Merge pull request #11683 from geekosaur/dependabot-2026-03-31

upgrade uv dependencies per dependabot 2026-03-31

Author: mergify[bot]

doc/pyproject.toml

@@ -14,17 +14,17 @@ ignore_file   = '.skjoldignore'
 # certifi>=2023.07.22 by CVE-2023-37920
 # idna>=3.7 by CVE-2024-3651
 # jinja2>=3.1.4 by CVE-2024-34064
-# pygments>=2.7.4 by CVE-2021-20270 CVE-2021-27291
-# requests>=2.32.0 by CVE-2024-35195
+# pygments>=2.20.0 by CVE-2021-20270 CVE-2021-27291 CVE-2026-4539
+# requests>=2.33.0 by CVE-2024-35195 CVE-2026-25645
 # urllib3>=2.0.7 by CVE-2023-45803
 [dependency-groups]
 dev = [
     "certifi>=2023.7.22",
     "idna>=3.7",
     "jinja2>=3.1.4",
     "packaging>=25.0",
-    "pygments>=2.7.4",
-    "requests>=2.32.0",
+    "pygments>=2.20.0",
+    "requests>=2.33.0",
     "sphinx>=8.2.3",
     "sphinx-jsonschema>=1.19.2",
     "sphinx-rtd-theme>=3.0.2",