chore: combine annotated-logger dependency updates

.github/workflows/coverage.yaml

@@ -17,7 +17,7 @@ jobs:
       actions: read
     steps:
     - name: Python Coverage Comment
-      uses: py-cov-action/python-coverage-comment-action@54b4ecbc0fcf4c22e54be4dd59d4c08db9953ce9
+      uses: py-cov-action/python-coverage-comment-action@e5fb2218463c3377f3504b0c5b5646ed53da7a2f
       with:
         GITHUB_TOKEN: ${{ github.token }}
         GITHUB_PR_RUN_ID: ${{ github.event.workflow_run.id }}

.github/workflows/publish-to-pypi.yaml

@@ -50,7 +50,7 @@ jobs:
         name: python-package-distributions
         path: dist/
     - name: Publish distribution 📦 to PyPI
-      uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
+      uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3
 
   github-release:
     name: >-
@@ -115,7 +115,7 @@ jobs:
         name: python-package-distributions
         path: dist/
     - name: Publish distribution 📦 to TestPyPI
-      uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
+      uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3
       with:
         repository-url: https://test.pypi.org/legacy/
         # This job runs on every push, but the project version only changes at

.github/workflows/pytest.yaml

@@ -63,7 +63,7 @@ jobs:
         echo "[run]" >> .coveragerc
         echo "relative_files = true" >> .coveragerc
     - name: Python Coverage Comment
-      uses: py-cov-action/python-coverage-comment-action@54b4ecbc0fcf4c22e54be4dd59d4c08db9953ce9
+      uses: py-cov-action/python-coverage-comment-action@e5fb2218463c3377f3504b0c5b5646ed53da7a2f
       with:
         GITHUB_TOKEN: ${{ github.token }}
         MERGE_COVERAGE_FILES: true

.pre-commit-config.yaml

@@ -1,7 +1,7 @@
 repos:
 - repo: https://github.com/astral-sh/ruff-pre-commit
   # Ruff version.
-  rev: v0.14.0
+  rev: v0.17.3
   hooks:
   # Run the linter.
   - id: ruff

CONTRIBUTING.md

@@ -14,6 +14,8 @@ Please note that this project is released with a [Contributor Code of Conduct](C
 
 Annotated Logger uses `ruff`, `pytest`, `pyright` and `mutmut` for testing and linting. It uses [`hatch`](https://github.com/pypa/hatch) as a project manager to build and install dependencies. When developing locally it's suggested that you ensure that your editor supports `ruff` and `pyright` for inline linting. The `pytest` test suite is very quick and should be run frequently. (`mutmut`)[https://github.com/boxed/mutmut] is a mutation testing tool and is fairly slow as it runs the other three tools hundreds of times after making minor tweaks to the code. It will typically be run only once development is complete to ensure everything is fully tested.
 
+The published package supports Python 3.10 and newer, but the `dev` environment needs Python 3.11 or newer: its lockfile (`requirements/requirements-dev.txt`) pins `filelock` 4.2.1 or later for security fixes, and those releases no longer support 3.10.
+
 `script/mutmut_runner` is what `mutmut` uses to see if the mutation fails, however, it's also quite useful on it's own as it runs `ruff`, `pytest` and `pyright` exiting as soon as anything fails, so it makes a good sanity check.
 
 In addition to the tests and linting above all PRs will compare the version number in \_\_init\_\_.py with the version in `main` to ensure that new PRs results in new versions.

example/logging_config.py

@@ -111,7 +111,7 @@
             # for a more realistic example. Not all of the messages
             # in the method we set to use this are long enough to be split,
             # so, some of them don't have the message_part(s) fields.
-            #  "format": "{level} {message_part}/{message_parts} {message}",  # noqa: ERA001 E501
+            #  "format": "{level} {message_part}/{message_parts} {message}",  # noqa: ERA001
             #  "defaults": {"message_part": 1, "message_parts": 1},  # noqa: ERA001
             "style": "{",
         },

requirements.txt

@@ -7,7 +7,7 @@
 # - pychoir
 #
 
-certifi==2026.10.19
+certifi==2026.10.23
     # via requests
 charset-normalizer==3.5.2
     # via requests

requirements/requirements-dev.txt

@@ -19,7 +19,7 @@
 # - pychoir
 #
 
-certifi==2026.10.19
+certifi==2026.10.23
     # via requests
 cfgv==3.5.0
     # via pre-commit
@@ -29,9 +29,9 @@ coverage==7.16.2
     # via
     #   hatch.envs.dev
     #   pytest-cov
-distlib==0.4.3
+distlib==0.4.4
     # via virtualenv
-filelock==4.0.12
+filelock==4.2.1
     # via
     #   python-discovery
     #   virtualenv
@@ -45,17 +45,17 @@ iniconfig==2.3.1
     # via pytest
 makefun==1.16.0
     # via hatch.envs.dev
-nodeenv==1.11.0
+nodeenv==1.11.1
     # via
     #   pre-commit
     #   pyright
 packaging==26.3
     # via
     #   pytest
     #   virtualenv
-platformdirs==4.12.3
+platformdirs==4.12.4
     # via virtualenv
-pluggy==1.6.0
+pluggy==1.7.0
     # via
     #   pytest
     #   pytest-cov
@@ -67,7 +67,7 @@ pygments==2.21.0
     # via pytest
 pyright==1.1.414
     # via hatch.envs.dev
-pytest==9.1.1
+pytest==9.2.0
     # via
     #   hatch.envs.dev
     #   pytest-cov
@@ -81,13 +81,13 @@ pytest-freezer==0.4.9
     # via hatch.envs.dev
 pytest-github-actions-annotate-failures==0.4.2
     # via hatch.envs.dev
-pytest-mock==3.16.0
+pytest-mock==3.17.0
     # via hatch.envs.dev
 pytest-randomly==5.0.0
     # via hatch.envs.dev
-python-dateutil==2.9.0.post0
+python-dateutil==3.0.0
     # via freezegun
-python-discovery==1.6.1
+python-discovery==1.6.7
     # via virtualenv
 python-json-logger==4.2.0
     # via hatch.envs.dev
@@ -99,15 +99,17 @@ requests==2.34.2
     #   requests-mock
 requests-mock==1.12.1
     # via hatch.envs.dev
-ruff==0.16.10
+ruff==0.17.3
     # via hatch.envs.dev
 six==1.17.0
     # via python-dateutil
 typing-extensions==4.16.0
     # via
     #   hatch.envs.dev
     #   pyright
+tzdata==2026.6
+    # via python-dateutil
 urllib3==2.8.0
     # via requests
-virtualenv==21.14.5
+virtualenv==21.15.1
     # via pre-commit