chore(deps): bump the python-minor-patch group with 3 updates (#385)

* chore(deps): bump the python-minor-patch group with 3 updates

Bumps the python-minor-patch group with 3 updates: [ruff](https://github.com/astral-sh/ruff), [uv](https://github.com/astral-sh/uv) and [hatchling](https://github.com/pypa/hatch).


Updates `ruff` from 0.16.8 to 0.16.9
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.8...0.16.9)

Updates `uv` from 0.12.15 to 0.12.18
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.12.15...0.12.18)

Updates `hatchling` from 1.32.3 to 1.32.4
- [Release notes](https://github.com/pypa/hatch/releases)
- [Commits](pypa/hatch@hatchling-v1.32.3...hatchling-v1.32.4)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.16.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: uv
  dependency-version: 0.12.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: hatchling
  dependency-version: 1.32.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): lock urllib3 2.8.0 and virtualenv 21.12.1 to clear dependency-audit

pip-audit flags the previously locked transitive versions:

- urllib3 2.7.0: PYSEC-2026-4175, -4176, -4177 (fixed in 2.8.0)
- virtualenv 21.4.2: PYSEC-2026-4011 to -4014 (fixed in 21.7.11 to 21.7.13)

urllib3 is pulled in by requests and twine; virtualenv by hatch and
pre-commit (dev only). virtualenv 21.12.1 is the newest release past the
7-day Dependabot cooldown. It requires python-discovery>=1.6, so that moves
1.4.0 -> 1.6.1.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: lelia <2418071+lelia@users.noreply.github.com>

Author: dependabot[bot]

pyproject.toml

@@ -1,6 +1,6 @@
 [build-system]
 requires = [
-  "hatchling==1.32.3"
+  "hatchling==1.32.4"
 ]
 build-backend = "hatchling.build"
 
@@ -47,9 +47,9 @@ test = [
     "pytest-watch==4.2.0"
 ]
 dev = [
-    "ruff==0.16.8",
+    "ruff==0.16.9",
     "twine==7.0.0", # for building
-    "uv==0.12.15",  # for dependency management
+    "uv==0.12.18",  # for dependency management
     "pre-commit==4.6.2",
     "hatch==1.18.1"
 ]