chore: refresh CI actions and dev deps (HA 2026.3.2)

.github/actions/setup-uv/action.yml

@@ -4,7 +4,7 @@ description: Install uv and sync frozen dev dependencies for pyogero
 runs:
   using: composite
   steps:
-    - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0
+    - uses: astral-sh/setup-uv@v6
       with:
         python-version: "3.14"
         enable-cache: true

.github/dependabot.yml

@@ -14,4 +14,8 @@ updates:
     groups:
       dev-dependencies:
         patterns:
-          - "*"
+          - "pytest*"
+          - "ruff"
+          - "requests-mock"
+          - "aioresponses"
+          - "build"

.github/workflows/ci.yml

@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.2
+        uses: actions/checkout@v7
 
       - name: Setup uv
         uses: ./.github/actions/setup-uv

.github/workflows/release.yml

@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.2
+        uses: actions/checkout@v7
 
       - name: Setup uv
         uses: ./.github/actions/setup-uv
@@ -46,7 +46,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.2
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -68,7 +68,7 @@ jobs:
 
       - name: Create tag
         if: steps.version.outputs.exists != 'true'
-        uses: rickstaa/action-create-tag@3235da6acab82101ca6db1c2fbaa1e51d6a3b906 # v1.7.0
+        uses: rickstaa/action-create-tag@v1
         with:
           tag: ${{ steps.version.outputs.tag }}
           message: Release ${{ steps.version.outputs.tag }}
@@ -82,7 +82,7 @@ jobs:
       id-token: write
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.2.2
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -93,20 +93,20 @@ jobs:
         run: uv build
 
       - name: Upload dist artifacts
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@v7
         with:
           name: dist
           path: dist/*
 
       - name: Create GitHub release
-        uses: ncipollo/release-action@9128f238eeeeed39b82af6636303729079d51730 # v1.17.0
+        uses: ncipollo/release-action@v1
         with:
           tag: ${{ github.ref_name }}
           allowUpdates: true
           artifacts: dist/*
           replacesArtifacts: true
 
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1
+        uses: pypa/gh-action-pypi-publish@release/v1
         with:
           password: ${{ secrets.PYPI_TOKEN }}

constraints-home-assistant-2026.3.2.txt

@@ -1,5 +1,6 @@
 # Pin runtime deps when installing alongside Home Assistant 2026.3.2.
-# Matches homeassistant/core 2026.3.2 package_constraints.txt.
+# Manually updated only when the HA pin changes.
+# Sourced from homeassistant/core 2026.3.2 package_constraints.txt.
 requests==2.32.5
 aiohttp==3.13.3
 beautifulsoup4==4.13.3

pyproject.toml

@@ -42,7 +42,7 @@ dev = [
     "pytest-asyncio>=0.24",
     "requests-mock>=1.12.1",
     "aioresponses>=0.7.3",
-    "ruff==0.15.13",
+    "ruff==0.15.20",
     "build",
 ]