cebd593a906b90dc1025529a79b
+starlette==0.47.2 \
+    --hash=sha256:6ae9aa5db235e4846decc1e7b79c4f346adf41e9777aebeb49dfd09bbd7023d8 \
+    --hash=sha256:c5847e96134e5c5371ee9fac6fdf1a67336d5815e09eb2a01fdb57a351ef915b
     # via sphinx-autobuild
 typing-extensions==4.14.1 \
     --hash=sha256:38b39f4aeeab64884ce9f74c94263ef78f3c22467c8724005483154c26648d36 \

requirements/docs-user.txt

@@ -242,9 +242,9 @@ mkdocs-macros-plugin==1.3.7 \
     --hash=sha256:02432033a5b77fb247d6ec7924e72fc4ceec264165b1644ab8d0dc159c22ce59 \
     --hash=sha256:17c7fd1a49b94defcdb502fd453d17a1e730f8836523379d21292eb2be4cb523
     # via -r requirements/docs-user.in
-mkdocs-material==9.6.15 \
-    --hash=sha256:64adf8fa8dba1a17905b6aee1894a5aafd966d4aeb44a11088519b0f5ca4f1b5 \
-    --hash=sha256:ac969c94d4fe5eb7c924b6d2f43d7db41159ea91553d18a9afc4780c34f2717a
+mkdocs-material==9.6.16 \
+    --hash=sha256:8d1a1282b892fe1fdf77bfeb08c485ba3909dd743c9ba69a19a40f637c6ec18c \
+    --hash=sha256:d07011df4a5c02ee0877496d9f1bfc986cfb93d964799b032dd99fe34c0e9d19
     # via
     #   -r requirements/docs-user.in
     #   material-plausible-plugin
@@ -276,9 +276,9 @@ pygments==2.19.2 \
     --hash=sha256:636cb2477cec7f8952536970bc533bc43743542f70392ae026374600add5b887 \
     --hash=sha256:86540386c03d588bb81d44bc3928634ff26449851e99741617ecb9037ee5ec0b
     # via mkdocs-material
-pymdown-extensions==10.16 \
-    --hash=sha256:71dac4fca63fabeffd3eb9038b756161a33ec6e8d230853d3cecf562155ab3de \
-    --hash=sha256:f5dd064a4db588cb2d95229fc4ee63a1b16cc8b4d0e6145c0899ed8723da1df2
+pymdown-extensions==10.16.1 \
+    --hash=sha256:aace82bcccba3efc03e25d584e6a22d27a8e17caa3f4dd9f207e49b787aa9a91 \
+    --hash=sha256:d6ba157a6c03146a7fb122b2b9a121300056384eafeec9c9f9e584adfdb2a32d
     # via mkdocs-material
 python-dateutil==2.9.0.post0 \
     --hash=sha256:37dd54208da7e1cd875388217d5e00ebd4179249f90fb72437e91a35459a0ad3 \