build(deps): update dependency pdm to v2.25.4

[serious-scaffold]

This PR contains the following updates:

Package	Change	Age	Confidence
pdm (changelog)	2.24.1 -> 2.25.4

---

Release Notes

pdm-project/pdm (pdm)

v2.25.4

Compare Source

Bug Fixes

• Add credentials when passing source urls to uv resolver. (#​3553)
• Redact credentials in source urls in the log output, and inject credentials into the source url for uv sync command as well. (#​3555)
• Fix a bug that extra dependencies of transitive dependencies are not properly installed when USE_UV=true (#​3558)
• Improve the terminal output when setting up a script environment. (#​3560)
• Skip non-existent library paths in post-install steps when trying to fix the pth files. (#​3561)

Dependencies

• Update resolvelib to 1.2.0. (#​3557)

v2.25.3

Compare Source

Bug Fixes

• Fix a bug that local file package metadata was missing when reading the lockfile. (#​3545)
• Extract dependency-groups and extras markers from marker value when parsing pylock.toml. (#​3550)

v2.25.2

Compare Source

No significant changes.

v2.25.1

Compare Source

Bug Fixes

• Fix duplicated dependencies added to the lock file when the same dependency with extras is requested. (#​3542)
• Stabilize order of the extras and dependency-groups fields in pylock output. (#​3543)

v2.25.0

Compare Source

Features & Improvements

• Support pylock as alternative lock format and make it opt-in by config. (#​3481)
• Search for package metadata in lock file first when reuse strategy is used. (#​3522)

Bug Fixes

• Fix Windows 11 install pdm error, which is because of msgpack install failure. (#​3485)
• Change the return type of array_of_inline_tables to list[dict] from list[str] (#​3523)
• Ensure uv resolver to include hash for package files. (#​3531)
• Avoid infinite recursion when reading pyproject.toml with circular file dependencies. (#​3539)

v2.24.2

Compare Source

Bug Fixes

• Reinstalling local wheel if its checksum changes. (#​3503)
• Ignore HTTP cache entries if deserialization fails. (#​3515)
• Fetch missing URLs when static_urls is not enabled when running pdm export -f pylock. (#​3517)
• Missing self package when --self or --editable-self is passed to pdm export -f pylock. (#​3518)

Miscellany

• Add Python 3.14 to the test matrix. (#​3506)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.