# Exact pins, enforced by the shared dependency-freshness gate: a `>=`
# floor is satisfied by anything newer, so it tells a checker nothing
# about whether this repo is actually current.
bandit[toml]==1.9.4
mypy==2.3.1
pre-commit==4.6.2
pylint==4.0.9
pytest==9.1.1
pytest-cov==7.1.0
ruff==0.16.9