feat: separate dependency specification

[szymonmaszke]

Checklist

• I agree to follow this project's Code of Conduct
• I have read this project's Contributing Guide
• I have created relevant issue(s) and linked them in the PR description

Closes #94

[Copilot]

Pull request overview

This pull request separates dependency specification from pyproject.toml into a dedicated dependencies/dependencies.txt file, switching the build backend from pdm-backend to hatchling with the hatch-requirements-txt plugin. This change aims to simplify dependency management and reduce the complexity of the pyproject.toml file.

Changes:

• Switched build backend from pdm-backend to hatchling with hatch-requirements-txt plugin
• Created dependencies/dependencies.txt for dependency specification (currently empty)
• Updated documentation to reference the new dependency location
• Updated dependency versions in pdm.lock
• Added package overrides in osv-scanner.toml for new dev dependencies
• Changed line length from 80 to 110 characters

Reviewed changes

Copilot reviewed 5 out of 7 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
pyproject.toml	Changed build backend to hatchling, configured dynamic dependencies, removed inline dependency list, updated line length to 110
dependencies/dependencies.txt	New empty file for project dependencies
pdm.lock	Updated dependency versions across the board
osv-scanner.toml	Added license ignore overrides for griffelib, peewee, and python-discovery
SECURITY-DEPENDENCY.md	Updated documentation to mention both pyproject.toml and dependencies.txt
README.md	Updated usage instructions to reference dependencies.txt instead of pyproject.toml
.yamllint.yml	Increased max line length from 80 to 110

Comments suppressed due to low confidence (1)

pyproject.toml:288

• The line length is changed from 80 to 110 characters, which is also reflected in .yamllint.yml. However, this change is not mentioned in the PR description or linked issue #94. This appears to be an unrelated change that should either be explained or separated into its own PR.

line-length = 110

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.