Deps: lock refresh, and the context manager's Generator annotation

[vvillait88]

Summary

Dependency sweep: lock refresh, plus the one diagnostic the new type checker raises.

• Lock: django 5.2.18 and 6.1.2 (patch releases), the OpenTelemetry 1.45.1 / 0.66b1 patch set, pytempo 0.6.1, typer 0.27.3, types-requests and ty. The three OpenTelemetry beta versions in the lock are the packages that publish no stable release, as before. The lockfile scans clean with osv-scanner.
• ty 0.0.85 flags the Iterator[None] return annotation on the @contextlib.contextmanager in identity/ucp_jwks.py as the deprecated overload; it is now Generator[None]. Annotation only, no behavior change.

No release follows: the published package's dependency ranges are unchanged, and the annotation change alone does not warrant one; it ships with the next release.

Type of change

• Bug fix (no breaking change)
• New feature (no breaking change)
• Breaking change (existing callers must update)
• Docs, tests, or internal maintenance only

Public API

None.

Test plan

uv sync --all-extras --all-groups, then ruff check, ruff format --check, ty (all checks passed), vulture (as CI runs it) and pytest (1893 passed) all pass locally.

Worked with

Varun

Out of scope / what I did not do

• No release for the annotation change (behavior unchanged); it ships with the next release.

Checklist

• Tests cover the new behavior, and the suite passes locally
• Lint, format, and type checks pass
• Docs and README examples updated if the public surface changed
• No secrets, credentials, or personal data in the diff or the tests