build(deps): update orjson requirement from >=3.12.0 to >=3.13.0 in /scan-worker

[dependabot]

Updates the requirements on orjson to permit the latest version.

Release notes

Sourced from orjson's releases.

3.13.0

Changed

• No longer publish PyPI wheels for Windows x86/i686.

Added

• Serialize new Python 3.15 built-in type frozendict identical to dict (PEP 814).

Changelog

Sourced from orjson's changelog.

3.13.0 - 2026-08-17

Changed

• No longer publish PyPI wheels for Windows x86/i686.

Added

• Serialize new Python 3.15 built-in type frozendict identical to dict (PEP 814).

3.12.0 - 2026-08-14

Changed

• Serialization implementation substantially rewritten.
• Publish PyPI wheels for Python 3.15. For Python 3.15 and later, manylinux_2_39 (2024) is targeted instead of manylinux_2_17 (2012).
• No longer publish PyPI wheels for ppc64le and s390x.

3.11.9 - 2026-05-06

Changed

• Build now depends on Rust 1.95 or later instead of 1.89.

Fixed

• Fix building on Rust 1.95.

3.11.8 - 2026-03-31

Changed

• Build and compatibility improvements.

3.11.7 - 2026-02-02

Changed

• Use a faster library to serialize float. Users with byte-exact regression tests should note positive exponents are now written using a +, e.g., 1.2e+30 instead of 1.2e30. Both formats are spec-compliant.
• ABI compatibility with CPython 3.15 alpha 5 free-threading.

... (truncated)

Commits

• bd00937 3.13.0
• de1fd5a frozendict
• f110dbe build update
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Maintenance review, 2026-10-12. Regenerated scan-worker/uv.lock for orjson 3.13.0 to fix the failed uv lock --check. On Python 3.14.8, uv lock --check, uv sync --frozen --extra dev, Ruff lint/format and all 16 pytest cases passed. Full current-head CI remains pending.

AI assistance: Codex, gpt-6.1-sol, reviewed dependency changes and CI; regenerated Python lockfiles where applicable. Responsible contributor: KyleDerZweite. Human review: none recorded during this task. Merge or closure authorized by the maintainer. Dependabot authored the original update; its underlying model is unknown.