Update numerical and contributor locks, selecting patched Hypothesis, filelock and virtualenv versions after public failing-base/passing-fix reproduction.

Qualify optional ML dependencies on Python 3.12-3.15, use scikit-learn 1.9.1 for Python 3.15, install macOS OpenMP, and correct the installation guide. Runtime source and public dependency declarations are unchanged.

Validation: all 12 installed-wheel cells, all 12 native stress cells and the shared platform matrix pass, alongside coverage, types, lint, security and strict documentation. Actual hosted artifact hashes, all 209 runtime payloads and clean installed identity are verified, including source-contamination rejection.

Preserves the original Dependabot proposal and attribution in PR #106. No package release is required.

Update three pinned CI actions, including the PyPI action CA and hash-checking security repair. Preserve existing qualification and publication boundaries. Reviewed with AI assistance; 48 applicable current-head checks passed and the configured Python 3.15 exception validator was inapplicable.

* deps: bump the python-dependencies group with 5 updates

Bumps the python-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [pandas](https://github.com/pandas-dev/pandas) | `3.0.6` | `3.1.0` |
| [python-dateutil](https://github.com/dateutil/dateutil) | `2.9.0.post0` | `3.0.0` |
| [duckdb](https://github.com/duckdb/duckdb-python) | `1.5.6` | `2.0.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.17.1` | `0.17.2` |
| [ty](https://github.com/astral-sh/ty) | `0.0.89` | `0.0.91` |


Updates `pandas` from 3.0.6 to 3.1.0
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v3.0.6...v3.1.0)

Updates `python-dateutil` from 2.9.0.post0 to 3.0.0
- [Release notes](https://github.com/dateutil/dateutil/releases)
- [Changelog](https://github.com/dateutil/dateutil/blob/master/NEWS)
- [Commits](dateutil/dateutil@2.9.0.post0...3.0.0)

Updates `duckdb` from 1.5.6 to 2.0.0
- [Release notes](https://github.com/duckdb/duckdb-python/releases)
- [Commits](duckdb/duckdb-python@v1.5.6...v2.0.0)

Updates `ruff` from 0.17.1 to 0.17.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.17.1...0.17.2)

Updates `ty` from 0.0.89 to 0.0.91
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.89...0.0.91)

---
updated-dependencies:
- dependency-name: pandas
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: python-dateutil
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: duckdb
  dependency-version: 2.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.17.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ty
  dependency-version: 0.0.91
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>

* fix(store): support DuckDB 2 result conversion and aware point-in-time joins

* fix(store): preserve timestamp precision across joins and writes

* test(store): retain nanosecond appends and label-key contracts

* fix(store): reject all lossy timestamp appends and preserve error contracts

* test(store): assert overflow safety across supported Polars versions

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Stefan Jansen <[email protected]>