From dbf8db4cbf4d318c9f4cb7058485434354364ee3 Mon Sep 17 00:00:00 2001
From: "khepri-bot[bot]" <269588972+khepri-bot[bot]@users.noreply.github.com>
Date: Thu, 23 Jul 2026 17:19:13 +0000
Subject: [PATCH] chore(deps): pin dependencies

---
 .github/workflows/test_lint_scan.yml |  4 ++--
 pdm.lock                             |  2 +-
 pyproject.toml                       | 20 ++++++++++----------
 3 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/test_lint_scan.yml b/.github/workflows/test_lint_scan.yml
index 1a9901e..912dfa4 100644
--- a/.github/workflows/test_lint_scan.yml
+++ b/.github/workflows/test_lint_scan.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ${{ matrix.os }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
       - name: Set up PDM
         uses: pdm-project/setup-pdm@v4
         with:
@@ -65,4 +65,4 @@ jobs:
         env:
           CODEQL_EXTRACTOR_PYTHON_ANALYSIS_VERSION: 3.12
       - name: Perform Secure Code Analysis (Secrets)
-        uses: trufflesecurity/trufflehog@main
+        uses: trufflesecurity/trufflehog@05a583290be8c8f79852eb8741f5042920b47d00 # main
diff --git a/pdm.lock b/pdm.lock
index 7d94fd5..90101ad 100644
--- a/pdm.lock
+++ b/pdm.lock
@@ -5,7 +5,7 @@
 groups = ["default", "lint", "test", "tox", "typing"]
 strategy = ["cross_platform", "inherit_metadata"]
 lock_version = "4.5.0"
-content_hash = "sha256:f8082d385421e0f1cf8385a21dfc65f58a5533d3b4125b0d6e5550927ce3c88a"
+content_hash = "sha256:9b6e60bf060c4f5ec426e7dc1b73aedb01361fb355f7c22f40da8d84f44a5c54"
 
 [[metadata.targets]]
 requires_python = ">=3.10"
diff --git a/pyproject.toml b/pyproject.toml
index 7e11944..7c39b26 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -50,24 +50,24 @@ tox = "tox --parallel auto"
 
 [tool.pdm.dev-dependencies]
 lint = [
-    "codespell~=2.2.6",  #  https://github.com/codespell-project/codespell  (latest:  2.2.6)
-    "pylint~=3.1.0",     #  https://github.com/pylint-dev/pylint            (latest:  3.1.0)
-    "requests>=2.31.0",  #  https://github.com/psf/requests                 (latest:  2.31.0)
-    "ruff~=0.3.7",       #  https://github.com/astral-sh/ruff               (latest:  0.3.7)
+    "codespell==2.2.6",  #  https://github.com/codespell-project/codespell  (latest:  2.2.6)
+    "pylint==3.1.1",     #  https://github.com/pylint-dev/pylint            (latest:  3.1.0)
+    "requests==2.34.2",  #  https://github.com/psf/requests                 (latest:  2.31.0)
+    "ruff==0.3.7",       #  https://github.com/astral-sh/ruff               (latest:  0.3.7)
     "safety==3.8.1",     #  https://github.com/pyupio/safety                (latest:  3.8.1)
 ]
 test = [
-    "pytest~=9.1.1",        #  https://github.com/pytest-dev/pytest        (latest:  9.1.1)
-    "pytest-mock~=3.14.0",  #  https://github.com/pytest-dev/pytest-mock/  (latest:  3.14.0)
-    "pytest-sugar~=1.0.0",  #  https://github.com/Teemu/pytest-sugar       (latest:  1.0.0)
+    "pytest==9.1.1",        #  https://github.com/pytest-dev/pytest        (latest:  9.1.1)
+    "pytest-mock==3.14.1",  #  https://github.com/pytest-dev/pytest-mock/  (latest:  3.14.0)
+    "pytest-sugar==1.0.0",  #  https://github.com/Teemu/pytest-sugar       (latest:  1.0.0)
 ]
 tox = [
     # Version reduced to prevent `packaging` conflict with safety
-    "tox~=4.14.2",     #  https://github.com/tox-dev/tox          (latest:  4.14.2)
-    "tox-pdm~=0.7.2",  #  https://github.com/pdm-project/tox-pdm  (latest:  0.7.2)
+    "tox==4.14.2",     #  https://github.com/tox-dev/tox          (latest:  4.14.2)
+    "tox-pdm==0.7.2",  #  https://github.com/pdm-project/tox-pdm  (latest:  0.7.2)
 ]
 typing = [
-    "mypy~=1.9.0",  #  https://github.com/python/mypy  (latest:  1.9.0)
+    "mypy==1.9.0",  #  https://github.com/python/mypy  (latest:  1.9.0)
 ]
 
 [tool.tox]