Upgrade dependencies to latest compatible versions

.github/dependabot.yml

@@ -0,0 +1,62 @@
+version: 2
+
+updates:
+  # Python dependencies (uv / pip)
+  - package-ecosystem: "uv"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+      timezone: "UTC"
+    # Keep minimum version pins advancing to match installed versions,
+    # consistent with the uv remove/re-add workflow used to set baselines.
+    versioning-strategy: increase
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: "build"
+      include: "scope"
+    groups:
+      python-runtime:
+        dependency-type: "production"
+        update-types:
+          - "minor"
+          - "patch"
+      python-runtime-major:
+        dependency-type: "production"
+        update-types:
+          - "major"
+      python-dev:
+        dependency-type: "development"
+        update-types:
+          - "minor"
+          - "patch"
+      python-dev-major:
+        dependency-type: "development"
+        update-types:
+          - "major"
+
+  # GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+      timezone: "UTC"
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: "ci"
+      include: "scope"
+    groups:
+      github-actions:
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
+      github-actions-major:
+        patterns:
+          - "*"
+        update-types:
+          - "major"

.github/workflows/claude-code-review.yml

@@ -12,12 +12,7 @@ on:
 
 jobs:
   claude-review:
-    # Optional: Filter by PR author
-    # if: |
-    #   github.event.pull_request.user.login == 'external-contributor' ||
-    #   github.event.pull_request.user.login == 'new-developer' ||
-    #   github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR'
-
+    if: github.actor != 'dependabot[bot]'
     runs-on: ubuntu-latest
     permissions:
       contents: read

.github/workflows/claude.yml

@@ -13,10 +13,12 @@ on:
 jobs:
   claude:
     if: |
-      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
-      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
-      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
-      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
+      github.actor != 'dependabot[bot]' && (
+        (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
+        (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
+        (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
+        (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
+      )
     runs-on: ubuntu-latest
     permissions:
       contents: read

pyproject.toml

@@ -26,14 +26,14 @@ keywords = [
 ]
 requires-python = ">=3.11,<3.15"
 dependencies = [
-    "gitpython>=3.1.45",
+    "gitpython>=3.1.46",
     "httpx>=0.28.1",
     "marko>=2.2.2",
     "msgspec>=0.20.0",
-    "pydantic>=2.0.0",
-    "ruamel-yaml>=0.18.0",
-    "tiktoken>=0.8.0",
-    "typer>=0.21.0",
+    "pydantic>=2.12.5",
+    "ruamel-yaml>=0.19.1",
+    "tiktoken>=0.12.0",
+    "typer>=0.24.1",
 ]
 
 [project.entry-points."skilllint.adapters"]
@@ -61,12 +61,12 @@ dev = [
     "beautifulsoup4>=4.14.3",
     "hatch-vcs>=0.5.0",
     "hatchling>=1.29.0",
-    "hypothesis>=6.151.9",
+    "hypothesis>=6.151.10",
     "prek>=0.3.8",
+    "pytest>=9.0.2",
     "pytest-cov>=7.1.0",
     "pytest-mock>=3.15.1",
     "pytest-xdist>=3.8.0",
-    "pytest>=9.0.2",
     "rich>=14.3.3",
     "ruff>=0.15.8",
     "ty>=0.0.26",