[WH-2099]

Important

1. Make sure you have read our contribution guidelines
2. Search existing issues and pull requests to confirm this change is not a duplicate
3. Open or identify the issue this pull request resolves or advances
4. Use a Conventional Commits title for this pull request, and mark breaking changes with !
5. Remember that the pull request title will become the squash merge commit message
6. If CLA Assistant prompts you, sign CLA.md in the pull request conversation

Related Issue

Closes #371

Includes the dependency updates proposed in #341, #359, #360, #361, and #362.

Summary

Dependabot PRs currently fail Validate PR body because generated descriptions lack the contributor template and issue reference, preventing static checks and tests from running.
Skip that step when the PR author is dependabot[bot]; continue running title validation, repository checks, static checks, and both Python test jobs.
Use the PR author so a maintainer editing a bot PR receives the same behavior.

Refresh the complete uv dependency resolution, upgrading 41 packages and adding four dependencies required by the updated packages.
Selected upgrades include Pillow 13.0.0, pypdf 6.21.2, pandas 3.1.0, Pydantic 2.14.1, transformers 5.21.0, unstructured 0.27.35, Ruff 0.17.3, and ty 0.0.92.
Raise the pypdf minimum to 6.21.2 and update the build backend to uv_build>=0.13.6,<0.14.

The new ty version rejects narrowing mutable discriminator fields in subclasses.
Parameterize content types and snapshot versions so each subclass inherits its exact field type, and require Pydantic 2.11 for Python 3.12 type parameter support.
Adopt Ruff's datetime alias and isolate polling test clocks to the module under test.

Review all ten external GitHub Actions against their latest stable releases and tag SHAs.
Update setup-uv from 10.2.0 to 10.3.2 and gh-action-pypi-publish from 1.14.2 to 1.14.3, retaining full commit pins.
The other eight actions are current.

Upstream requirements still constrain three transitive dependencies:

Package	Resolved	Latest stable	Constraint
filelock	3.32.7	4.2.4	unstructured requires <4
installer	0.7.0	1.1.0	unstructured requires <1
thinc	8.3.14	10.0.0	spaCy requires <8.4

The filelock constraint leaves Dependabot alerts #71 (high), #72 and #73 (low) unresolved; their patched version starts at 4.2.1.
Python support remains 3.12 and 3.13 because the latest unstructured requires Python <3.14.

Validation:

• just test: 1,026 passed on Python 3.12.13.
• uv run --locked --python 3.13 pytest in a separate environment: 1,026 passed on Python 3.13.15.
• just check: lockfile, formatting, Ruff, ty, and import boundaries passed.
• Five temporary checks using GitHub's expression evaluator cover Dependabot, maintainer edits, human PRs, bot activity on human PRs, and other bot authors; the two Dependabot scenarios failed before the condition and all five pass afterward.
• Message and snapshot schemas, JSON payloads, round trips, and invalid discriminator errors match before and after the typing changes.
• uv build --no-create-gitignore --no-sources: wheel and source archive built; packaged model files and dependency metadata verified.

Both Python runs report two pandas warnings about future Excel reader defaults and the deprecated ExcelFile.parse API.
Release publication was not executed.

Checklist

• This pull request links the issue it resolves or advances
• This pull request title follows Conventional Commits, and any breaking change is marked with !
• If CLA Assistant prompted me, I signed CLA.md in the pull request conversation

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota.

An organization owner can choose the repository organization as the billing source for reviews requested by members with a paid Copilot license. Learn about Copilot code review billing. Review the Copilot code review billing settings.