chore(deps): refresh locked dependencies for April 2026

Recompile requirements with uv to pick up routine upstream releases
and bring the pinned paths in line with running `uv pip compile` from
the project root.

Runtime (requirements/main.txt):
- boto3/botocore: 1.42.61 -> 1.42.92
- charset-normalizer: 3.4.4 -> 3.4.7
- django-stubs-ext: 5.2.9 -> 6.0.3
- djangorestframework: 3.16.1 -> 3.17.1
- gunicorn: 25.1.0 -> 25.3.0
- idna: 3.11 -> 3.12
- numpy: 2.4.2 -> 2.4.4
- packaging: 26.0 -> 26.1
- pandas: 3.0.1 -> 3.0.2
- pydantic: 2.12.5 -> 2.13.3
- pydantic-core: 2.41.5 -> 2.46.3

Development (requirements/dev.txt):
- django-debug-toolbar: 6.2.0 -> 6.3.0
- redis: 7.2.1 -> 7.4.0
- requests: 2.33.0 -> 2.33.1
- rich: 14.3.3 -> 15.0.0
- ruff: 0.15.4 -> 0.15.11

Also normalize the `-r` / `-c` reference paths in the compiled files
to `requirements/*.in` and `requirements/main.txt`, matching the
output of `task dependencies:compute` executed from the repository
root. The `[filecache]`, `[binary]` and `[heif]` extras are no longer
surfaced by uv in the compiled header; the actual sub-packages
(psycopg-binary, pillow-heif) are still pulled in transitively, so
the installed set is unchanged.

Author: matrixise

requirements/dev.txt

@@ -2,42 +2,40 @@
 #    uv pip compile --output-file requirements/dev.txt requirements/dev.in
 anyascii==0.3.3
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   wagtail
 asgiref==3.11.1
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   django
 beautifulsoup4==4.14.3
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   wagtail
 boolean-py==5.0
     # via license-expression
-cachecontrol[filecache]==0.14.4
-    # via
-    #   cachecontrol
-    #   pip-audit
+cachecontrol==0.14.4
+    # via pip-audit
 certifi==2026.2.25
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   requests
-charset-normalizer==3.4.4
+charset-normalizer==3.4.7
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   requests
-coverage==7.13.4
-    # via -r dev.in
-cyclonedx-python-lib==11.6.0
+coverage==7.13.5
+    # via -r requirements/dev.in
+cyclonedx-python-lib==11.7.0
     # via pip-audit
 defusedxml==0.7.1
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   py-serializable
     #   willow
 django==6.0.4
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   django-debug-toolbar
     #   django-filter
     #   django-modelcluster
@@ -51,70 +49,70 @@ django==6.0.4
     #   model-mommy
     #   modelsearch
     #   wagtail
-django-debug-toolbar==6.2.0
-    # via -r dev.in
+django-debug-toolbar==6.3.0
+    # via -r requirements/dev.in
 django-filter==25.2
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   wagtail
 django-modelcluster==6.4.1
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   wagtail
 django-permissionedforms==0.1
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   wagtail
-django-stubs-ext==5.2.9
+django-stubs-ext==6.0.3
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   django-tasks
 django-taggit==6.1.0
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   wagtail
 django-tasks==0.9.0
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   modelsearch
     #   wagtail
 django-treebeard==4.8.0
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   wagtail
-djangorestframework==3.16.1
+djangorestframework==3.17.1
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   wagtail
 draftjs-exporter==5.2.0
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   wagtail
 et-xmlfile==2.0.0
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   openpyxl
 factory-boy==3.3.3
     # via wagtail-factories
-faker==40.8.0
+faker==40.15.0
     # via factory-boy
-fakeredis==2.34.1
-    # via -r dev.in
-filelock==3.25.0
+fakeredis==2.35.1
+    # via -r requirements/dev.in
+filelock==3.29.0
     # via cachecontrol
 filetype==1.2.0
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   willow
-idna==3.11
+idna==3.12
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   requests
 isort==8.0.1
-    # via -r dev.in
+    # via -r requirements/dev.in
 laces==0.1.2
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   wagtail
 license-expression==30.4.4
     # via cyclonedx-python-lib
@@ -123,105 +121,106 @@ markdown-it-py==4.0.0
 mdurl==0.1.2
     # via markdown-it-py
 model-mommy==2.0.0
-    # via -r dev.in
+    # via -r requirements/dev.in
 modelsearch==1.1.1
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   wagtail
 msgpack==1.1.2
     # via cachecontrol
 openpyxl==3.1.5
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   wagtail
 packageurl-python==0.17.6
     # via cyclonedx-python-lib
-packaging==26.0
+packaging==26.1
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   pip-audit
     #   pip-requirements-parser
     #   pipdeptree
 pillow==12.2.0
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   pillow-heif
     #   wagtail
 pillow-heif==1.3.0
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   willow
+pip==26.0.1
+    # via pip-api
 pip-api==0.0.34
     # via pip-audit
 pip-audit==2.10.0
-    # via -r dev.in
+    # via -r requirements/dev.in
 pip-requirements-parser==32.0.1
     # via pip-audit
-pipdeptree==2.31.0
-    # via -r dev.in
-platformdirs==4.9.2
+pipdeptree==2.35.1
+    # via -r requirements/dev.in
+platformdirs==4.9.6
     # via pip-audit
 py-serializable==2.1.0
     # via cyclonedx-python-lib
 pygments==2.20.0
     # via rich
 pyparsing==3.3.2
     # via pip-requirements-parser
-redis==7.2.1
+redis==7.4.0
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   fakeredis
-requests==2.33.0
+requests==2.33.1
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   cachecontrol
     #   pip-audit
     #   wagtail
-rich==14.3.3
+rich==15.0.0
     # via pip-audit
-ruff==0.15.4
-    # via -r dev.in
+ruff==0.15.11
+    # via -r requirements/dev.in
 sortedcontainers==2.4.0
     # via
     #   cyclonedx-python-lib
     #   fakeredis
 soupsieve==2.8.3
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   beautifulsoup4
 sqlparse==0.5.5
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   django
     #   django-debug-toolbar
 telepath==0.3.1
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   wagtail
-tomli==2.4.0
+tomli==2.4.1
     # via pip-audit
 tomli-w==1.2.0
     # via pip-audit
 typing-extensions==4.15.0
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   beautifulsoup4
     #   django-stubs-ext
     #   django-tasks
 urllib3==2.6.3
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   requests
 uv==0.11.7
-    # via -r dev.in
+    # via -r requirements/dev.in
 wagtail==7.2.3
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   wagtail-factories
 wagtail-factories==4.4.0
-    # via -r dev.in
-willow[heif]==1.12.0
+    # via -r requirements/dev.in
+willow==1.12.0
     # via
-    #   -c main.txt
+    #   -c requirements/main.txt
     #   wagtail
-    #   willow