chore(deps): pin dependencies

[khepri-bot]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	pin	v4 → v4
codespell	tool.pdm.dev-dependencies	pin	~=2.2.6 → ==2.2.6
github/codeql-action	action	pin	v3 → v3
mypy (changelog)	tool.pdm.dev-dependencies	pin	~=1.9.0 → ==1.9.0
pdm-project/setup-pdm	action	pin	v4 → v4
pylint (changelog)	tool.pdm.dev-dependencies	pin	~=3.1.0 → ==3.1.1
pytest (changelog)	tool.pdm.dev-dependencies	pin	~=9.1.1 → ==9.1.1
pytest-mock (changelog)	tool.pdm.dev-dependencies	pin	~=3.14.0 → ==3.14.1
pytest-sugar	tool.pdm.dev-dependencies	pin	~=1.0.0 → ==1.0.0
requests (changelog)	tool.pdm.dev-dependencies	pin	>=2.31.0 → ==2.34.2
ruff (source, changelog)	tool.pdm.dev-dependencies	pin	~=0.3.7 → ==0.3.7
tox (changelog)	tool.pdm.dev-dependencies	pin	~=4.14.2 → ==4.14.2
tox-pdm	tool.pdm.dev-dependencies	pin	~=0.7.2 → ==0.7.2
trufflesecurity/trufflehog	action	pinDigest	→ 05a5832

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • Between 12:00 AM and 08:59 AM, only on Monday (* 0-8 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.