v4.1.1

Changelog

🐛 Bug Fixes

• fix: add --project flag to uv entrypoint for GitHub Actions compatibility @jmeridth (#700)
• fix: pin uv version and add caching to CI workflows @jmeridth (#691)
• fix: harden pip install against supply chain attacks @zkoppert (#686)

🧰 Maintenance

• ci: add mark-ready-when-ready workflow @zkoppert (#699)
• chore(deps): bump github/codeql-action from 4.31.9 to 4.32.6 in the dependencies group @dependabot[bot] (#698)
• chore(deps): switch dependabot package ecosystem from pip to uv @jmeridth (#697)
• chore(deps-dev): bump black from 26.1.0 to 26.3.1 in the uv group across 1 directory @dependabot[bot] (#696)
• chore(deps): bump pytz from 2025.2 to 2026.1.post1 @dependabot[bot] (#694)
• chore(deps): bump isort from 7.0.0 to 8.0.1 @dependabot[bot] (#695)
• chore(deps): bump types-pytz from 2025.2.0.20251108 to 2026.1.1.20260304 @dependabot[bot] (#693)
• chore(deps): bump python-dotenv from 1.2.1 to 1.2.2 in the dependencies group @dependabot[bot] (#692)
• build: migrate from pip to uv for dependency management @jmeridth (#689)
• chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 @dependabot[bot] (#688)

See details of all code changes since previous release