# Exact pins, enforced by the shared dependency-freshness gate: a `>=`
# floor is satisfied by anything newer, so it tells a checker nothing
# about whether this repo is actually current.
bandit[toml]==1.9.4
mypy==2.4.0
pre-commit==4.6.2
pylint==4.1.2
pytest==9.1.1
pytest-cov==7.1.0
ruff==0.17.0