Bump ruff from 0.15.7 to 0.15.8 (#90)

* Bump ruff from 0.15.7 to 0.15.8

Bumps [ruff](https://github.com/astral-sh/ruff) from 0.15.7 to 0.15.8.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.7...0.15.8)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.15.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore: bump requests to 2.33.0 and nbconvert to 7.17.0 to fix CVEs

- requests >= 2.33.0: fixes CVE-2026-25645 (predictable temp file path in extract_zipped_paths)
- nbconvert >= 7.17.0: fixes CVE-2025-53000

Co-authored-by: aieng-bot <aieng-bot@vectorinstitute.ai>

* chore: bump pygments to 2.20.0 to fix CVE-2026-4539

Co-authored-by: aieng-bot <aieng-bot@vectorinstitute.ai>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: aieng-bot[bot] <aieng-bot@vectorinstitute.ai>

Author: dependabot[bot]

pyproject.toml

@@ -10,7 +10,10 @@ dependencies = [
     "aieng-topic-impl",
     "filelock==3.25.2",
     "jupyterlab>=4.4.8",
+    "nbconvert>=7.17.0",
     "pip>=25.3",
+    "pygments>=2.20.0",
+    "requests>=2.33.0",
     "urllib3>=2.6.0",
     "virtualenv==21.2.0",
 ]