chore: security dependency upgrade (from canary #346)

[jdecarolis]

Brings requirements.txt/requirements-dev.txt/uv.lock up to unstable's current state (7 canary rounds, including the soupsieve GHSA-2wc2-fm75-p42x / GHSA-836r-79rf-4m37 fixes), without pulling in #340's code changes.

Summary by CodeRabbit

• Chores
  • Refreshed pinned runtime, development, and documentation package versions.
  • Updated package integrity hashes in generated requirements files.
  • Removed an outdated command-line utility pin and refreshed supporting utility packages.
  • No user-facing features or public API changes were introduced.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: c7564247-1ab5-458e-b384-a22266ae49b4

📥 Commits

Reviewing files that changed from the base of the PR and between f35d8ae and fb4f2a4.

⛔ Files ignored due to path filters (1)

• uv.lock is excluded by !**/*.lock

📒 Files selected for processing (2)

• requirements-dev.txt
• requirements.txt

---

Walkthrough

Regenerated requirements.txt and requirements-dev.txt with updated pinned dependency versions and hashes. Runtime and development exports include refreshed scientific, testing, tooling, documentation, and utility packages.

Changes

Dependency export refresh

Layer / File(s)	Summary
Runtime scientific dependency pins requirements.txt	Scientific, plotting, numerical, imaging, and solver packages were upgraded with replacement hashes.
Runtime utility and test pins requirements.txt	Utility, modeling, testing, platform, and collection dependencies were updated or expanded; the click entry was removed.
Development scientific stack pins requirements-dev.txt	Development scientific, plotting, typing, formatting, and support packages were refreshed.
Development tooling and documentation pins requirements-dev.txt	Development, documentation, testing, and packaging tools received updated versions and hashes.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Possibly related PRs

• TemoaProject/temoa#298: Adds a dependency-canary workflow that regenerates the requirement exports.
• TemoaProject/temoa#302: Also updates dependency exports generated from lock data.
• TemoaProject/temoa#323: Contains overlapping regenerated tooling and scientific dependency pins.

Suggested labels: dependency-canary, dependencies

Suggested reviewers: particularlypythonicbs

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title is concise and accurately reflects the dependency/security upgrade shown in the requirements updates.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch security-deps-to-main

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!