chore(deps): update dependency sphinx-autodoc-typehints to v3.13.5

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
sphinx-autodoc-typehints (changelog)	==3.13.4 → ==3.13.5

---

Release Notes

tox-dev/sphinx-autodoc-typehints (sphinx-autodoc-typehints)

v3.13.5

Compare Source

What's Changed

• 🐛 fix(annotations): expand aliases from unread modules by @​gaborbernat in #​765

Full Changelog: tox-dev/sphinx-autodoc-typehints@3.13.4...3.13.5

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

LGTM — trivial dev dependency patch bump.

What was reviewed: the diff, confirming it is a single-line patch version bump (3.13.4 to 3.13.5) of sphinx-autodoc-typehints in the pip-compile-generated requirements-dev.txt lock file. No other lines, packages, or files changed. This is a docs-build-only dev dependency with no runtime/source code impact.

Extended reasoning...

Overview

The change touches only requirements-dev.txt, bumping the pinned version of sphinx-autodoc-typehints from 3.13.4 to 3.13.5. This is a transitive dev/documentation dependency (used via sphinx for building docs), not a runtime dependency of the pyuspto package itself.

Security risks

None identified. The dependency is a documentation build tool, not part of the runtime code path, and does not touch auth, crypto, or data handling. This is a patch-level version bump from a well-known, actively maintained project (tox-dev), and the upstream changelog cited in the PR description indicates a small bugfix (alias expansion for unread modules), which is not security-relevant.

Level of scrutiny

This warrants minimal scrutiny: it is a single-line, mechanical, Renovate-bot-generated lock file update with no source code, test, or configuration changes. Automerge is disabled in the Renovate config, but that's a repository policy choice unrelated to the risk profile of this particular patch bump.

Other factors

No CODEOWNERS restriction applies to requirements-dev.txt (none found), no PR conversation history shows outstanding objections, and the bug hunter reported no findings. The diff was verified directly and matches the PR's description exactly.