chore(deps): lock file maintenance (#512)

This PR contains the following updates:

| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xMzUuNSIsInVwZGF0ZWRJblZlciI6IjQxLjEzNS41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJ0eXBlL2RlcGVuZGVuY2llcyJdfQ==-->

Reviewed-on: #512
Co-authored-by: renovate[bot] <renovate-bot@git.tainton.uk>
Co-committed-by: renovate[bot] <renovate-bot@git.tainton.uk>

.gitea/workflows/ci.yml

@@ -12,12 +12,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out repository code
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v5.0.0
         with:
           fetch-depth: 0
 
       - name: Run Hadolint
-        uses: hadolint/hadolint-action@v3.1.0
+        uses: hadolint/hadolint-action@v3.3.0
         with:
           dockerfile: Dockerfile
           output-file: hadolint.out
@@ -25,7 +25,7 @@ jobs:
           no-fail: true
 
       - name: Setup Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.13"
 

.gitea/workflows/release.yml

@@ -61,7 +61,7 @@ jobs:
           REPO: ${{ gitea.repository }}
 
       - name: Check out repository
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v5.0.0
         with:
           fetch-depth: 0
           ref: ${{ needs.tag.outputs.tag_name }}

.gitea/workflows/security.yml

@@ -9,23 +9,25 @@ on:
     - cron: "@daily"
 
 jobs:
-  sonarqube:
+  # sonarqube:
-    runs-on: ubuntu-latest
+  #   name: SonarQube
-    steps:
+  #   runs-on: ubuntu-latest
-      - name: Checkout repo
+  #   steps:
-        uses: actions/checkout@v4.2.2
+  #     - name: Checkout repo
+  #       uses: actions/checkout@v4.2.2
 
-      - name: SonarQube Scan
+  #     - name: SonarQube Scan
-        uses: SonarSource/sonarqube-scan-action@v5.2.0
+  #       uses: SonarSource/sonarqube-scan-action@v5.2.0
-        env:
+  #       env:
-          SONAR_HOST_URL: ${{ secrets.SONARQUBE_HOST_URL }}
+  #         SONAR_HOST_URL: ${{ secrets.SONARQUBE_HOST_URL }}
-          SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }}
+  #         SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }}
 
   snyk:
+    name: Snyk
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v5.0.0
 
       - name: Snyk
         uses: snyk/actions/python@master

pyproject.toml

@@ -8,16 +8,16 @@ authors = [
 ]
 requires-python = ">=3.11.2"
 dependencies = [
-    "webex-bot<1.0.0,>=0.5.2",
+    "webex-bot<1.1.0,>=1.0.3",
     "pillow<12.0.0,>=11.0.0",
-    "astroid<=3.3.10",
+    "astroid<=4.0.0",
 ]
 
 [tool.uv]
 dev-dependencies = [
-    "black<25.2.0,>=25.1.0",
+    "black<25.9.1,>=25.9.0",
     "coverage<8.0.0,>=7.6.10",
-    "isort<6.1.0,>=6.0.0",
+    "isort<6.1.1,>=6.1.0",
     "pylint<4.0.0,>=3.3.2",
     "pylint-exit<2.0.0,>=1.2.0",
     "pytest<9.0.0,>=8.3.4",