build(deps): bump the pinned-test-dependencies group across 3 directories with 2 updates

Bumps the pinned-test-dependencies group with 1 update in the /actions directory: [zizmor](https://github.com/zizmorcore/zizmor).
Bumps the pinned-test-dependencies group with 1 update in the /repo directory: [ruff](https://github.com/astral-sh/ruff).
Bumps the pinned-test-dependencies group with 1 update in the /signer directory: [ruff](https://github.com/astral-sh/ruff).


Updates `zizmor` from 1.16.2 to 1.16.3
- [Release notes](https://github.com/zizmorcore/zizmor/releases)
- [Changelog](https://github.com/zizmorcore/zizmor/blob/main/docs/release-notes.md)
- [Commits](zizmorcore/zizmor@v1.16.2...v1.16.3)

Updates `ruff` from 0.14.3 to 0.14.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.3...0.14.4)

Updates `ruff` from 0.14.3 to 0.14.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.3...0.14.4)

---
updated-dependencies:
- dependency-name: zizmor
  dependency-version: 1.16.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pinned-test-dependencies
- dependency-name: ruff
  dependency-version: 0.14.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pinned-test-dependencies
- dependency-name: ruff
  dependency-version: 0.14.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pinned-test-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

actions/lint-requirements.txt

@@ -1 +1 @@
-zizmor == 1.16.2
+zizmor == 1.16.3

repo/pyproject.toml

@@ -32,7 +32,7 @@ tuf-on-ci-update-targets = "tuf_on_ci:update_targets"
 [project.optional-dependencies]
 lint = [
   "mypy == 1.18.2",
-  "ruff == 0.14.3",
+  "ruff == 0.14.4",
 ]
 
 [tool.hatch.version]

signer/pyproject.toml

@@ -30,7 +30,7 @@ tuf-on-ci-sign = "tuf_on_ci_sign:sign"
 [project.optional-dependencies]
 lint = [
   "mypy == 1.18.2",
-  "ruff == 0.14.3",
+  "ruff == 0.14.4",
 ]
 
 [tool.hatch.version]