chore(deps): consolidate the safe Dependabot backlog into one re-locked PR

.github/workflows/public_pypi_x402_a2a.yml

@@ -25,7 +25,7 @@ jobs:
           python-version: "3.11"
 
       - name: Install uv
-        uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5.4.2
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
         with:
           enable-cache: true
           cache-dependency-glob: "uv.lock"
@@ -40,6 +40,6 @@ jobs:
           echo "version=$(sed -n 's/^version = "\(.*\)"/\1/p' pyproject.toml)" >> $GITHUB_OUTPUT
 
       - name: Publish package
-        uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
         with:
           packages-dir: python/x402_a2a/dist/

.github/workflows/python-examples-adk-demo.yml

@@ -17,7 +17,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@v8.1.0
         with:
           enable-cache: true
           cache-dependency-glob: "uv.lock"

.github/workflows/python-x402-a2a.yml

@@ -17,7 +17,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@v8.1.0
         with:
           enable-cache: true
           cache-dependency-glob: "uv.lock"

.github/workflows/release-please.yml

@@ -14,6 +14,6 @@ jobs:
     runs-on: ubuntu-latest
     if: github.repository_owner == 'google-agentic-commerce'
     steps:
-      - uses: googleapis/release-please-action@v4
+      - uses: googleapis/release-please-action@v5
         with:
           token: ${{ secrets.BOT_TOKEN }}

python/examples/adk-demo/pyproject.toml

@@ -5,13 +5,13 @@ description = "ADK x402 Payment Protocol Demo using refactored x402_a2a package"
 requires-python = ">=3.13"
 dependencies = [
     "a2a-sdk",
-    "google-adk>=0.5.0",
+    "google-adk>=1.33.0",
     "x402>=0.1.4",
-    "click>=8.2.0",
+    "click>=8.3.3",
     "eth-account>=0.13.7",
     "httpx>=0.28.1",
-    "uvicorn>=0.34.2",
-    "web3>=7.10.0",
+    "uvicorn>=0.46.0",
+    "web3>=7.16.0",
     "cdp-sdk>=1.20.0",
     "x402-a2a",
 ]
@@ -40,5 +40,5 @@ target-version = "py313"
 
 [dependency-groups]
 lint = [
-    "ruff>=0.13.1",
+    "ruff>=0.15.12",
 ]

python/x402_a2a/pyproject.toml

@@ -15,20 +15,20 @@ dependencies = [
     "x402>=0.2.0",  # For x402 payment protocol
     "eth-account>=0.13.7",  # For Ethereum account management
     "httpx>=0.28.1",  # For async HTTP client
-    "pydantic>=2.0.0",  # For data validation
+    "pydantic>=2.13.4",  # For data validation
 ]
 
 [dependency-groups]
 dev = [
     "pytest>=9.0.3",
     "pytest-asyncio>=1.1.0",
-    "pytest-cov>=6.2.1",
-    "pytest-mock>=3.14.1",
-    "trio>=0.22.0",
+    "pytest-cov>=7.1.0",
+    "pytest-mock>=3.15.1",
+    "trio>=0.33.0",
 ]
 lint = [
-    "ruff>=0.13.1",
-    "mypy>=1.18.0",
+    "ruff>=0.15.13",
+    "mypy>=1.20.2",
 ]
 
 [project.scripts]