update project files (#5457)

* update pre-commit hook
* upgrade pip with venv
* update description and version
* show url in publish environment
* update versions
* update versions, separate typing job
* use dependabot grouped updates
  ignore upload/download-artifact until slsa updates
* use sphinx.ext.extlinks instead of sphinx-issues
* update dev dependencies
* update editorconfig
* update gitignore
* update .readthedocs.yaml
* license is txt, readme is md
* update pyproject.toml
  add typed classifier
  add pyright config
  simplify urls
* tox builds docs in place
* update min test py version
* add tox env to update all dev dependencies
* update issue and pr templates
* rename security docs page to not conflict with org policy file
* simplify matrix

requirements/build.txt

@@ -1,12 +1,12 @@
 #
-# This file is autogenerated by pip-compile with Python 3.11
+# This file is autogenerated by pip-compile with Python 3.12
 # by the following command:
 #
 #    pip-compile build.in
 #
-build==1.0.3
+build==1.2.1
     # via -r build.in
-packaging==23.2
+packaging==24.0
     # via build
 pyproject-hooks==1.0.0
     # via build

requirements/dev.in

@@ -1,6 +1,5 @@
--r docs.in
--r tests.in
--r typing.in
-pip-tools
+-r docs.txt
+-r tests.txt
+-r typing.txt
 pre-commit
 tox

requirements/dev.txt

@@ -1,151 +1,195 @@
 #
-# This file is autogenerated by pip-compile with Python 3.11
+# This file is autogenerated by pip-compile with Python 3.12
 # by the following command:
 #
 #    pip-compile dev.in
 #
 alabaster==0.7.16
-    # via sphinx
-asgiref==3.7.2
     # via
-    #   -r tests.in
-    #   -r typing.in
+    #   -r docs.txt
+    #   sphinx
+asgiref==3.8.1
+    # via
+    #   -r tests.txt
+    #   -r typing.txt
 babel==2.14.0
-    # via sphinx
-build==1.0.3
-    # via pip-tools
-cachetools==5.3.2
+    # via
+    #   -r docs.txt
+    #   sphinx
+cachetools==5.3.3
     # via tox
-certifi==2023.11.17
-    # via requests
+certifi==2024.2.2
+    # via
+    #   -r docs.txt
+    #   requests
 cffi==1.16.0
-    # via cryptography
+    # via
+    #   -r typing.txt
+    #   cryptography
 cfgv==3.4.0
     # via pre-commit
 chardet==5.2.0
     # via tox
 charset-normalizer==3.3.2
-    # via requests
-click==8.1.7
-    # via pip-tools
+    # via
+    #   -r docs.txt
+    #   requests
 colorama==0.4.6
     # via tox
-cryptography==41.0.7
-    # via -r typing.in
+cryptography==42.0.5
+    # via -r typing.txt
 distlib==0.3.8
     # via virtualenv
-docutils==0.18.1
+docutils==0.20.1
     # via
+    #   -r docs.txt
     #   sphinx
     #   sphinx-tabs
-filelock==3.13.1
+filelock==3.13.3
     # via
     #   tox
     #   virtualenv
-identify==2.5.33
+identify==2.5.35
     # via pre-commit
 idna==3.6
-    # via requests
-imagesize==1.4.1
-    # via sphinx
-iniconfig==2.0.0
-    # via pytest
-jinja2==3.1.3
-    # via sphinx
-markupsafe==2.1.3
-    # via jinja2
-mypy==1.8.0
-    # via -r typing.in
-mypy-extensions==1.0.0
-    # via mypy
-nodeenv==1.8.0
-    # via pre-commit
-packaging==23.2
     # via
-    #   build
+    #   -r docs.txt
+    #   requests
+imagesize==1.4.1
+    # via
+    #   -r docs.txt
+    #   sphinx
+iniconfig==2.0.0
+    # via
+    #   -r tests.txt
+    #   -r typing.txt
+    #   pytest
+jinja2==3.1.3
+    # via
+    #   -r docs.txt
+    #   sphinx
+markupsafe==2.1.5
+    # via
+    #   -r docs.txt
+    #   jinja2
+mypy==1.9.0
+    # via -r typing.txt
+mypy-extensions==1.0.0
+    # via
+    #   -r typing.txt
+    #   mypy
+nodeenv==1.8.0
+    # via
+    #   -r typing.txt
+    #   pre-commit
+    #   pyright
+packaging==24.0
+    # via
+    #   -r docs.txt
+    #   -r tests.txt
+    #   -r typing.txt
     #   pallets-sphinx-themes
     #   pyproject-api
     #   pytest
     #   sphinx
     #   tox
 pallets-sphinx-themes==2.1.1
-    # via -r docs.in
-pip-tools==7.3.0
-    # via -r dev.in
-platformdirs==4.1.0
+    # via -r docs.txt
+platformdirs==4.2.0
     # via
     #   tox
     #   virtualenv
-pluggy==1.3.0
+pluggy==1.4.0
     # via
+    #   -r tests.txt
+    #   -r typing.txt
     #   pytest
     #   tox
-pre-commit==3.6.0
+pre-commit==3.7.0
     # via -r dev.in
-pycparser==2.21
-    # via cffi
+pycparser==2.22
+    # via
+    #   -r typing.txt
+    #   cffi
 pygments==2.17.2
     # via
+    #   -r docs.txt
     #   sphinx
     #   sphinx-tabs
 pyproject-api==1.6.1
     # via tox
-pyproject-hooks==1.0.0
-    # via build
-pytest==7.4.4
-    # via -r tests.in
-python-dotenv==1.0.0
+pyright==1.1.357
+    # via -r typing.txt
+pytest==8.1.1
     # via
-    #   -r tests.in
-    #   -r typing.in
+    #   -r tests.txt
+    #   -r typing.txt
+python-dotenv==1.0.1
+    # via
+    #   -r tests.txt
+    #   -r typing.txt
 pyyaml==6.0.1
     # via pre-commit
 requests==2.31.0
-    # via sphinx
+    # via
+    #   -r docs.txt
+    #   sphinx
 snowballstemmer==2.2.0
-    # via sphinx
+    # via
+    #   -r docs.txt
+    #   sphinx
 sphinx==7.2.6
     # via
-    #   -r docs.in
+    #   -r docs.txt
     #   pallets-sphinx-themes
-    #   sphinx-issues
     #   sphinx-tabs
     #   sphinxcontrib-log-cabinet
-sphinx-issues==3.0.1
-    # via -r docs.in
-sphinx-tabs==3.4.4
-    # via -r docs.in
+sphinx-tabs==3.4.5
+    # via -r docs.txt
 sphinxcontrib-applehelp==1.0.8
-    # via sphinx
+    # via
+    #   -r docs.txt
+    #   sphinx
 sphinxcontrib-devhelp==1.0.6
-    # via sphinx
+    # via
+    #   -r docs.txt
+    #   sphinx
 sphinxcontrib-htmlhelp==2.0.5
-    # via sphinx
+    # via
+    #   -r docs.txt
+    #   sphinx
 sphinxcontrib-jsmath==1.0.1
-    # via sphinx
+    # via
+    #   -r docs.txt
+    #   sphinx
 sphinxcontrib-log-cabinet==1.0.1
-    # via -r docs.in
+    # via -r docs.txt
 sphinxcontrib-qthelp==1.0.7
-    # via sphinx
+    # via
+    #   -r docs.txt
+    #   sphinx
 sphinxcontrib-serializinghtml==1.1.10
-    # via sphinx
-tox==4.12.0
+    # via
+    #   -r docs.txt
+    #   sphinx
+tox==4.14.2
     # via -r dev.in
 types-contextvars==2.4.7.3
-    # via -r typing.in
+    # via -r typing.txt
 types-dataclasses==0.6.6
-    # via -r typing.in
-typing-extensions==4.9.0
-    # via mypy
-urllib3==2.1.0
-    # via requests
-virtualenv==20.25.0
+    # via -r typing.txt
+typing-extensions==4.11.0
+    # via
+    #   -r typing.txt
+    #   mypy
+urllib3==2.2.1
+    # via
+    #   -r docs.txt
+    #   requests
+virtualenv==20.25.1
     # via
     #   pre-commit
     #   tox
-wheel==0.42.0
-    # via pip-tools
 
 # The following packages are considered to be unsafe in a requirements file:
-# pip
 # setuptools

requirements/docs.in

@@ -1,5 +1,4 @@
 pallets-sphinx-themes
 sphinx
-sphinx-issues
 sphinxcontrib-log-cabinet
 sphinx-tabs

requirements/docs.txt

@@ -1,5 +1,5 @@
 #
-# This file is autogenerated by pip-compile with Python 3.11
+# This file is autogenerated by pip-compile with Python 3.12
 # by the following command:
 #
 #    pip-compile docs.in
@@ -8,11 +8,11 @@ alabaster==0.7.16
     # via sphinx
 babel==2.14.0
     # via sphinx
-certifi==2023.11.17
+certifi==2024.2.2
     # via requests
 charset-normalizer==3.3.2
     # via requests
-docutils==0.18.1
+docutils==0.20.1
     # via
     #   sphinx
     #   sphinx-tabs
@@ -22,9 +22,9 @@ imagesize==1.4.1
     # via sphinx
 jinja2==3.1.3
     # via sphinx
-markupsafe==2.1.3
+markupsafe==2.1.5
     # via jinja2
-packaging==23.2
+packaging==24.0
     # via
     #   pallets-sphinx-themes
     #   sphinx
@@ -42,12 +42,9 @@ sphinx==7.2.6
     # via
     #   -r docs.in
     #   pallets-sphinx-themes
-    #   sphinx-issues
     #   sphinx-tabs
     #   sphinxcontrib-log-cabinet
-sphinx-issues==3.0.1
-    # via -r docs.in
-sphinx-tabs==3.4.4
+sphinx-tabs==3.4.5
     # via -r docs.in
 sphinxcontrib-applehelp==1.0.8
     # via sphinx
@@ -63,5 +60,5 @@ sphinxcontrib-qthelp==1.0.7
     # via sphinx
 sphinxcontrib-serializinghtml==1.1.10
     # via sphinx
-urllib3==2.1.0
+urllib3==2.2.1
     # via requests

requirements/tests.txt

@@ -1,18 +1,18 @@
 #
-# This file is autogenerated by pip-compile with Python 3.11
+# This file is autogenerated by pip-compile with Python 3.12
 # by the following command:
 #
 #    pip-compile tests.in
 #
-asgiref==3.7.2
+asgiref==3.8.1
     # via -r tests.in
 iniconfig==2.0.0
     # via pytest
-packaging==23.2
+packaging==24.0
     # via pytest
-pluggy==1.3.0
+pluggy==1.4.0
     # via pytest
-pytest==7.4.4
+pytest==8.1.1
     # via -r tests.in
-python-dotenv==1.0.0
+python-dotenv==1.0.1
     # via -r tests.in

requirements/typing.in

@@ -1,4 +1,6 @@
 mypy
+pyright
+pytest
 types-contextvars
 types-dataclasses
 asgiref

requirements/typing.txt

@@ -1,26 +1,41 @@
 #
-# This file is autogenerated by pip-compile with Python 3.11
+# This file is autogenerated by pip-compile with Python 3.12
 # by the following command:
 #
 #    pip-compile typing.in
 #
-asgiref==3.7.2
+asgiref==3.8.1
     # via -r typing.in
 cffi==1.16.0
     # via cryptography
-cryptography==41.0.7
+cryptography==42.0.5
     # via -r typing.in
-mypy==1.8.0
+iniconfig==2.0.0
+    # via pytest
+mypy==1.9.0
     # via -r typing.in
 mypy-extensions==1.0.0
     # via mypy
-pycparser==2.21
+nodeenv==1.8.0
+    # via pyright
+packaging==24.0
+    # via pytest
+pluggy==1.4.0
+    # via pytest
+pycparser==2.22
     # via cffi
-python-dotenv==1.0.0
+pyright==1.1.357
+    # via -r typing.in
+pytest==8.1.1
+    # via -r typing.in
+python-dotenv==1.0.1
     # via -r typing.in
 types-contextvars==2.4.7.3
     # via -r typing.in
 types-dataclasses==0.6.6
     # via -r typing.in
-typing-extensions==4.9.0
+typing-extensions==4.11.0
     # via mypy
+
+# The following packages are considered to be unsafe in a requirements file:
+# setuptools