Automate PR assignment and update dependencies

.github/auto_assign.yml

@@ -0,0 +1,16 @@
+# Set addAssignees to 'author' to set the PR creator as the assignee.
+addAssignees: author
+
+# Set to true to add assignees to pull requests
+addReviewers: true
+
+# A list of reviewers to be added to pull requests (GitHub user name)
+reviewers:
+  - YoshihitoAso
+  - purplesmoke05
+
+# A number of reviewers added to the pull request
+# Set 0 to add all the reviewers (default: 0)
+numberOfReviewers: 0
+
+runOnDraft: true

.github/workflows/auto-assign.yml

@@ -0,0 +1,14 @@
+name: Auto Assign
+on:
+  pull_request:
+    types: [opened, ready_for_review]
+
+jobs:
+  add-reviews:
+    permissions:
+      contents: read
+      pull-requests: write
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    steps:
+      - uses: kentaro-m/auto-assign-action@0a2c53d3721e4c5cfcce6afd4014aecc337979f6 # v2.0.2

pyproject.toml

@@ -11,11 +11,14 @@ dev = [
     "black>=26.3.1,<27",
     "isort>=8.0.1,<9",
     "pyright>=1.1.408,<2",
-    "web3==7.16.0",
+    "web3==8.0.0",
 ]
 
 [tool.uv]
 exclude-newer = "7 days"
+# GHSA-6q48-6c7w-9gw2: require the fixed CA bundle without the release-age delay.
+constraint-dependencies = ["certifi>=2026.10.19"]
+exclude-newer-package = { certifi = "0 days" }
 
 [tool.isort]
 profile = "black"

tests/pyproject.toml

@@ -18,3 +18,6 @@ dev = [
 
 [tool.uv]
 exclude-newer = "7 days"
+# GHSA-6q48-6c7w-9gw2: require the fixed CA bundle without the release-age delay.
+constraint-dependencies = ["certifi>=2026.10.19"]
+exclude-newer-package = { certifi = "0 days" }