Update all non-major dependencies

.github/workflows/lint.yml

@@ -86,7 +86,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
 
       # Is this a PR whose head branch lives in THIS repo (not a fork)? Only then
       # can we push an autofix commit back to it with the workflow token.

pyproject.toml

@@ -89,7 +89,7 @@ dependencies = [
     # be converted to Python scalars`, failing all get_cosmo-backed tests. camb
     # 1.6.6 (latest on PyPI) and current master are both unfixed. Lift this cap
     # when camb ships > 1.6.6 with the scipy-1.18 fix.
-    "scipy<1.18",
+    "scipy<1.19",
     "seaborn",
     # Intentionally tracks the mutable `develop` branch (NOT SHA-pinned):
     # shear_psf_leakage is actively co-developed CosmoStat code we want to stay
@@ -148,7 +148,7 @@ docs = [
 # lives in the separate ``glass.ext.camb`` package (absent from glass core
 # >=2024.2), so it is pinned explicitly.
 glass = [
-    "glass==2025.1",
+    "glass==2025.3",
     "glass.ext.camb==2023.6",
     "cosmology==2022.10.9",
     # fitsio: make_unions_glass_sim.py writes the mock catalogue as FITS.