# Exact versions for continuous integration and release builds.
#
# pyproject.toml declares ranges, which is correct for a published library:
# consumers resolve against their own environment. This file pins what CI
# installs, so a green run stays reproducible and an upstream release cannot
# change the behaviour under the test suite or the artifact the release job
# uploads. It is not installed by consumers.
#
# Bump deliberately: install without constraints locally, run the suite, then
# regenerate with `pip freeze`.

# Runtime dependencies
annotated-types==0.8.0
attrs==26.1.0
click==8.4.2
jsonschema==4.26.0
jsonschema-specifications==2025.9.1
packaging==26.3
pathspec==0.12.1
pydantic==2.13.4
pydantic_core==2.46.4
PyYAML==6.0.3
referencing==0.37.0
rpds-py==2026.6.3
typing-inspection==0.4.2
typing_extensions==4.16.0

# Development dependencies
iniconfig==2.3.0
librt==0.13.0
mypy==1.19.1
mypy_extensions==1.1.0
pluggy==1.6.0
Pygments==2.20.0
pytest==9.1.1
ruff==0.16.1
types-jsonschema==4.26.0.20260518
types-PyYAML==6.0.12.20260724

# Release build and SBOM tooling. hatchling and trove-classifiers are resolved
# inside the isolated build environment, so the build step exports
# PIP_CONSTRAINT to reach them; without it the backend that produces the
# artifact is unpinned.
build==1.5.0
cyclonedx-bom==7.3.1
hatchling==1.32.0
pyproject_hooks==1.2.0
trove-classifiers==2026.6.1.19
twine==7.0.0
