Update CI and build tooling and patch vulnerable dependencies (#15)

* Bump gojiplus/py-canon/.github/workflows/reusable-ci.yml

Bumps [gojiplus/py-canon/.github/workflows/reusable-ci.yml](https://github.com/gojiplus/py-canon) from d5000e704aafc69a4834e606bdff81dc8a6d7804 to 6c3fbb04cf3798cae79f2e1067b6a74d8391a4ee.
- [Release notes](https://github.com/gojiplus/py-canon/releases)
- [Changelog](https://github.com/gojiplus/py-canon/blob/main/CHANGELOG.md)
- [Commits](gojiplus/py-canon@d5000e7...6c3fbb0)

---
updated-dependencies:
- dependency-name: gojiplus/py-canon/.github/workflows/reusable-ci.yml
  dependency-version: 6c3fbb04cf3798cae79f2e1067b6a74d8391a4ee
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump the python-minor-and-patch group with 3 updates

Bumps the python-minor-and-patch group with 3 updates: [pre-commit](https://github.com/pre-commit/pre-commit), [pypdf](https://github.com/py-pdf/pypdf) and [ruff](https://github.com/astral-sh/ruff).


Updates `pre-commit` from 4.6.2 to 4.7.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.2...v4.7.0)

Updates `pypdf` from 6.20.0 to 6.21.1
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.20.0...6.21.1)

Updates `ruff` from 0.17.0 to 0.17.1
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.17.0...0.17.1)

---
updated-dependencies:
- dependency-name: pre-commit
  dependency-version: 4.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: pypdf
  dependency-version: 6.21.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-and-patch
- dependency-name: ruff
  dependency-version: 0.17.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update uv-build requirement from <0.13,>=0.12.5 to >=0.12.5,<0.14

Updates the requirements on [uv-build](https://github.com/astral-sh/uv) to permit the latest version.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.12.5...0.13.1)

---
updated-dependencies:
- dependency-name: uv-build
  dependency-version: 0.13.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

* Patch vulnerable tooling dependencies and update CI pins

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: ***** <721466+soodoku@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/ci.yml

@@ -17,7 +17,7 @@ concurrency:
 
 jobs:
   package:
-    uses: gojiplus/py-canon/.github/workflows/reusable-ci.yml@d5000e704aafc69a4834e606bdff81dc8a6d7804 # v1
+    uses: gojiplus/py-canon/.github/workflows/reusable-ci.yml@21622c7d616fa4ae611f13e15db49764bae169d1 # v1
     with:
       wheel-import: queue_shift
       python-versions: '["3.11", "3.12", "3.13", "3.14"]'
@@ -27,7 +27,7 @@ jobs:
     timeout-minutes: 30
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
+      - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2
       - name: Sync environment
         run: uv sync --frozen --all-groups --all-extras
       - name: Install TeX

pyproject.toml

@@ -38,7 +38,7 @@ Issues = "https://github.com/finite-sample/queue-shift/issues"
 Repository = "https://github.com/finite-sample/queue-shift"
 
 [build-system]
-requires = ["uv_build>=0.12.5,<0.13"]
+requires = ["uv_build>=0.12.5,<0.14"]
 build-backend = "uv_build"
 
 [tool.uv.build-backend]