Bump release artifact actions and iniconfig

.github/workflows/release.yml

@@ -69,14 +69,14 @@ jobs:
           printf '\n## Release-runner validation matrix\n\n' >> release-notes.md
           cat release-validation-matrix.md >> release-notes.md
       - name: Upload the validated release notes
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: release-notes
           path: release-notes.md
           if-no-files-found: error
           retention-days: 7
       - name: Upload the validation matrix
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: release-validation-matrix
           path: release-validation-matrix.md
@@ -94,7 +94,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: release-notes
       - name: Create the GitHub release from the validated notes

requirements-dev.txt

@@ -1,7 +1,7 @@
 PyYAML==6.0.3
 Pygments==2.21.0
 colorama==0.4.6
-iniconfig==2.3.0
+iniconfig==2.3.1
 markdown-it-py==4.2.0
 mdurl==0.1.2
 packaging==26.3