chore(deps): bump aiohttp, lxml, and tomlkit

[elkaix]

Consolidates three reviewed Dependabot bumps into a single PR, replacing #2, #19, and #5.

Bumps

Package	From	To	Kind
aiohttp	3.13.4	3.13.5	patch (bugfix)
lxml	6.1.0	6.1.1	patch
tomlkit	0.14.0	0.15.0	minor

Validation

• uv lock regenerated: diff is exactly the 3 version lines — no transitive churn.
• tomlkit 0.15: codebase uses only loads/dumps/TOMLKitError (stable core API).
• lxml 6.1.1: no direct usage; transitive binary-wheel dep of trafilatura/htmldate/justext.
• aiohttp 3.13.5: stable public API (ClientSession/ClientTimeout/ClientError/...).
• Local gates: ruff, ruff format, and pyright all pass.

click and ruff bumps are intentionally excluded (held via ignore entries in dependabot.yml: click 8.4 regresses pyright; ruff 0.15 violates the deliberate <0.15 pin).

Summary by CodeRabbit

• Chores
  • Updated dependencies to latest versions.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: f6a8456a-3130-49bf-ae43-cdb85c356f0c

📥 Commits

Reviewing files that changed from the base of the PR and between a3f9600 and af071f7.

⛔ Files ignored due to path filters (1)

• uv.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

• pyproject.toml

---

📝 Walkthrough

Walkthrough

Selected dependency versions in pyproject.toml are updated: aiohttp from 3.13.4 to 3.13.5, lxml from 6.1.0 to 6.1.1, and tomlkit from 0.14.0 to 0.15.0. No other project metadata or configuration changes.

Changes

Dependency Updates

Layer / File(s)	Summary
Dependency version bumps pyproject.toml	aiohttp bumped to 3.13.5, lxml to 6.1.1, and tomlkit to 0.15.0.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Suggested labels

dependencies

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title follows conventional commits format with correct type (chore), scope (deps), and a clear description of the changes.
Description check	✅ Passed	The description provides comprehensive context including a detailed changelog table, validation details for each package, and notes on excluded dependencies, though the template sections are not explicitly structured.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/deps-bump-batch

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}