diff --git a/requirements/dev.txt b/requirements/dev.txt
index 6b7becf..fc4839a 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -411,7 +411,7 @@ mypy==1.19.0 \
     --hash=sha256:f75e60aca3723a23511948539b0d7ed514dda194bc3755eae0bfc7a6b4887aa7 \
     --hash=sha256:fc51a5b864f73a3a182584b1ac75c404396a17eced54341629d8bdcb644a5bba \
     --hash=sha256:fd4a985b2e32f23bead72e2fb4bbe5d6aceee176be471243bd831d5b2644672d
-    # via -r dev.in
+    # via -r requirements/dev.in
 mypy-extensions==1.1.0 \
     --hash=sha256:1be4cccdb0f2482337c4743e60421de3a356cd97508abadd57d47403e94f5505 \
     --hash=sha256:52e68efc3284861e772bbcd66823fde5ae21fd2fdb51c62a211403730b916558
@@ -574,7 +574,7 @@ requests==2.32.5 \
     --hash=sha256:2462f94637a34fd532264295e186976db0f5d453d1cdd31473c85a6a161affb6 \
     --hash=sha256:dbba0bac56e100853db0ea71b82b4dfd5fe2bf6d3754a8893c3af500cec7d7cf
     # via
-    #   -r dev.in
+    #   -r requirements/dev.in
     #   id
     #   sigstore
 rfc3161-client==1.0.5 \
@@ -600,27 +600,27 @@ rich==14.2.0 \
     --hash=sha256:73ff50c7c0c1c77c8243079283f4edb376f0f6442433aecb8ce7e6d0b92d1fe4 \
     --hash=sha256:76bc51fe2e57d2b1be1f96c524b890b816e334ab4c1e45888799bfaab0021edd
     # via sigstore
-ruff==0.14.6 \
-    --hash=sha256:00169c0c8b85396516fdd9ce3446c7ca20c2a8f90a77aa945ba6b8f2bfe99e85 \
-    --hash=sha256:0a8e7b9d73d8728b68f632aa8e824ef041d068d231d8dbc7808532d3629a6bef \
-    --hash=sha256:118548dd121f8a21bfa8ab2c5b80e5b4aed67ead4b7567790962554f38e598ce \
-    --hash=sha256:1432ab6e1ae2dc565a7eea707d3b03a0c234ef401482a6f1621bc1f427c2ff55 \
-    --hash=sha256:167843a6f78680746d7e226f255d920aeed5e4ad9c03258094a2d49d3028b105 \
-    --hash=sha256:16a33af621c9c523b1ae006b1b99b159bf5ac7e4b1f20b85b2572455018e0821 \
-    --hash=sha256:29c4b7ec1e66a105d5c27bd57fa93203637d66a26d10ca9809dc7fc18ec58440 \
-    --hash=sha256:344d97172576d75dc6afc0e9243376dbe1668559c72de1864439c4fc95f78185 \
-    --hash=sha256:390e6480c5e3659f8a4c8d6a0373027820419ac14fa0d2713bd8e6c3e125b8b9 \
-    --hash=sha256:4c55cfbbe7abb61eb914bfd20683d14cdfb38a6d56c6c66efa55ec6570ee4e71 \
-    --hash=sha256:57256efafbfefcb8748df9d1d766062f62b20150691021f8ab79e2d919f7c11f \
-    --hash=sha256:6f0c742ca6a7783a736b867a263b9a7a80a45ce9bee391eeda296895f1b4e1cc \
-    --hash=sha256:7f6007e55b90a2a7e93083ba48a9f23c3158c433591c33ee2e99a49b889c6332 \
-    --hash=sha256:9f7539ea257aa4d07b7ce87aed580e485c40143f2473ff2f2b75aee003186004 \
-    --hash=sha256:d43c81fbeae52cfa8728d8766bbf46ee4298c888072105815b392da70ca836b2 \
-    --hash=sha256:d50d45d4553a3ebcbd33e7c5e0fe6ca4aafd9a9122492de357205c2c48f00775 \
-    --hash=sha256:d724ac2f1c240dbd01a2ae98db5d1d9a5e1d9e96eba999d1c48e30062df578a3 \
-    --hash=sha256:efea3c0f21901a685fff4befda6d61a1bf4cb43de16da87e8226a281d614350b \
-    --hash=sha256:ff18134841e5c68f8e5df1999a64429a02d5549036b394fafbe410f886e1989d
-    # via -r dev.in
+ruff==0.14.7 \
+    --hash=sha256:12eb7014fccff10fc62d15c79d8a6be4d0c2d60fe3f8e4d169a0d2def75f5dad \
+    --hash=sha256:1464b6e54880c0fe2f2d6eaefb6db15373331414eddf89d6b903767ae2458143 \
+    --hash=sha256:19a0f116ee5e2b468dfe80c41c84e2bbd6b74f7b719bee86c2ecde0a34563bcc \
+    --hash=sha256:24c8487194d38b6d71cd0fd17a5b6715cda29f59baca1defe1e3a03240f851d1 \
+    --hash=sha256:281f0e61a23fcdcffca210591f0f53aafaa15f9025b5b3f9706879aaa8683bc4 \
+    --hash=sha256:3417deb75d23bd14a722b57b0a1435561db65f0ad97435b4cf9f85ffcef34ae5 \
+    --hash=sha256:3838948e3facc59a6070795de2ae16e5786861850f78d5914a03f12659e88f94 \
+    --hash=sha256:3f64fe375aefaf36ca7d7250292141e39b4cea8250427482ae779a2aa5d90015 \
+    --hash=sha256:6be02e849440ed3602d2eb478ff7ff07d53e3758f7948a2a598829660988619e \
+    --hash=sha256:6c623bbdc902de7ff715a93fa3bb377a4e42dd696937bf95669118773dbf0c50 \
+    --hash=sha256:79c73db6833f058a4be8ffe4a0913b6d4ad41f6324745179bd2aa09275b01d0b \
+    --hash=sha256:93e83bd3a9e1a3bda64cb771c0d47cda0e0d148165013ae2d3554d718632d554 \
+    --hash=sha256:b9d5cb5a176c7236892ad7224bc1e63902e4842c460a0b5210701b13e3de4fca \
+    --hash=sha256:be4d653d3bea1b19742fcc6502354e32f65cd61ff2fbdb365803ef2c2aec6228 \
+    --hash=sha256:dbbaa5e14148965b91cb090236931182ee522a5fac9bc5575bafc5c07b9f9682 \
+    --hash=sha256:e17a20ad0d3fad47a326d773a042b924d3ac31c6ca6deb6c72e9e6b5f661a7c6 \
+    --hash=sha256:e33052c9199b347c8937937163b9b149ef6ab2e4bb37b042e593da2e6f6cccfa \
+    --hash=sha256:f217ed871e4621ea6128460df57b19ce0580606c23aeab50f5de425d05226784 \
+    --hash=sha256:f53accc02ed2d200fa621593cdb3c1ae06aa9b2c3cae70bc96f72f0000ae97a9
+    # via -r requirements/dev.in
 securesystemslib==1.3.1 \
     --hash=sha256:2e5414bbdde33155a91805b295cbedc4ae3f12b48dccc63e1089093537f43c81 \
     --hash=sha256:ca915f4b88209bb5450ac05426b859d74b7cd1421cafcf73b8dd3418a0b17486
@@ -628,7 +628,7 @@ securesystemslib==1.3.1 \
 sigstore==4.1.0 \
     --hash=sha256:312f7f73fe27127784245f523b86b6334978c555fe4ba7831be5602c089807c1 \
     --hash=sha256:ec3ed0d92bf53ffb23261245a78d4ad3da5af5cc9af889c86461a7d02407249a
-    # via -r dev.in
+    # via -r requirements/dev.in
 sigstore-models==0.0.5 \
     --hash=sha256:8eda90fe16ef3e4e624edd029f4cbbc9832a192dc5c8f66011d94ec4253f9f3f \
     --hash=sha256:ac3ca1554d5dd509a6710699d83a035a09ba112d1fa180959cbfcdd5d97633b7
@@ -644,7 +644,7 @@ tuf==6.0.0 \
 types-requests==2.32.4.20250913 \
     --hash=sha256:78c9c1fffebbe0fa487a418e0fa5252017e9c60d1a2da394077f1780f655d7e1 \
     --hash=sha256:abd6d4f9ce3a9383f269775a9835a4c24e5cd6b9f647d64f88aa4613c33def5d
-    # via -r dev.in
+    # via -r requirements/dev.in
 typing-extensions==4.15.0 \
     --hash=sha256:0cea48d173cc12fa28ecabc3b837ea3cf6f38c6d1136f85cbaaf598984861466 \
     --hash=sha256:f0fa19c6845758ab08074a0cfa8b7aecb71c999ca73d62883bc25cc018c4e548