deps(pypi): anthropic 2.3.0, hypothesis 6.170.9, importlib-metadata 10.1.0

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019C8pdLR4MePsLocE1pWz7F

docs/superpowers/evidence/pypi-pins-bump-2026-10-25.json

@@ -0,0 +1,24 @@
+{
+  "intent": "meta/requirements.txt pins are the newest stable releases again, so the dependency-freshness CI job and the ci-baseline-green hook go green.",
+  "scope": [
+    "meta/requirements.txt (anthropic, hypothesis, importlib-metadata only)",
+    "Non-goal: any code change; existing allowlist entries unchanged"
+  ],
+  "changes": [
+    "anthropic 2.1.0 -> 2.3.0, hypothesis 6.170.6 -> 6.170.9, importlib-metadata 9.0.1 -> 10.1.0 (released after the previous bumps)"
+  ],
+  "verification": [
+    {
+      "command": "uv pip compile --python-version 3.14 meta/requirements.txt",
+      "result": "pass",
+      "evidence": "resolves with exactly the new pins (rc=0)"
+    },
+    {
+      "command": "pre-commit run dependency-freshness --files meta/requirements.txt",
+      "result": "pass",
+      "evidence": "Passed; CI run 39954483117 had listed hypothesis and importlib-metadata as behind, the local gate then also listed anthropic"
+    }
+  ],
+  "risks": ["importlib-metadata major bump 9 -> 10 is transitive-only here; caught by python-tests CI if an importer breaks"],
+  "rollback": ["git revert this commit"]
+}

meta/requirements.txt

@@ -6,7 +6,7 @@
 
 add-trailing-comma==4.0.0
 aiohttp==3.14.5
-anthropic==2.1.0
+anthropic==2.3.0
 autoflake==2.4.0
 autopep8==2.3.2
 bandit==1.9.4
@@ -39,8 +39,8 @@ gatelock @ git+https://github.com/kuhyx/utils@gatelock-v0.11.0#subdirectory=gate
 genanki==0.13.1
 geopandas==1.2.0
 howlongtobeatpy==1.0.24
-hypothesis==6.170.6
-importlib-metadata==9.0.1
+hypothesis==6.170.9
+importlib-metadata==10.1.0
 interrogate==1.7.0
 # isort is deliberately not pinned: nothing here imports it (ruff's isort
 # rules replaced it) and pylint constrains it (`isort!=5.13,<10,>=5` as of