chore(deps): bump vulners from 4.0.0 to 4.0.1

[dependabot]

Bumps vulners from 4.0.0 to 4.0.1.

Release notes

Sourced from vulners's releases.

v4.0.1

Maintenance release. The public API is unchanged from 4.0.0; the notable change is raised minimum versions for the runtime dependencies.

Install

pip install -U vulners

Changed

• Raised the minimum supported versions of the runtime dependencies to the currently tested lines: pydantic >=2.13, typing-extensions >=4.16, typing-inspection >=0.4.4, h2 >=4.4, stream-unzip >=0.0.101, brotli >=1.2, zstandard >=0.25, isal >=1.8, ijson >=3.5. Upper bounds are unchanged. Installs pinned below these versions now resolve up to the new minimums.
• Reordered None to the end of type-union annotations (ruff 0.16 RUF036) — no runtime effect.

Internal

• Refreshed the development lockfile to the latest dependency versions, made the MCP test suite reproducible against the lockfile, bumped the pinned GitHub Actions (the Pages actions now run on Node 24), and enabled documentation auto-deploy to GitHub Pages.

---

Docs: https://vulnersCom.github.io/api/ · PyPI: https://pypi.org/project/vulners/4.0.1/ · Full changelog: CHANGELOG.md

Changelog

Sourced from vulners's changelog.

[4.0.1] - 2026-08-14

Maintenance release. The public API is unchanged from 4.0.0.

Changed

• Raised the minimum supported versions of the runtime dependencies to the currently tested lines: pydantic >=2.13, typing-extensions >=4.16, typing-inspection >=0.4.4, h2 >=4.4, stream-unzip >=0.0.101, brotli >=1.2, zstandard >=0.25, isal >=1.8, ijson >=3.5. Upper bounds are unchanged. Installs pinned below these versions now resolve up to the new minimums.
• Reordered None to the end of type-union annotations (ruff 0.16 RUF036); no runtime effect.

Internal

• Refreshed the development lockfile to the latest dependency versions, made the MCP test suite reproducible against the lockfile, bumped the pinned GitHub Actions (the Pages actions now run on Node 24), and enabled documentation auto-deploy to GitHub Pages.

Commits

• 2233819 release: 4.0.1
• b381676 Merge master into v4.0: the full dependency refresh supersedes the merged pym...
• f2bb7a0 build(deps): upgrade dependencies to latest
• 6ce8646 build(deps): bump pinned github actions
• 78cee2a ci: run the mcp test job from the lockfile
• a3b2598 Merge pull request #81 from vulnersCom/dependabot/uv/pymdown-extensions-11.0
• 22552d7 build(deps): bump pymdown-extensions from 10.21.2 to 11.0
• b0f1277 ci: pin the uv version in setup-uv (avoid the flaky 'latest' lookup)
• 576f0d2 ci: deploy the docs site to github pages on push to master
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)