chore: Update Python dependencies

.pre-commit-config.yaml

@@ -122,7 +122,7 @@ repos:
       - id: mixed-line-ending
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.15.12
+    rev: v0.15.13
     hooks:
       - id: ruff
         args: [--fix]
@@ -135,7 +135,7 @@ repos:
         stages: [pre-push]
 
   - repo: https://github.com/commitizen-tools/commitizen
-    rev: v4.15.1
+    rev: v4.16.2
     hooks:
       - id: commitizen
         stages: [commit-msg]
@@ -159,7 +159,7 @@ repos:
         files: ^\.github/workflows/.*\.ya?ml$
 
   - repo: https://github.com/zizmorcore/zizmor-pre-commit
-    rev: v1.24.1
+    rev: v1.25.2
     hooks:
       - id: zizmor
         files: ^(\.github/workflows/.*\.ya?ml|\.github/\.zizmor\.yml)$

pyproject.toml

@@ -17,12 +17,12 @@ dependencies = [
     "aiosqlite==0.22.1",
     "argon2-cffi==25.1.0",
     "cryptography==48.0.0",
-    "faker==40.15.0",
+    "faker==40.18.0",
     "httpx==0.28.1",
     "jinja2==3.1.6",
     "jsonschema==4.26.0",
-    "litellm==1.83.14",
-    "cedarpy==4.8.1",
+    "litellm==1.84.0",
+    "cedarpy==4.8.3",
     "lxml==6.1.0",
     "litestar[standard,structlog,pydantic,brotli,prometheus]==2.21.1",
     "mcp==1.27.1",
@@ -50,9 +50,9 @@ build-backend = "hatchling.build"
 # PyPI (CUDA bundled, ~2.5 GB) or the PyTorch CPU index (~200 MB) via
 # [tool.uv.sources] below. The two extras are declared mutually exclusive in
 # [tool.uv] via its `conflicts = [...]` setting so uv locks them independently.
-fine-tune-gpu = ["torch==2.11.0", "sentence-transformers==5.4.1"]
-fine-tune-cpu = ["torch==2.11.0", "sentence-transformers==5.4.1"]
-telemetry = ["logfire==4.32.1"]
+fine-tune-gpu = ["torch==2.12.0", "sentence-transformers==5.5.0"]
+fine-tune-cpu = ["torch==2.12.0", "sentence-transformers==5.5.0"]
+telemetry = ["logfire==4.33.0"]
 # Distributed runtime: first distributed MessageBus backend + task queue workers.
 # Opt in with `pip install synthorg[distributed]`. See docs/design/distributed-runtime.md.
 distributed = ["nats-py==2.14.0"]
@@ -69,15 +69,15 @@ artifacts = ["src/synthorg/**/*.sql", "src/synthorg/**/*.yaml"]
 test = [
     "pytest==9.0.3",
     "pytest-asyncio==1.3.0",
-    "pytest-codspeed==4.5.0",
+    "pytest-codspeed==5.0.2",
     "pytest-cov==7.1.0",
     "pytest-mock==3.15.1",
     "pytest-repeat==0.9.4",
     "pytest-timeout==2.4.0",
     "pytest-xdist==3.8.0",
     "polyfactory==3.3.0",
     "respx==0.23.1",
-    "hypothesis==6.152.4",
+    "hypothesis==6.152.7",
     # Distributed runtime: dev envs always have these so mypy can type-check
     # bus/nats.py and workers/ without needing the optional extra installed.
     # Runtime users opt in via `pip install synthorg[distributed]`.
@@ -87,33 +87,33 @@ test = [
     "testcontainers[postgres]==4.14.2",
 ]
 docs = [
-    "zensical==0.0.40",
+    "zensical==0.0.42",
     "mkdocstrings[python]==1.0.4",
     "griffe-pydantic==1.3.1",
     "mkdocs-d2-plugin==1.7.0",
-    "mkdocs-redirects==1.2.2",
+    "mkdocs-redirects==1.2.3",
     # Used by scripts/patch_sitemap.py to safely parse the built sitemap.
     # Present as a transitive via py-serializable, but declared here so the
     # build script has a stable explicit dependency.
     "defusedxml==0.7.1",
 ]
 fine-tune-gpu = [
-    "torch==2.11.0",
-    "sentence-transformers==5.4.1",
+    "torch==2.12.0",
+    "sentence-transformers==5.5.0",
 ]
 fine-tune-cpu = [
-    "torch==2.11.0",
-    "sentence-transformers==5.4.1",
+    "torch==2.12.0",
+    "sentence-transformers==5.5.0",
 ]
 dev = [
-    "commitizen==4.15.1",
-    "mypy==1.20.2",
+    "commitizen==4.16.2",
+    "mypy==2.1.0",
     "pre-commit==4.6.0",
     "pip-audit==2.10.0",
     "pre-commit-uv==4.2.1",
-    "ruff==0.15.12",
-    "sqlglot==30.7.0",
-    "types-pyyaml==6.0.12.20260508",
+    "ruff==0.15.13",
+    "sqlglot==30.8.0",
+    "types-pyyaml==6.0.12.20260510",
     "types-defusedxml==0.7.0.20260504",
     "bandit==1.9.4",
     "pytest-randomly==4.1.0",