Refresh lock files for typer and ruff bump

[haasonsaas]

Summary

• regenerate requirements.lock and requirements-dev.lock after the typer and ruff dependency bump
• keep the fix limited to the missing lockfile updates that current CI requires
• avoid touching the Dependabot branch directly while preserving the same dependency intent

CI evidence

• evalops/orbit-agent run 25000208360, job test (3.12), step Verify dependency lock files are updated failed with requirements.txt changed without updating requirements.lock
• the paired test (3.11) job was cancelled after the 3.12 lockfile gate failed

Local verification

• black --check $(git ls-files '*.py')
• ruff check .
• pytest -q

Notes

• This PR is intended as the minimal repair for the current failure on evalops/orbit-agent#23.

[cursor]

PR Summary

Low Risk
Low risk: dependency/version pin and lockfile regeneration only, with no application logic changes; main risk is unexpected behavior from updated transitive packages during install/runtime.

Overview
Updates dependency pins to typer==0.25.0 and ruff==0.15.12, and regenerates requirements.lock/requirements-dev.lock to match.

Lockfile refresh also updates several transitive versions (e.g., certifi, click, idna, packaging, pathspec, tokenizers, xxhash) and normalizes some package names/casing (e.g., Flask, Werkzeug, typing_extensions), primarily to satisfy the CI lockfile consistency check.

^{Reviewed by Cursor Bugbot for commit 8eae442. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	typer@​0.24.1 ⏵ 0.25.0	+1
	ruff@​0.15.11 ⏵ 0.15.12

View full report

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Bugbot Autofix prepared a fix for the issue found in the latest run.

• ✅ Fixed: Ruff version mismatch between pre-commit and requirements
  • Updated .pre-commit-config.yaml to pin ruff-pre-commit to v0.15.12, matching the requirements and CI Ruff version.

_{You can send follow-ups to the cloud agent here.}

^{Reviewed by Cursor Bugbot for commit 8eae442. Configure here.}

[cursor]

Ruff version mismatch between pre-commit and requirements

Low Severity

Bumping ruff to 0.15.12 in the requirements and lock files without also updating .pre-commit-config.yaml (which still pins ruff-pre-commit to v0.15.11) introduces a version skew that didn't exist before. Developers running pre-commit locally will lint with 0.15.11, while CI's ruff check . step uses 0.15.12, which can produce different results if any rules changed between those versions.

Additional Locations (1)

• requirements-dev.txt#L10-L11

 

^{Reviewed by Cursor Bugbot for commit 8eae442. Configure here.}