chore(deps): align QPK pin to 2381aa4577e9

[Pigbibi]

Summary

• 自动将 QPK pin 对齐到 2381aa4577e9
• 若仓库使用 uv.lock，同步刷新 lockfile

Test plan

• Repo CI 转绿

🤖 Generated with Claude Code

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 2894077cd5

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[github-actions]

🤖 Codex PR Review

✅ Merge allowed: 1 finding(s) reported but none are blocking

ℹ️ Other Findings

1. 🟡 [MEDIUM] Reliability in tests/test_qsl_metadata.py

The new assertion assumes uv.lock will always contain QuantPlatformKit.git?rev=<pin>#<pin>, but this repository's previous uv.lock entry already disproves that invariant: the requested rev was 69a025... while the recorded source fragment was #53b2ca.... uv does not guarantee that the post-# fragment exactly matches the requested rev string, so future valid lockfile regenerations can fail this test even when qsl.toml, pyproject.toml, and uv.lock are correctly aligned. (line 28)

Suggestion: Relax the check to assert only the stable part of the lock entry, such as the presence of QuantPlatformKit.git?rev=<pin>, or parse uv.lock structurally and compare the rev= value instead of requiring the trailing fragment to equal the pin.

---

Review by Codex PR Review bot • PR