[lucarlig]

Refresh the Rust and Python dependency baselines together so the outstanding dependency updates can be reviewed and validated in one PR.

• Run cargo update and uv lock --upgrade, including parking_lot 0.13 and Pydantic 2.14.1, and bump all nine plugin patch versions with matching manifests.
• Update the pinned setup-python and PyPI publishing actions.
• Group future Dependabot version updates into one PR per ecosystem and align the Python cooldown with uv's existing package-age settings.
• Repair the output-length guard stub generator for the current pyo3-stub-gen API and resolve Clippy findings in existing tests.

Validation:

• All nine plugins pass their full make ci flow locally, including builds and framework integration tests; the rate-limiter suite includes Redis and TLS checks.
• All 641 Rust workspace tests pass with all features enabled.
• Workspace Clippy, Rust formatting, repository validation (41 tests), workflow linting, and both current and CI-pinned uv lockfile checks pass.
• GitHub's platform and distribution checks are running on this PR.

Supersedes the now-closed #208, #209, #210, #211, and #213.

[msureshkumar88]

LGTM. CI green (117 pass, 0 fail), lockfiles/manifests/versions consistent.

Non-blocking notes:

• dependabot.yml: patterns: ["*"] now groups majors too, and the limit drops to 1. One breaking major can block the whole weekly PR. Consider update-types or exclude-patterns for majors.
• cooldown is only set for uv; cargo and github-actions (incl. the PyPI publish action) get none.
• certifi = false disables the uv cooldown for certifi and is duplicated in dependabot exclude. Fine if intentional, worth a comment.
• runtime pydantic floor raised to >=2.14.1 in encoded_exfil_detection, retry_with_backoff and url_reputation. Only dev floors needed to move.
• parking_lot 0.13 leaves duplicate 0.12.x crates in Cargo.lock (transitive).