build(deps): bump the python-deps group with 2 updates

[dependabot]

Bumps the python-deps group with 2 updates: argcomplete and yq.

Updates argcomplete from 3.6.3 to 3.7.0

Release notes

Sourced from argcomplete's releases.

v3.7.0

• Escape glob and brace metacharacters in quote_completions (#552)
• Quote prefix passed to compgen in FilesCompleter (#551)
• Remove deprecated easy_install script detection
• Type hinting improvements

Changelog

Sourced from argcomplete's changelog.

Changes for v3.7.0 (2026-06-30)

• Escape glob and brace metacharacters in quote_completions (#552)
• Quote prefix passed to compgen in FilesCompleter (#551)
• Remove deprecated easy_install script detection
• Type hinting improvements

Commits

• 6b4528d v3.7.0
• 81608a8 Use Python 3.15 in test matrix
• a59f151 Update Python classifiers
• 598c779 Add test for #552
• d543c6f escape glob and brace metacharacters in quote_completions (#552)
• 24ea0e3 Upgrade GHA to latest supported runners and actions
• 8e6423b type hinting fixes
• 93eab00 Add test for #551
• 5fefb45 quote prefix passed to compgen in FilesCompleter (#551)
• 8e5ad6a Remove easy_install script detection
• See full diff in compare view

Updates yq from 3.4.3 to 4.1.1

Release notes

Sourced from yq's releases.

v4.1.1

• xq: support --xml-short-empty-elements to emit self-closing elements instead of the long form

v4.1.0

• Implement YAML comment roundtripping

v4.0.0

• Implement TOML comment roundtripping (tomlq -T)
• Add --width=0 for no-wrap option; --null-input as -n alias
• Force quote strings that can be parsed as integers in YAML 1.2
• Implement YAML 1.2 octals
• Prevent exception thrown when sys.stdin is None. (#193)

Changelog

Sourced from yq's changelog.

Changes for v4.1.1 (2026-07-03)

• xq: support –xml-short-empty-elements to emit self-closing elements instead of the long form

Changes for v4.1.0 (2026-07-03)

• Implement YAML comment roundtripping

Changes for v4.0.0 (2026-07-02)

• Implement TOML comment roundtripping (tomlq -T)
• Add –width=0 for no-wrap option; –null-input as -n alias
• Force quote strings that can be parsed as integers in YAML 1.2
• Implement YAML 1.2 octals
• Prevent exception thrown when sys.stdin is None. (#193)

Commits

• 2fb6d70 v4.1.1
• 30fd8d7 ruff format
• f9eabeb Add AGENTS.md with guidance for tests
• 5db4bb5 xq: support --xml-short-empty-elements
• bf36782 v4.1.0
• c4f66b4 Implement YAML comment roundtripping
• 5035109 v4.0.0
• e969732 ruff format
• 0bdfb1b Python GHA: Allow pre-releases
• a8fbcd0 Fix type checking
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 2 package(s) with unknown licenses.

See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 07b8dc2.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

requirements.txt

Package	Version	License	Issue Type
argcomplete	3.7.0	Null	Unknown License
yq	4.1.1	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
pip/argcomplete	3.7.0	Unknown	Unknown
pip/yq	4.1.1	Unknown	Unknown

Scanned Files

• requirements.txt

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.