[jmmshn]

Clears every open Dependabot security alert.

• docs: m2r2 → myst-parser. m2r2 hard-pins mistune==0.8.4, which held mistune (28 advisories) and nbconvert 6.5.4 back. Its only use was mdinclude of the README; now .. include:: :parser: myst_parser.sphinx_. This unpins mistune 0.8.4 → 3.4.0 and nbconvert 6.5.4 → 7.17.2.
• Lock bumps: certifi → 2026.10.23, lxml-html-clean 0.4.3 → 0.4.5, pillow → 13.0.0, filelock → 4.2.4, virtualenv → 21.14.13. This replaces Dependabot Bump filelock from 4.2.0 to 4.2.4 #136, Bump pillow from 12.3.0 to 13.0.0 #137 and Bump virtualenv from 21.14.8 to 21.14.13 #139.

Checks: pip-audit on the exported lock reports no known vulnerabilities; sphinx-build is clean and the README renders under Introduction; pytest 11 passed; pre-commit passes.

🤖 Generated with Claude Code

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 79.93%. Comparing base (52d37bc) to head (f5cba8d).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #140   +/-   ##
=======================================
  Coverage   79.93%   79.93%           
=======================================
  Files           5        5           
  Lines         324      324           
=======================================
  Hits          259      259           
  Misses         65       65           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.