build(deps): bump the production-dependencies group with 3 updates

[dependabot]

Bumps the production-dependencies group with 3 updates: req, sourceror and spitfire.

Updates req from 0.5.16 to 0.5.17

Changelog

Sourced from req's changelog.

CHANGELOG

HEAD

• [retry]: Use default delay if retry-after is "negative"

  Previously, we were only handling "negative" retry-after in "http date" format and slept for zero seconds. We were crashing on retry-after with negative seconds.

  Now, we're using the default delay (1s, 2s, 4s, ...) in either format.

Commits

• dce1009 Release v0.5.17
• 2fbb092 retry: Use default delay if retry-after is "negative"
• 28cb697 Refactor http digest handling
• 4e251c2 Link to related package req_proxy (#524)
• 6153730 fix(proxy): schema -> scheme (#520)
• 3671064 Fix docs
• See full diff in compare view

Updates sourceror from 1.10.0 to 1.10.1

Release notes

Sourced from sourceror's releases.

v1.10.1

What's Changed

• fix: FastZipper empty siblings + new + Enum.reverse optimizations by @​novaugust in doorgan/sourceror#193
• fix: calculate ranges for charlist with concatenation by @​doorgan in doorgan/sourceror#194

Full Changelog: doorgan/sourceror@v1.10.0...v1.10.1

Changelog

Sourced from sourceror's changelog.

v1.10.1 (2026-01-26)

• [Sourceror] Fixed range calculation for charlists with concatenations.

Commits

• 5c6551d chore: v1.10.1 (#195)
• a297c1c fix: calculate ranges for charlist with concatenation (#194)
• ffb1ad3 FastZipper empty siblings + new + Enum.reverse optimizations (#193)
• See full diff in compare view

Updates spitfire from 0.2.1 to 0.3.1

Changelog

Sourced from spitfire's changelog.

0.3.1 (2026-01-20)

Bug Fixes

• handle unexpected tokens when parsing stabs (#76) (365007b)

0.3.0 (2026-01-19)

Features

• Handle atom_safe and kw_identifier_safe tokens (#72) (c4fd161)

Bug Fixes

• handle eof inside list-esque constructs (#67) (14a2bf3)
• handle no_fuel_remaining in parse_with_comments (#73) (f777bb4)
• improve recovery from unexpected semicolons (#70) (792e9c9)
• infinite loop parsing incomplete struct (#66) (bebd845)
• parsing crashes on code with errors (#65) (b6bbdb4)
• recover from incomplete keyword lists (#71) (0513a5d)

Commits

• eadeb4a chore(main): release 0.3.1
• 365007b fix: handle unexpected tokens when parsing stabs (#76)
• e310fc8 chore: fix formatting
• 27d7b08 chore: typo
• d4e770b chore(main): release 0.3.0 (#68)
• f777bb4 fix: handle no_fuel_remaining in parse_with_comments (#73)
• c4fd161 feat: Handle atom_safe and kw_identifier_safe tokens (#72)
• b6bbdb4 fix: parsing crashes on code with errors (#65)
• 0513a5d fix: recover from incomplete keyword lists (#71)
• bebd845 fix: infinite loop parsing incomplete struct (#66)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions