chore: update dependencies and metashade to v0.6.0

[ppenenko]

Addresses #82.

Dependabot Security Fixes

Alert	Package	Severity	Advisory	Fix
#4	pytest	Medium	CVE-2025-71176 — vulnerable tmpdir handling	8.4.1 → 9.1.1
#3	Pygments	Low	ReDoS via inefficient regex for GUID matching	2.19.2 → 2.20.0
#1	marshmallow	Medium	CVE-2025-68480 — DoS in Schema.load(many=True)	3.26.1 → 3.26.2

Metashade Submodule

Updated from 0f90040 (v0.5.1+88) to tag v0.6.0 (6a9dbb9).

Other Dependency Updates

• metashade>=0.5.1 → metashade>=0.6.0
• Removed pytest from runtime dependencies (kept only under dev optional dependencies)

GitHub Actions Bumps

Action	Before	After
actions/checkout	v4	v7
actions/setup-python	v3	v6
robinraju/release-downloader	v1.10	v1.13 (×3)

CI Updates

• glslang artifact rename: glslang-master-windows-Release.zip → glslang-main-windows-x86_64-release.zip (mirrors metashade#204)
• Python matrix: [3.9, 3.10, 3.11] → [3.11, 3.13, 3.14] — drops 3.9 (dependencies have moved on) and 3.10, adds 3.13 and 3.14
• requires-python: bumped from >=3.9,<3.12 to >=3.11
• Weekly scheduled build: every Friday at 8:00 AM EDT (mirrors metashade#205)

Version Bump

0.1.1 → 0.1.2 in pyproject.toml and vcpkg.json.

Testing

Local test run passed: 1 passed, all 12 shaders compiled and verified successfully.

[Copilot]

Pull request overview

Updates this sample project to align with Metashade v0.6.0 and refreshes related dependency pins and CI tooling so the generator/compile flow continues to work with the library’s updated module layout.

Changes:

• Bump project version to 0.1.2 (Python packaging + vcpkg manifest).
• Update Python imports to the metashade.targets.* namespace to match Metashade v0.6.0.
• Refresh pinned Python dependencies and modernize GitHub Actions workflow action versions.

Reviewed changes

Copilot reviewed 9 out of 10 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
vcpkg.json	Bumps vcpkg manifest version-string to 0.1.2.
src/generate.py	Updates Metashade utility imports to metashade.targets.*.
src/_impl/vertex_data.py	Updates SM6 vertex shader generator import path.
src/_impl/ps.py	Updates SM6 pixel shader + GLSL frag import paths.
src/_hlsl.py	Updates DXC/GLSLang utility import paths under metashade.targets.*.
src/_glsl.py	Updates GLSLang utility import path under metashade.targets.*.
requirements.txt	Updates pinned Python dependency versions (including pytest).
pyproject.toml	Bumps project version and raises minimum Metashade/pytest requirements.
.github/workflows/python-package.yml	Updates GitHub Actions to newer major versions and bumps release-downloader action.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 4 out of 5 changed files in this pull request and generated no new comments.

Suppressed comments (2)

pyproject.toml:15

• pytest is listed both as a runtime dependency ([project].dependencies) and as a dev extra ([project.optional-dependencies].dev). Since pytest is only needed to run the test suite, keeping it in runtime dependencies unnecessarily pulls it into normal installs and duplicates version management.

dependencies = [
    "metashade>=0.6.0",
    "pygltflib==1.16.5",
    "pytest>=9.1.1"
]

.github/workflows/python-package.yml:13

• The schedule comment claims this runs at “8:00 AM EDT (12:00 UTC)”, but the cron is always evaluated in UTC year-round. That means it will be 8:00 AM only during EDT (UTC-4) and 7:00 AM during EST (UTC-5). Please clarify the comment (or adjust the cron) so it’s not misleading.

  schedule:
    # Every Friday at 8:00 AM EDT (12:00 UTC)
    - cron: '0 12 * * 5'