Upgrade black to 26.3.1 and relock dependencies#39

Merged

druzsan merged 7 commits intomasterfrom

copilot/fix-dependabot-alerts-manually

Apr 1, 2026

Commits on Mar 13, 2026

Initial plan
Copilot
committed
Remove --ignore-vuln GHSA-xm59-rqc7-hhvf from pip-audit since nbconvert 7.17.0 fixes CVE-2025-53000

Copilot
and
markus-stoll
committed
Bump tornado from 6.5.2 to 6.5.5 in the pip group across 1 directory

dependabot[bot]
authored and
Copilot
committed
Initial plan
Copilot
committed
Fix Black arbitrary file writes vulnerability by upgrading to 26.3.1 and remove obsolete pip-audit ignore in Makefile

Copilot
and
markus-stoll
committed
Regenerate poetry.lock with Poetry 2.2.1 to match CI version

Copilot
and
markus-stoll
committed
Reformat code with Black 26.3.1 to fix CI formatting check

Copilot
and
markus-stoll
committed