boost-skill-cli 1.0.276__tar.gz → 1.0.278__tar.gz

{boost_skill_cli-1.0.276 → boost_skill_cli-1.0.278}/Makefile

@@ -61,7 +61,8 @@ lint:
 	$(VENV)/bin/interrogate boost_cli/core
 	$(VENV)/bin/refurb boost_cli
 	$(VENV)/bin/codespell boost_cli docs README.md
-	@command -v actionlint >/dev/null 2>&1 && actionlint || echo "actionlint not on PATH — skipping (CI enforces it)"
+	@if command -v actionlint >/dev/null 2>&1; then actionlint; \
+	else echo "actionlint not on PATH — skipping (CI enforces it)"; fi
 	$(PY) scripts/build_registries.py --check
 	$(PY) scripts/build_roadmap.py --check
 	$(PY) scripts/build_command_reference.py --check
@@ -140,7 +141,8 @@ bench:
 # part of `make check`; degrades cleanly (prints a skip message, exits 0) when
 # hyperfine isn't installed (`brew install hyperfine`).
 bench-cli:
-	@command -v hyperfine >/dev/null 2>&1 && bash scripts/bench_cli.sh || echo "hyperfine not on PATH — install via 'brew install hyperfine', skipping"
+	@if command -v hyperfine >/dev/null 2>&1; then bash scripts/bench_cli.sh; \
+	else echo "hyperfine not on PATH — install via 'brew install hyperfine', skipping"; fi
 
 # Opt-in coverage-guided fuzzing of the hand-rolled parsers (atheris/libFuzzer).
 # Not part of `make check` — a fuzzer is a search, not a pass/fail gate; the
@@ -164,7 +166,8 @@ fuzz:
 BOOST_SITE ?= https://jonnyeclectic.github.io/boost/
 post-deploy:
 	$(PY) scripts/post_deploy_smoke.py --base-url "$(BOOST_SITE)" -v
-	@command -v node >/dev/null 2>&1 && BOOST_SITE="$(BOOST_SITE)" node tests/visual/console_check.mjs || echo "node not on PATH — skipping the console check (CI runs it)"
+	@if command -v node >/dev/null 2>&1; then BOOST_SITE="$(BOOST_SITE)" node tests/visual/console_check.mjs; \
+	else echo "node not on PATH — skipping the console check (CI runs it)"; fi
 
 # regenerate generated artifacts from their source (registries + roadmap boards)
 generate:

{boost_skill_cli-1.0.276/boost_skill_cli.egg-info → boost_skill_cli-1.0.278}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: boost-skill-cli
-Version: 1.0.276
+Version: 1.0.278
 Summary: boost — Homebrew for AI coding skills
 Author: Jonathan Reyes
 License: GNU GENERAL PUBLIC LICENSE

{boost_skill_cli-1.0.276 → boost_skill_cli-1.0.278}/boost_cli/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '1.0.276'
-__version_tuple__ = version_tuple = (1, 0, 276)
+__version__ = version = '1.0.278'
+__version_tuple__ = version_tuple = (1, 0, 278)
 
 __commit_id__ = commit_id = None

{boost_skill_cli-1.0.276 → boost_skill_cli-1.0.278/boost_skill_cli.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: boost-skill-cli
-Version: 1.0.276
+Version: 1.0.278
 Summary: boost — Homebrew for AI coding skills
 Author: Jonathan Reyes
 License: GNU GENERAL PUBLIC LICENSE

{boost_skill_cli-1.0.276 → boost_skill_cli-1.0.278}/docs/roadmap/items/dependabot-regeneration-drops-platform-pins.md

@@ -44,3 +44,11 @@ with <code>lock_toolchain.py</code> instead. Whatever is chosen, it needs a guar
 <i>loses</i> a platform-markered pin should fail its own gate rather than fail three Windows jobs
 two steps later, because the current failure names the install step and never mentions the missing
 package. Related: [[dependabot-root-pip-entry-duplicates-requirements]].
+<b>Progress:</b> <code>lock_toolchain.py</code> now takes <code>-P/--upgrade-package</code>, so a
+Dependabot bump can be <i>reproduced</i> rather than merged — take the version it proposes,
+re-resolve that one package universally, and every other pin (markers included) stays as committed.
+Both open bumps were landed that way: <code>hypothesis</code> 6.161.6 to 6.163.0 and
+<code>twine</code> 6.2.0 to 7.0.0, four changed lines across five locks, with
+<code>colorama</code> and <code>pywin32-ctypes</code> intact. What remains is the config half —
+stopping Dependabot raising these at all — which is deliberately still open because its effect is
+only observable on the next scheduled run.

{boost_skill_cli-1.0.276 → boost_skill_cli-1.0.278}/docs/roadmap/items/make-lint-masks-actionlint-failures.md

@@ -2,12 +2,12 @@
 id: make-lint-masks-actionlint-failures
 board: code
 section: dx
-status: planned
+status: shipped
 category: Testing · Bug
 complexity: S
 impact: Med
 wow: 4
-note: a failing actionlint prints "not on PATH" and make exits 0
+note: fixed — a failing actionlint now fails make, in all three targets
 order: 60
 owner:
 pr:
@@ -48,3 +48,14 @@ masking idiom appears at <code>Makefile:143</code> (hyperfine) and <code>Makefil
 (node); neither is reached by <code>check</code>, so they are cosmetic by comparison, but they are
 the same bug. Incidental drift found alongside: <code>CLAUDE.md</code> describes the lint recipe
 as "18 commands" and it is 19.
+
+<b>Shipped.</b> All three occurrences of the idiom were rewritten to an
+<code>if/then/else</code> so the tool's exit status is no longer discarded &mdash;
+<code>Makefile:64</code> (actionlint, inside <code>lint</code> and therefore inside
+<code>check</code>), plus <code>bench-cli</code> and <code>post-deploy</code>, which had the same
+bug without being reachable from the gate. Verified against the patched recipe itself, in all
+three states: a <b>failing</b> actionlint now fails <code>make</code> (exit 2) instead of printing
+"not on PATH" and returning 0; a <b>passing</b> one still exits 0; an <b>absent</b> one still exits
+0 with the skip message intact. The wider local-versus-CI gap this card also names &mdash;
+<code>zizmor</code> and <code>gitleaks</code> run only in CI and are absent from the Makefile
+&mdash; is untouched and still open.

{boost_skill_cli-1.0.276 → boost_skill_cli-1.0.278}/docs/roadmap/items/zizmor-pin-is-a-yanked-release.md

@@ -2,12 +2,12 @@
 id: zizmor-pin-is-a-yanked-release
 board: code
 section: pipeline
-status: planned
+status: shipped
 category: Security · CI/CD
 complexity: S
 impact: Med
 wow: 4
-note: the only yanked release of 66 — and the required lint job pins exactly it
+note: already fixed by a4450f76 twelve hours before this card was filed
 order: 63
 owner:
 pr:
@@ -34,3 +34,19 @@ And sweep the other exact pins for yanks: nothing currently checks for this. <co
 catches CVEs in the resolved dependency closure, but a yanked <em>pinned tool</em> is neither a
 CVE in the closure nor a manifest diff, so <code>osv-scanner</code> does not see it either. This
 was found by accident, while installing zizmor locally to verify an unrelated change.
+
+<b>Already shipped when this card was written &mdash; the card was filed stale, and that is the
+more useful finding.</b> Commit <code>a4450f76</code>, "ci(security): zizmor 1.27.0 is yanked
+&mdash; take 1.28.0", landed at <b>08:07Z</b>; this card was filed at <b>20:18Z</b>, twelve hours
+later, against a base that already carried <code>1.28.0</code>. The yank was observed correctly
+against a tree extracted earlier in the day and then never re-checked against the branch point.
+<code>ci.yml</code> now runs <code>pipx run zizmor==1.28.0</code>.
+
+Two things worth keeping from it. The predicted risk did not materialise: <code>zizmor
+1.28.0</code> runs clean over all 25 workflows (exit 0, "no findings to report"), and the
+line-anchored ignores in <code>.github/zizmor.yml</code> &mdash; including
+<code>sbom.yml:29</code> &mdash; all still resolve, so the bump needed no config change. And the
+gap the card names remains real and unclosed: <b>nothing checks whether an exact pin has been
+yanked</b>. <code>pip-audit</code> scans the resolved dependency closure and
+<code>osv-scanner</code> diffs the manifest; a yanked <em>pinned tool</em> is neither, so this was
+caught by a human noticing a pip warning, twice, by luck.

{boost_skill_cli-1.0.276 → boost_skill_cli-1.0.278}/docs/roadmap.html

@@ -1224,7 +1224,15 @@ firing, since those are what the entries are actually worth) and regenerate the
 with <code>lock_toolchain.py</code> instead. Whatever is chosen, it needs a guard: a lock that
 <i>loses</i> a platform-markered pin should fail its own gate rather than fail three Windows jobs
 two steps later, because the current failure names the install step and never mentions the missing
-package. Related: [[dependabot-root-pip-entry-duplicates-requirements]].</p>
+package. Related: [[dependabot-root-pip-entry-duplicates-requirements]].
+<b>Progress:</b> <code>lock_toolchain.py</code> now takes <code>-P/--upgrade-package</code>, so a
+Dependabot bump can be <i>reproduced</i> rather than merged — take the version it proposes,
+re-resolve that one package universally, and every other pin (markers included) stays as committed.
+Both open bumps were landed that way: <code>hypothesis</code> 6.161.6 to 6.163.0 and
+<code>twine</code> 6.2.0 to 7.0.0, four changed lines across five locks, with
+<code>colorama</code> and <code>pywin32-ctypes</code> intact. What remains is the config half —
+stopping Dependabot raising these at all — which is deliberately still open because its effect is
+only observable on the next scheduled run.</p>
         <div class="meta">
           <span class="m">Complexity <b>M</b></span>
           <span class="m hi">Impact <b>High</b></span>
@@ -2445,7 +2453,7 @@ fix.</p>
       </article>
 
       <article class="cap rcard" id="zizmor-pin-is-a-yanked-release">
-        <div class="head"><span class="pill planned">Planned</span><span class="cat">Security · CI/CD</span></div>
+        <div class="head"><span class="pill shipped">Shipped</span><span class="cat">Security · CI/CD</span></div>
         <h3>The required <code>lint</code> job pins <code>zizmor==1.27.0</code> &mdash; a yanked release</h3>
         <p><code>ci.yml</code> runs the workflow SAST step as
 <code>pipx run zizmor==1.27.0 .github/workflows</code>. PyPI marks <b>1.27.0 as yanked</b>, with
@@ -2467,12 +2475,28 @@ cleanly &mdash; the line-anchored ignore entries (<code>publish.yml:19</code>,
 And sweep the other exact pins for yanks: nothing currently checks for this. <code>pip-audit</code>
 catches CVEs in the resolved dependency closure, but a yanked <em>pinned tool</em> is neither a
 CVE in the closure nor a manifest diff, so <code>osv-scanner</code> does not see it either. This
-was found by accident, while installing zizmor locally to verify an unrelated change.</p>
+was found by accident, while installing zizmor locally to verify an unrelated change.
+
+<b>Already shipped when this card was written &mdash; the card was filed stale, and that is the
+more useful finding.</b> Commit <code>a4450f76</code>, "ci(security): zizmor 1.27.0 is yanked
+&mdash; take 1.28.0", landed at <b>08:07Z</b>; this card was filed at <b>20:18Z</b>, twelve hours
+later, against a base that already carried <code>1.28.0</code>. The yank was observed correctly
+against a tree extracted earlier in the day and then never re-checked against the branch point.
+<code>ci.yml</code> now runs <code>pipx run zizmor==1.28.0</code>.
+
+Two things worth keeping from it. The predicted risk did not materialise: <code>zizmor
+1.28.0</code> runs clean over all 25 workflows (exit 0, "no findings to report"), and the
+line-anchored ignores in <code>.github/zizmor.yml</code> &mdash; including
+<code>sbom.yml:29</code> &mdash; all still resolve, so the bump needed no config change. And the
+gap the card names remains real and unclosed: <b>nothing checks whether an exact pin has been
+yanked</b>. <code>pip-audit</code> scans the resolved dependency closure and
+<code>osv-scanner</code> diffs the manifest; a yanked <em>pinned tool</em> is neither, so this was
+caught by a human noticing a pip warning, twice, by luck.</p>
         <div class="meta">
           <span class="m">Complexity <b>S</b></span>
           <span class="m">Impact <b>Med</b></span>
           <span class="m">Wow <b class="wow">★★★★</b></span>
-          <span class="m">the only yanked release of 66 — and the required lint job pins exactly it</span>
+          <span class="m">already fixed by a4450f76 twelve hours before this card was filed</span>
         </div>
       </article>
 
@@ -3003,7 +3027,7 @@ artifact from review). At minimum, make the <code>--check</code> failure message
       </article>
 
       <article class="cap rcard" id="make-lint-masks-actionlint-failures">
-        <div class="head"><span class="pill planned">Planned</span><span class="cat">Testing · Bug</span></div>
+        <div class="head"><span class="pill shipped">Shipped</span><span class="cat">Testing · Bug</span></div>
         <h3><code>make lint</code> reports success when <code>actionlint</code> fails &mdash; and says it wasn't installed</h3>
         <p><code>Makefile:64</code> guards the workflow linter like this:
 
@@ -3039,12 +3063,23 @@ fail, so <code>make check</code> cannot report success while skipping a required
 masking idiom appears at <code>Makefile:143</code> (hyperfine) and <code>Makefile:167</code>
 (node); neither is reached by <code>check</code>, so they are cosmetic by comparison, but they are
 the same bug. Incidental drift found alongside: <code>CLAUDE.md</code> describes the lint recipe
-as "18 commands" and it is 19.</p>
+as "18 commands" and it is 19.
+
+<b>Shipped.</b> All three occurrences of the idiom were rewritten to an
+<code>if/then/else</code> so the tool's exit status is no longer discarded &mdash;
+<code>Makefile:64</code> (actionlint, inside <code>lint</code> and therefore inside
+<code>check</code>), plus <code>bench-cli</code> and <code>post-deploy</code>, which had the same
+bug without being reachable from the gate. Verified against the patched recipe itself, in all
+three states: a <b>failing</b> actionlint now fails <code>make</code> (exit 2) instead of printing
+"not on PATH" and returning 0; a <b>passing</b> one still exits 0; an <b>absent</b> one still exits
+0 with the skip message intact. The wider local-versus-CI gap this card also names &mdash;
+<code>zizmor</code> and <code>gitleaks</code> run only in CI and are absent from the Makefile
+&mdash; is untouched and still open.</p>
         <div class="meta">
           <span class="m">Complexity <b>S</b></span>
           <span class="m">Impact <b>Med</b></span>
           <span class="m">Wow <b class="wow">★★★★</b></span>
-          <span class="m">a failing actionlint prints "not on PATH" and make exits 0</span>
+          <span class="m">fixed — a failing actionlint now fails make, in all three targets</span>
         </div>
       </article>
       <!-- /ROADMAP:cards -->

{boost_skill_cli-1.0.276 → boost_skill_cli-1.0.278}/requirements/coverage-tools.txt

@@ -150,69 +150,69 @@ diff-cover==10.4.1 \
     --hash=sha256:0ec566955c9ee7da2f6cc48fa16fac7f97ad1fc4e50a887ffb9cfe5eb1e831df \
     --hash=sha256:dc8f2654c485ec4f16e679b5af6e205783cde71185d4ceb8157662dca2d531e9
     # via -r requirements/coverage-tools.in
-hypothesis==6.161.6 \
-    --hash=sha256:0323be2fca0754dff630fe1d719d5876c93c5e3be9678ae6fe8557bf689b5868 \
-    --hash=sha256:081a740171bf5bb3cacf2ee2f895803a3d0e6a9709722e0681ed919c724aaf6c \
-    --hash=sha256:0b2a58004ed367961bfce1703bee591221d94e28ad8ac15a57f0eecabbe659ac \
-    --hash=sha256:160f49f1b7e54e50a3ab67e9772b15df5085ec0f8e624e9acaf66dbaf8422f6e \
-    --hash=sha256:16c2af82180b08fa843b699db7f2b7d0ba9b62fd1e21fb8dd646bb96a16fd352 \
-    --hash=sha256:16da70ffe8507307bd8cea7f2ecdcb7bda1d1980412213ad55571044ba53300f \
-    --hash=sha256:17bec7179accef79e7bfaed5c68e312a8b440aaf8423e9a67289f8804517ec32 \
-    --hash=sha256:18fff0ca1d5dded13c56f430d377bc6585327bb4b987fcf8e37676633569b48c \
-    --hash=sha256:225b51e0ea315cb70eaee0e0d6506bc5452f1b3f08f48c48953dd2afea006491 \
-    --hash=sha256:2af997b980ddad5cb8a6d13bd48fcae35f4211e339ff5bb48abe2754d75918b8 \
-    --hash=sha256:2efac2635c2a690b2afe84e94fceed8c4d3c219fa806340e73fc8f26233dc801 \
-    --hash=sha256:332e8a7b99fa69a2675a726f5136e68545b9e84e0ff744679b14accf62ed2b5d \
-    --hash=sha256:359eb0d8bd7c6d2a63ac765fc0b6e0d73bfad9a06aef98ad0f7b2619c17ee8fe \
-    --hash=sha256:36bd6e336f4a0b259311860306674e83175b56650bd1a54aaa6bb1c878accf03 \
-    --hash=sha256:39564c86891a731872d5a2fffa76788ee24cf57dc713d8d140382487f4afc4f4 \
-    --hash=sha256:3a890919b3c93aab5d7fbc945d25e16100bd3cf58acfba54664f4f7b2023f4c1 \
-    --hash=sha256:3ce10197c57f7efd7bf49509d24a4154f2a0e01a9758b57cef1523e289c4858d \
-    --hash=sha256:428951eb9e755d5d061fe110313cd6c625184cb8b1cbe2cd781b117aaf02d3a7 \
-    --hash=sha256:42c70d23e59dc4748cb2f8aee131f979bf16e9612b2ee48f7e8fb51c70f4a948 \
-    --hash=sha256:47ff47cff1fc4b704b805c255bc7c3c64e2c3f7eebdc1bc4c4155df8621cbab3 \
-    --hash=sha256:4a40098bc9c863c2013efb7f9b02f22721e971f795305f24934874a3135e77ef \
-    --hash=sha256:4fad1cb8f49b453890dd5768e14c79e9f6cc8079f1f474e3b9027956985ab2c9 \
-    --hash=sha256:53e279433bba79a30ec299d281572ca1533309986ed7e1992f9b1c300cbc9173 \
-    --hash=sha256:5d585eb08b1319776093cde6a7bc30ce7ee9675001b105e6f4e99f2850ed4620 \
-    --hash=sha256:61ae780388292510ea303f0d79154a4623e8e0c00c49ba981329ec111800bd7c \
-    --hash=sha256:635f0286e7fc771e58d82d38280dcedf2d0cd41f353f49cd74be04367683b9d6 \
-    --hash=sha256:662221ad5961cf746626ca024b1b52474f2debf892bbac2af978aad4f5e2bfbf \
-    --hash=sha256:6bbd0a83fc79cb317230bc9122755035a64505071d1e0599e9dfd6371e4ebdb3 \
-    --hash=sha256:6fc0cd5490f69202a8608aa3c3085078c598117049672c6173c4eb8cdfff8b26 \
-    --hash=sha256:7478ba09770f49c160ffbd22b4bbf7d886ac309653fa7116b5edd65e53536b8d \
-    --hash=sha256:7712075d545604a728007ea085fa10acd785713d6e54c8702dbc0b5bed6d2175 \
-    --hash=sha256:7e4cc1073644a1b468f46252cc4f135eb51c59d79dbc08acfcd6b4ac290a9ffc \
-    --hash=sha256:7fbed7de4873833d4a51fbe437dc3edc5f2a76c48666485432233864a530c549 \
-    --hash=sha256:8da289ff744e6225feb222f6d8ece08d77324cbabe2357ab7067632c0c06a359 \
-    --hash=sha256:91bccc94514b865604079a2f5187f02a8e6e855c78ae2127b7fe2e7929a47949 \
-    --hash=sha256:959a0db6f42fe01faf393646876ce43f736fb3c0162dbfafd4f4de21bd4aa6c8 \
-    --hash=sha256:96c325113320f3fc50ed889a20114b9e317145a66c19544dbd071ba173328690 \
-    --hash=sha256:981fa76521dd82a05e8749182404f675d3e0ad0b84566c558c8c45d7a8fb70fc \
-    --hash=sha256:a06a6d62efec24bd196ff47dc4dd95c0714e23e870b7f9e2ef2f4429525760ee \
-    --hash=sha256:a7933cf957fa95ed311be348beb6ebab9a80e4fbcd665bdfdfc82d28703967d8 \
-    --hash=sha256:ac13ee5963380f63f9ffe2de47b7b489a09f8a1e2701e9c816476ff52405ed71 \
-    --hash=sha256:b199468cb6a1afe74bfad8c0f0580ced611341052df478e7d6db1128bce4b07f \
-    --hash=sha256:b54632d679dc00079ee4aa458131ed58776abb98d96ef27919777ac06b363944 \
-    --hash=sha256:b76dd9bfca6ac3baed9996b20a12c84058f7c17e5802636939c13ed9b3664f4d \
-    --hash=sha256:b9321091368ff8e7955f2178b9df3bf2f1e4dd8d360c173a9414c9d27ed697f4 \
-    --hash=sha256:badae92f9fe82a882d0e33f48079fdab760fb1c16ac0be282234c0eb89de9f18 \
-    --hash=sha256:bedf9019cac5272b0c08542e56a124841121368d084cb6f840d0d97fd2dd73c0 \
-    --hash=sha256:c0eee4d6609b0245fb6343c600794387d780d41f298b2120869930adb10b22bf \
-    --hash=sha256:c40f0aed8e8037a5ea4fa9486ea98c0ec3a007419bd7b3dbe14712a3632e028b \
-    --hash=sha256:ce243a3caa26284247eee61992e0e07f85a466fc6f5ac8e72992ba910612dbc2 \
-    --hash=sha256:ce64858eaef339a487c4e7ac1cb8898412a36d06a7872bc44af239a7ab5c2ffd \
-    --hash=sha256:e276f5705cb929ff059785db8fd3a5074c9081529944833a0a4b4f6b9b9303dd \
-    --hash=sha256:e5eb2a65d803da165ca5faa01ca07d2c47aa41e0a4de7d14b3c74f478f38241a \
-    --hash=sha256:e692d51542664b3d431fe835ada7d37630764e7542150bfa987346b03b3b00a1 \
-    --hash=sha256:e8c9de18a5dc42bef1b7c3c65e4f72a5a9c3604a438c721d25c802ec2ded06ac \
-    --hash=sha256:ecf98cf996b82ca46efa3eebe151c6721c1109df50d34aeb73ad8477d7b85363 \
-    --hash=sha256:f8e3d3c0820b8a71a4804f92e3d2667db2d013c6285e467ac0e098927243e14a \
-    --hash=sha256:f94c1189c8b4e42a3fa28e89df4fa5b5dfe9289e7aa50381443e459ac003d8ea \
-    --hash=sha256:fc11a56f2b4931ecf25ce578c535c9f6448ed60f112dce9eae09fb0b0d655db1 \
-    --hash=sha256:fc96ba21133e95a01ab56486b91f83f1e5609ffe55f17618d732cbb29dcb8863 \
-    --hash=sha256:fdad7dfa87d62ffbbeb89197cfd734285275576f8d8106bcd72696446202c0fc \
-    --hash=sha256:ff4e786eb37ef81dd6f78f0238ec787217dbcdb00ccc565c14eee22c676677ba
+hypothesis==6.163.0 \
+    --hash=sha256:002a9709345892279fb0e81b5a05b72d08cfe81f937339827be0d588607ca9b0 \
+    --hash=sha256:00d3091b28de83c5116e0ccd9a4bcb28ef61d2aace5df91093bb22434fd2350c \
+    --hash=sha256:0a0c396244c13805edcb73ff467c4c8178ccefc41c4ef5ed00a68e612fd773e9 \
+    --hash=sha256:0a933aca9ebf9daf951d07cf01200c94c321b6ee0b42cc7b67675c9686d914c2 \
+    --hash=sha256:0cba5202f74e7e4cdb676d86f26e8cc1b4fdc88f7f58ba73c8ac45b6b22f3070 \
+    --hash=sha256:213527755f0fc2b1f3721e73fd60023e2752a48f914e3e2df8d35111956ae5c8 \
+    --hash=sha256:21e72e8d5818e5ef8cd6a2191c386e3fd1a6d9e3739cf97289b4d9b5dbc8e38d \
+    --hash=sha256:2849c23b2e0fe2eef4c1ec336b01eac7ad7397c49fca43c264f59ec1e6046eac \
+    --hash=sha256:28a6cc1c25a6cc9b6ec079eaabd32ac769994831ecddd57123ce43c9056dcf34 \
+    --hash=sha256:31dc46c48aa53c3ec92d03120978ca7f19b9cf96d195ed3fc93503f1433c94a6 \
+    --hash=sha256:320b076bf6436f971f1c73ee651e60001226d1b4e341f2c4a1ca87248261ca03 \
+    --hash=sha256:331906cb029b6b360b8ebac3ec00c3cfa720037fe2efb294a503a1979c9a9a8f \
+    --hash=sha256:34fc895691a2420595506eb17f3a104f2fa9039f013c0770a6cc2743ccaf6fed \
+    --hash=sha256:3b6cee2afe6c67b31a4a64b63a876e0b020befdc61daabea80f7a0e14f19203a \
+    --hash=sha256:3f3cceb4720a39127622fbf3bcebe1775b894372c53b5edddfdef10bbdeef9ec \
+    --hash=sha256:40dfab6fe6a02a80abef81aebf88e53cd529e3f2f6ba3486b674a67b1f4a3512 \
+    --hash=sha256:4159a1c2560e10de51b1c14956e277eb1b37526c9abef9e87c1e531760486448 \
+    --hash=sha256:487ab8ec2f01a225d6a1e2ceadc5290cde2c691952bd2e7f76199cf82e06fb25 \
+    --hash=sha256:4ab0dadc09c537d4ac57e564039dfe7daf09c98375306d54bfc0fd6c218efcca \
+    --hash=sha256:50073f8e63c1e7d3403899755657a990d8bba7b5b5bff66b1c56796d4969bb28 \
+    --hash=sha256:520480d4bd3a17557616c25923640953e360332c89d012fffcebd69857e674a9 \
+    --hash=sha256:52f16840add2eb02c2416f3b83cec4f527b6c19699f2d31eff4859233c715526 \
+    --hash=sha256:56ed585baab75cb98462c57ca88bbdc6a9d935a14118dd572fb476c3ecec2a06 \
+    --hash=sha256:58be45d1737bf8c2e10cf29505c0f10f8a23d61bc82e4339182a6c8251cbc2d9 \
+    --hash=sha256:59f5fdb8addb44c17520a60d50542d9db6ceba577bbf54efefa9c10ee20be140 \
+    --hash=sha256:5a3ac6c62d49f7fe518dfe7fa924fa03aac839993702207802b0e45f9e1b0dab \
+    --hash=sha256:67d1593941ede41052b4a35ec25b50d0e280358c7674ef7812d520010e7e8bdf \
+    --hash=sha256:6ae63dec6d1d467b7f4737455f81a7a82f14a41c14510937fcfbc726a085b5f8 \
+    --hash=sha256:7a3db868a943c814cc557104712d43bf609adfe5ea9f708f38377d366b4855f8 \
+    --hash=sha256:7ca7b20bf38d51e15f7808b0239791c4792b1709ce0c63093acaff56a09c31e6 \
+    --hash=sha256:7cb3d927360fe73f9a06d646e6082237142ee39c24679c7133d22bf06dd03b45 \
+    --hash=sha256:7ef8954e37c80e0c46e6161eef1c72c71059b95250e620a77bd646f6c7a52a2d \
+    --hash=sha256:8aac96db8a6c7ee43aba2ee0d3c43893da1fb7c38ed54790c1be2b6d8fd87b96 \
+    --hash=sha256:8c5d1e6bad47edf6fb1d7406cf6d67314ac08325c63a49550d782a4596ea302b \
+    --hash=sha256:9105c66ea8dbc108adc42058bb7b65bd953f53ee178bf63bf9ebb0cded6c8c96 \
+    --hash=sha256:9be37b7ddf0af9e3f9112cd133afc34e78a56da1f96db5f2b4fc289fe1c4d1c3 \
+    --hash=sha256:9c084749c115ea7918cf7efa144682783da17eec70d1276689182b871126e715 \
+    --hash=sha256:9d23f0f3a14bb6e6f99c793d340196dba4af95ba25bfcab624d1794f540f5e27 \
+    --hash=sha256:a16ebce774755a7a652bd44c62101dc914372ed1a98935969624848c9627b4a4 \
+    --hash=sha256:a2a20e9835d3c4b293a709ee6ef769bcb18c6ed4ef337a9e251c1a9496d5e8be \
+    --hash=sha256:a57352efa938889ea9992667a5014c0fc870d03945de71918574d1cf28276378 \
+    --hash=sha256:ab34c61d9249f1a8129cb4276062c04e3e47b5be8de6446e7c7fe11362d6fe43 \
+    --hash=sha256:b123b4995a7612f1130e2b2362c9a5d0568df887bf7e7bdb45c23af8cd5423c9 \
+    --hash=sha256:b268211e625cd550e361fc387bf1db5deb1e9cae0ce4041116f0a0aafeef7c06 \
+    --hash=sha256:b2ddcdaf6691101e06dc4a5add7b8c8fdf1e68daba599255a281f3f3550d3331 \
+    --hash=sha256:b4ad2134405d5345434c22dea96bbc12c85abcfc3c253a8063dbc9ff01164555 \
+    --hash=sha256:b839dfd1342bb50570cb0c66b80322307cdb468abf14faf5df4dab022bc1b9ce \
+    --hash=sha256:b8f22fb8218ba6a452bf9000fc656e1ed57625d17cc8a3871a0fcea3b1b69ebf \
+    --hash=sha256:bd312b15044b1c1a0920a5827a830559b2d1fa380851cedf509f8b835309c5b9 \
+    --hash=sha256:c0ec3b709508ccd835d8ded1db025b7800618f2289a22a6bfd4927da5f4eb33c \
+    --hash=sha256:c4f5be1482189c7b0a1dcac269fffe97a7d18cc04ac9a9a4d6613212dd87f38b \
+    --hash=sha256:ca1b48bde68c528a79dec2a2859e05035802e5b1c9c3579f388c9de6ed6d0148 \
+    --hash=sha256:d0838a28e9943d5b834ebae59b02adda76e2cd1e65caa808104c72102052057d \
+    --hash=sha256:e165f6cc2075059b7c95dac1612bfb25494f72d90f56880e84c288b089f8a896 \
+    --hash=sha256:e568a3d766b7ba8df00e0c33efc4c6530cde14fbc72daabe4824eed211ed7596 \
+    --hash=sha256:ee47c2cb1be03a052ebd3549dad07f636a98b3ccfd7acbe5e17b3b7da0ab9e37 \
+    --hash=sha256:f1fe222f50a1898e87a1e7323ab35f9e956278efabe4dd55a1342808206d05ad \
+    --hash=sha256:f28ad27193c1fbcfb52ef2ee63d2b721563525089e80962b4268b306dac45507 \
+    --hash=sha256:f2f1b67a48da86d3e41c9445367b49a49f7efdb60fc8b5e3593f05e6afb2efbe \
+    --hash=sha256:f7f706df6839dcc53f20833f2933cbcd126fd2fdee7c312e053de49df4b64e44 \
+    --hash=sha256:fae7305ae20fddeea09df317b920c45d3e20bfedbdb041f4db6ca5267c458189 \
+    --hash=sha256:ffdda3006a383a48f71a23b4f2b3fae3fe1b09af67925d885985f7ec34d66bcb
     # via -r requirements/test-tools.in
 iniconfig==2.3.0 \
     --hash=sha256:c76315c77db068650d49c5b56314774a7804df16fee4402c1f19d6d15d8c4730 \

{boost_skill_cli-1.0.276 → boost_skill_cli-1.0.278}/requirements/mutation-tools.txt

@@ -115,69 +115,69 @@ coverage==7.15.2 \
     #   -r requirements/test-tools.in
     #   mutmut
     #   pytest-cov
-hypothesis==6.161.6 \
-    --hash=sha256:0323be2fca0754dff630fe1d719d5876c93c5e3be9678ae6fe8557bf689b5868 \
-    --hash=sha256:081a740171bf5bb3cacf2ee2f895803a3d0e6a9709722e0681ed919c724aaf6c \
-    --hash=sha256:0b2a58004ed367961bfce1703bee591221d94e28ad8ac15a57f0eecabbe659ac \
-    --hash=sha256:160f49f1b7e54e50a3ab67e9772b15df5085ec0f8e624e9acaf66dbaf8422f6e \
-    --hash=sha256:16c2af82180b08fa843b699db7f2b7d0ba9b62fd1e21fb8dd646bb96a16fd352 \
-    --hash=sha256:16da70ffe8507307bd8cea7f2ecdcb7bda1d1980412213ad55571044ba53300f \
-    --hash=sha256:17bec7179accef79e7bfaed5c68e312a8b440aaf8423e9a67289f8804517ec32 \
-    --hash=sha256:18fff0ca1d5dded13c56f430d377bc6585327bb4b987fcf8e37676633569b48c \
-    --hash=sha256:225b51e0ea315cb70eaee0e0d6506bc5452f1b3f08f48c48953dd2afea006491 \
-    --hash=sha256:2af997b980ddad5cb8a6d13bd48fcae35f4211e339ff5bb48abe2754d75918b8 \
-    --hash=sha256:2efac2635c2a690b2afe84e94fceed8c4d3c219fa806340e73fc8f26233dc801 \
-    --hash=sha256:332e8a7b99fa69a2675a726f5136e68545b9e84e0ff744679b14accf62ed2b5d \
-    --hash=sha256:359eb0d8bd7c6d2a63ac765fc0b6e0d73bfad9a06aef98ad0f7b2619c17ee8fe \
-    --hash=sha256:36bd6e336f4a0b259311860306674e83175b56650bd1a54aaa6bb1c878accf03 \
-    --hash=sha256:39564c86891a731872d5a2fffa76788ee24cf57dc713d8d140382487f4afc4f4 \
-    --hash=sha256:3a890919b3c93aab5d7fbc945d25e16100bd3cf58acfba54664f4f7b2023f4c1 \
-    --hash=sha256:3ce10197c57f7efd7bf49509d24a4154f2a0e01a9758b57cef1523e289c4858d \
-    --hash=sha256:428951eb9e755d5d061fe110313cd6c625184cb8b1cbe2cd781b117aaf02d3a7 \
-    --hash=sha256:42c70d23e59dc4748cb2f8aee131f979bf16e9612b2ee48f7e8fb51c70f4a948 \
-    --hash=sha256:47ff47cff1fc4b704b805c255bc7c3c64e2c3f7eebdc1bc4c4155df8621cbab3 \
-    --hash=sha256:4a40098bc9c863c2013efb7f9b02f22721e971f795305f24934874a3135e77ef \
-    --hash=sha256:4fad1cb8f49b453890dd5768e14c79e9f6cc8079f1f474e3b9027956985ab2c9 \
-    --hash=sha256:53e279433bba79a30ec299d281572ca1533309986ed7e1992f9b1c300cbc9173 \
-    --hash=sha256:5d585eb08b1319776093cde6a7bc30ce7ee9675001b105e6f4e99f2850ed4620 \
-    --hash=sha256:61ae780388292510ea303f0d79154a4623e8e0c00c49ba981329ec111800bd7c \
-    --hash=sha256:635f0286e7fc771e58d82d38280dcedf2d0cd41f353f49cd74be04367683b9d6 \
-    --hash=sha256:662221ad5961cf746626ca024b1b52474f2debf892bbac2af978aad4f5e2bfbf \
-    --hash=sha256:6bbd0a83fc79cb317230bc9122755035a64505071d1e0599e9dfd6371e4ebdb3 \
-    --hash=sha256:6fc0cd5490f69202a8608aa3c3085078c598117049672c6173c4eb8cdfff8b26 \
-    --hash=sha256:7478ba09770f49c160ffbd22b4bbf7d886ac309653fa7116b5edd65e53536b8d \
-    --hash=sha256:7712075d545604a728007ea085fa10acd785713d6e54c8702dbc0b5bed6d2175 \
-    --hash=sha256:7e4cc1073644a1b468f46252cc4f135eb51c59d79dbc08acfcd6b4ac290a9ffc \
-    --hash=sha256:7fbed7de4873833d4a51fbe437dc3edc5f2a76c48666485432233864a530c549 \
-    --hash=sha256:8da289ff744e6225feb222f6d8ece08d77324cbabe2357ab7067632c0c06a359 \
-    --hash=sha256:91bccc94514b865604079a2f5187f02a8e6e855c78ae2127b7fe2e7929a47949 \
-    --hash=sha256:959a0db6f42fe01faf393646876ce43f736fb3c0162dbfafd4f4de21bd4aa6c8 \
-    --hash=sha256:96c325113320f3fc50ed889a20114b9e317145a66c19544dbd071ba173328690 \
-    --hash=sha256:981fa76521dd82a05e8749182404f675d3e0ad0b84566c558c8c45d7a8fb70fc \
-    --hash=sha256:a06a6d62efec24bd196ff47dc4dd95c0714e23e870b7f9e2ef2f4429525760ee \
-    --hash=sha256:a7933cf957fa95ed311be348beb6ebab9a80e4fbcd665bdfdfc82d28703967d8 \
-    --hash=sha256:ac13ee5963380f63f9ffe2de47b7b489a09f8a1e2701e9c816476ff52405ed71 \
-    --hash=sha256:b199468cb6a1afe74bfad8c0f0580ced611341052df478e7d6db1128bce4b07f \
-    --hash=sha256:b54632d679dc00079ee4aa458131ed58776abb98d96ef27919777ac06b363944 \
-    --hash=sha256:b76dd9bfca6ac3baed9996b20a12c84058f7c17e5802636939c13ed9b3664f4d \
-    --hash=sha256:b9321091368ff8e7955f2178b9df3bf2f1e4dd8d360c173a9414c9d27ed697f4 \
-    --hash=sha256:badae92f9fe82a882d0e33f48079fdab760fb1c16ac0be282234c0eb89de9f18 \
-    --hash=sha256:bedf9019cac5272b0c08542e56a124841121368d084cb6f840d0d97fd2dd73c0 \
-    --hash=sha256:c0eee4d6609b0245fb6343c600794387d780d41f298b2120869930adb10b22bf \
-    --hash=sha256:c40f0aed8e8037a5ea4fa9486ea98c0ec3a007419bd7b3dbe14712a3632e028b \
-    --hash=sha256:ce243a3caa26284247eee61992e0e07f85a466fc6f5ac8e72992ba910612dbc2 \
-    --hash=sha256:ce64858eaef339a487c4e7ac1cb8898412a36d06a7872bc44af239a7ab5c2ffd \
-    --hash=sha256:e276f5705cb929ff059785db8fd3a5074c9081529944833a0a4b4f6b9b9303dd \
-    --hash=sha256:e5eb2a65d803da165ca5faa01ca07d2c47aa41e0a4de7d14b3c74f478f38241a \
-    --hash=sha256:e692d51542664b3d431fe835ada7d37630764e7542150bfa987346b03b3b00a1 \
-    --hash=sha256:e8c9de18a5dc42bef1b7c3c65e4f72a5a9c3604a438c721d25c802ec2ded06ac \
-    --hash=sha256:ecf98cf996b82ca46efa3eebe151c6721c1109df50d34aeb73ad8477d7b85363 \
-    --hash=sha256:f8e3d3c0820b8a71a4804f92e3d2667db2d013c6285e467ac0e098927243e14a \
-    --hash=sha256:f94c1189c8b4e42a3fa28e89df4fa5b5dfe9289e7aa50381443e459ac003d8ea \
-    --hash=sha256:fc11a56f2b4931ecf25ce578c535c9f6448ed60f112dce9eae09fb0b0d655db1 \
-    --hash=sha256:fc96ba21133e95a01ab56486b91f83f1e5609ffe55f17618d732cbb29dcb8863 \
-    --hash=sha256:fdad7dfa87d62ffbbeb89197cfd734285275576f8d8106bcd72696446202c0fc \
-    --hash=sha256:ff4e786eb37ef81dd6f78f0238ec787217dbcdb00ccc565c14eee22c676677ba
+hypothesis==6.163.0 \
+    --hash=sha256:002a9709345892279fb0e81b5a05b72d08cfe81f937339827be0d588607ca9b0 \
+    --hash=sha256:00d3091b28de83c5116e0ccd9a4bcb28ef61d2aace5df91093bb22434fd2350c \
+    --hash=sha256:0a0c396244c13805edcb73ff467c4c8178ccefc41c4ef5ed00a68e612fd773e9 \
+    --hash=sha256:0a933aca9ebf9daf951d07cf01200c94c321b6ee0b42cc7b67675c9686d914c2 \
+    --hash=sha256:0cba5202f74e7e4cdb676d86f26e8cc1b4fdc88f7f58ba73c8ac45b6b22f3070 \
+    --hash=sha256:213527755f0fc2b1f3721e73fd60023e2752a48f914e3e2df8d35111956ae5c8 \
+    --hash=sha256:21e72e8d5818e5ef8cd6a2191c386e3fd1a6d9e3739cf97289b4d9b5dbc8e38d \
+    --hash=sha256:2849c23b2e0fe2eef4c1ec336b01eac7ad7397c49fca43c264f59ec1e6046eac \
+    --hash=sha256:28a6cc1c25a6cc9b6ec079eaabd32ac769994831ecddd57123ce43c9056dcf34 \
+    --hash=sha256:31dc46c48aa53c3ec92d03120978ca7f19b9cf96d195ed3fc93503f1433c94a6 \
+    --hash=sha256:320b076bf6436f971f1c73ee651e60001226d1b4e341f2c4a1ca87248261ca03 \
+    --hash=sha256:331906cb029b6b360b8ebac3ec00c3cfa720037fe2efb294a503a1979c9a9a8f \
+    --hash=sha256:34fc895691a2420595506eb17f3a104f2fa9039f013c0770a6cc2743ccaf6fed \
+    --hash=sha256:3b6cee2afe6c67b31a4a64b63a876e0b020befdc61daabea80f7a0e14f19203a \
+    --hash=sha256:3f3cceb4720a39127622fbf3bcebe1775b894372c53b5edddfdef10bbdeef9ec \
+    --hash=sha256:40dfab6fe6a02a80abef81aebf88e53cd529e3f2f6ba3486b674a67b1f4a3512 \
+    --hash=sha256:4159a1c2560e10de51b1c14956e277eb1b37526c9abef9e87c1e531760486448 \
+    --hash=sha256:487ab8ec2f01a225d6a1e2ceadc5290cde2c691952bd2e7f76199cf82e06fb25 \
+    --hash=sha256:4ab0dadc09c537d4ac57e564039dfe7daf09c98375306d54bfc0fd6c218efcca \
+    --hash=sha256:50073f8e63c1e7d3403899755657a990d8bba7b5b5bff66b1c56796d4969bb28 \
+    --hash=sha256:520480d4bd3a17557616c25923640953e360332c89d012fffcebd69857e674a9 \
+    --hash=sha256:52f16840add2eb02c2416f3b83cec4f527b6c19699f2d31eff4859233c715526 \
+    --hash=sha256:56ed585baab75cb98462c57ca88bbdc6a9d935a14118dd572fb476c3ecec2a06 \
+    --hash=sha256:58be45d1737bf8c2e10cf29505c0f10f8a23d61bc82e4339182a6c8251cbc2d9 \
+    --hash=sha256:59f5fdb8addb44c17520a60d50542d9db6ceba577bbf54efefa9c10ee20be140 \
+    --hash=sha256:5a3ac6c62d49f7fe518dfe7fa924fa03aac839993702207802b0e45f9e1b0dab \
+    --hash=sha256:67d1593941ede41052b4a35ec25b50d0e280358c7674ef7812d520010e7e8bdf \
+    --hash=sha256:6ae63dec6d1d467b7f4737455f81a7a82f14a41c14510937fcfbc726a085b5f8 \
+    --hash=sha256:7a3db868a943c814cc557104712d43bf609adfe5ea9f708f38377d366b4855f8 \
+    --hash=sha256:7ca7b20bf38d51e15f7808b0239791c4792b1709ce0c63093acaff56a09c31e6 \
+    --hash=sha256:7cb3d927360fe73f9a06d646e6082237142ee39c24679c7133d22bf06dd03b45 \
+    --hash=sha256:7ef8954e37c80e0c46e6161eef1c72c71059b95250e620a77bd646f6c7a52a2d \
+    --hash=sha256:8aac96db8a6c7ee43aba2ee0d3c43893da1fb7c38ed54790c1be2b6d8fd87b96 \
+    --hash=sha256:8c5d1e6bad47edf6fb1d7406cf6d67314ac08325c63a49550d782a4596ea302b \
+    --hash=sha256:9105c66ea8dbc108adc42058bb7b65bd953f53ee178bf63bf9ebb0cded6c8c96 \
+    --hash=sha256:9be37b7ddf0af9e3f9112cd133afc34e78a56da1f96db5f2b4fc289fe1c4d1c3 \
+    --hash=sha256:9c084749c115ea7918cf7efa144682783da17eec70d1276689182b871126e715 \
+    --hash=sha256:9d23f0f3a14bb6e6f99c793d340196dba4af95ba25bfcab624d1794f540f5e27 \
+    --hash=sha256:a16ebce774755a7a652bd44c62101dc914372ed1a98935969624848c9627b4a4 \
+    --hash=sha256:a2a20e9835d3c4b293a709ee6ef769bcb18c6ed4ef337a9e251c1a9496d5e8be \
+    --hash=sha256:a57352efa938889ea9992667a5014c0fc870d03945de71918574d1cf28276378 \
+    --hash=sha256:ab34c61d9249f1a8129cb4276062c04e3e47b5be8de6446e7c7fe11362d6fe43 \
+    --hash=sha256:b123b4995a7612f1130e2b2362c9a5d0568df887bf7e7bdb45c23af8cd5423c9 \
+    --hash=sha256:b268211e625cd550e361fc387bf1db5deb1e9cae0ce4041116f0a0aafeef7c06 \
+    --hash=sha256:b2ddcdaf6691101e06dc4a5add7b8c8fdf1e68daba599255a281f3f3550d3331 \
+    --hash=sha256:b4ad2134405d5345434c22dea96bbc12c85abcfc3c253a8063dbc9ff01164555 \
+    --hash=sha256:b839dfd1342bb50570cb0c66b80322307cdb468abf14faf5df4dab022bc1b9ce \
+    --hash=sha256:b8f22fb8218ba6a452bf9000fc656e1ed57625d17cc8a3871a0fcea3b1b69ebf \
+    --hash=sha256:bd312b15044b1c1a0920a5827a830559b2d1fa380851cedf509f8b835309c5b9 \
+    --hash=sha256:c0ec3b709508ccd835d8ded1db025b7800618f2289a22a6bfd4927da5f4eb33c \
+    --hash=sha256:c4f5be1482189c7b0a1dcac269fffe97a7d18cc04ac9a9a4d6613212dd87f38b \
+    --hash=sha256:ca1b48bde68c528a79dec2a2859e05035802e5b1c9c3579f388c9de6ed6d0148 \
+    --hash=sha256:d0838a28e9943d5b834ebae59b02adda76e2cd1e65caa808104c72102052057d \
+    --hash=sha256:e165f6cc2075059b7c95dac1612bfb25494f72d90f56880e84c288b089f8a896 \
+    --hash=sha256:e568a3d766b7ba8df00e0c33efc4c6530cde14fbc72daabe4824eed211ed7596 \
+    --hash=sha256:ee47c2cb1be03a052ebd3549dad07f636a98b3ccfd7acbe5e17b3b7da0ab9e37 \
+    --hash=sha256:f1fe222f50a1898e87a1e7323ab35f9e956278efabe4dd55a1342808206d05ad \
+    --hash=sha256:f28ad27193c1fbcfb52ef2ee63d2b721563525089e80962b4268b306dac45507 \
+    --hash=sha256:f2f1b67a48da86d3e41c9445367b49a49f7efdb60fc8b5e3593f05e6afb2efbe \
+    --hash=sha256:f7f706df6839dcc53f20833f2933cbcd126fd2fdee7c312e053de49df4b64e44 \
+    --hash=sha256:fae7305ae20fddeea09df317b920c45d3e20bfedbdb041f4db6ca5267c458189 \
+    --hash=sha256:ffdda3006a383a48f71a23b4f2b3fae3fe1b09af67925d885985f7ec34d66bcb
     # via -r requirements/test-tools.in
 iniconfig==2.3.0 \
     --hash=sha256:c76315c77db068650d49c5b56314774a7804df16fee4402c1f19d6d15d8c4730 \

{boost_skill_cli-1.0.276 → boost_skill_cli-1.0.278}/requirements/release-tools.txt

@@ -752,9 +752,9 @@ trove-classifiers==2026.6.1.19 \
     --hash=sha256:ab4c4ec93cc4a4e7815fa759906e05e6bb3f2fbd92ea0f897288c6a43efd15b3 \
     --hash=sha256:c5132b4b61a829d11cfbd2d72e97f20a45ed6edb95e45c5efdeb5e00836b2745
     # via pyroma
-twine==6.2.0 \
-    --hash=sha256:418ebf08ccda9a8caaebe414433b0ba5e25eb5e4a927667122fbe8f829f985d8 \
-    --hash=sha256:e5ed0d2fd70c9959770dce51c8f39c8945c574e18173a7b81802dab51b4b75cf
+twine==7.0.0 \
+    --hash=sha256:85cdb29c518efef867360ae4acd4b0dfd61c8654a22fca08e6f8539f05022177 \
+    --hash=sha256:b854164df26db268af05f49aa5c0344b10e27a494343ff05b1e0bad3b135f5a7
     # via -r requirements/release-tools.in
 typing-extensions==4.16.0 \
     --hash=sha256:481caa481374e813c1b176ada14e97f1f67a4539ce9cfeb3f350d78d6370c2e8 \