Ed Berry

Is this the reason that PRs generated for dependabot vulnerability alerts only update the `pyproject.toml` but not the `uv.lock` file? The `uv.lock` file is updated fine for [dependabot version update](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/about-dependabot-version-updates)...