[adamtheturtle]

Refresh Python dependencies and repair the Dependabot configuration so future updates cover direct and transitive dependencies.

Regenerate the committed lockfile with uv lock --upgrade; use the uv ecosystem to update the manifest and lockfile together.

Remove the obsolete pre-commit update job, which points at a deleted YAML file. Hook configuration remains in prek.toml; Dependabot support is tracked in dependabot-core#14624.

Direct requirement updates:

• beartype==0.23.0 → beartype==0.23.1
• mypy-strict-kwargs==2026.8.25.1 → mypy-strict-kwargs==2026.10.19
• prek==0.5.5 → prek==0.5.6
• pylint[spelling]==4.1.2 → pylint[spelling]==4.1.3
• pyproject-fmt==2.30.1 → pyproject-fmt==2.30.3
• pytest-partition-check==2026.8.23 → pytest-partition-check==2026.10.11
• requests-mock-flask==2026.9.8 → requests-mock-flask==2026.10.9
• ruff==0.16.10 → ruff==0.17.1
• snapper-fmt==0.11.9 → snapper-fmt==0.11.10
• sphinx==9.1.0 → sphinx==9.1.1
• sphinx-substitution-extensions==2026.8.13.1 → sphinx-substitution-extensions==2026.10.9
• sphinxcontrib-httpdomain==2.1.0 → sphinxcontrib-httpdomain==2.2.1
• strict-kwargs==2026.8.28.post2 → strict-kwargs==2026.10.9
• tenacity==9.1.4 → tenacity==9.2.1
• ty==0.0.85 → ty==0.0.89
• types-docker==7.2.0.20260923 → types-docker==7.2.0.20261006
• types-requests==2.33.0.20260906 → types-requests==2.33.0.20261006
• vws-python==2026.9.7 → vws-python==2026.10.9
• vws-test-fixtures==2026.8.26 → vws-test-fixtures==2026.10.8
• zizmor==1.30.1 → zizmor==1.31.1

The Pyrefly 1.4 migration and its required validator changes remain in the existing PR: #3772. This refresh preserves the current Pyrefly pin to keep that migration in one review.

Validation: Python dependency resolution, Dependabot schema validation, applicable pre-commit hooks, and git diff --check passed. Repository CI provides the full test and lint matrix.

Apply Ruff’s required datetime as dt import alias consistently to source and tests. Repository pre-commit, pre-push, and Pylint checks pass locally. The local mock-backend suite passes (1,176 passed, 1,677 skipped), and an AST comparison verifies that the 23 datetime edits only change the import alias. Pyrefly 1.4 remains in the separate migration PR #3772; this refresh retains 1.3.2.

Live CI repeatedly exhausted its retries while polling target summaries at 0.2-second intervals. Give the live backend a VWS client whose default polling interval matches the existing two-second cleanup interval. This applies to setup and query helpers while retaining explicit caller intervals/timeouts and the mock backend’s 0.2-second default. Limit the contract-test matrix to 10 concurrent jobs to bound the combined load.

Validation: 19 targeted mock/credential tests pass (28 backend skips), alongside repository commit/push hooks, all type checkers, and Pylint.

The complete hosted Test and Lint workflows pass at commit 4f8d0627366ab86e2bf8314568471f48186ee9b3, including the live-service contract tests, combined coverage, and completion checks.