Create dependabot.yml

.github/dependabot.yml

@@ -0,0 +1,31 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 5
+    labels:
+      - "dependencies"
+    groups:
+      python-deps:
+        patterns:
+          - "*"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    labels:
+      - "dependencies"
+    groups:
+      actions:
+        patterns:
+          - "*"

.github/workflows/unit-tests.yml

@@ -1,7 +1,6 @@
 name: Unit tests
 
 on:
-  push:
   pull_request:
 
 jobs:
@@ -46,9 +45,11 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
           cache: pip
-
+      - name: Install pinned dependencies
+        run: pip install -r requirements-dev.txt
+
       - name: Install package
-        run: python -m pip install -e .
+        run: python -m pip install -e . --no-deps
 
       - name: Run unit tests
-        run: python -m unittest discover -s tests
+        run: python -m unittest discover -s tests

requirements-dev.txt

@@ -0,0 +1,38 @@
+# This file was autogenerated by uv via the following command:
+#    uv pip compile --universal -o requirements-dev.txt pyproject.toml
+anyio==4.14.2 ; sys_platform != 'emscripten'
+    # via httpx2
+cffi==2.1.1 ; platform_python_implementation != 'PyPy'
+    # via cryptography
+cryptography==50.0.0
+    # via
+    #   httpx2-kerberos (pyproject.toml)
+    #   pyspnego
+decorator==5.3.1 ; sys_platform != 'win32'
+    # via gssapi
+gssapi==1.11.1 ; sys_platform != 'win32'
+    # via pyspnego
+h11==0.16.0 ; sys_platform != 'emscripten'
+    # via httpcore2
+httpcore2==2.12.0 ; sys_platform != 'emscripten'
+    # via httpx2
+httpx2==2.12.0
+    # via httpx2-kerberos (pyproject.toml)
+httpx2-jsfetch==1.0 ; sys_platform == 'emscripten'
+    # via httpx2
+idna==3.19
+    # via
+    #   anyio
+    #   httpx2
+krb5==0.10.0 ; sys_platform != 'win32'
+    # via pyspnego
+pycparser==3.0 ; implementation_name != 'PyPy' and platform_python_implementation != 'PyPy'
+    # via cffi
+pyspnego==0.12.1
+    # via httpx2-kerberos (pyproject.toml)
+sspilib==0.6.0 ; sys_platform == 'win32'
+    # via pyspnego
+truststore==0.10.4 ; sys_platform != 'emscripten'
+    # via
+    #   httpcore2
+    #   httpx2