Pin ruff (#1315)

.github/dependabot.yml

@@ -12,3 +12,7 @@ updates:
     directory: "/"
     schedule:
       interval: weekly
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: weekly    

.github/workflows/pythontest.yml

@@ -37,7 +37,7 @@ jobs:
         if: "matrix.os != 'windows-latest' && matrix.python-version != 'pypy3'"
       - name: Style checks
         run: |
-          pip install --upgrade ruff
+          pip install ".[dev]"
           python -m ruff check .
           python -m ruff format --check .
       - name: Typing checks

pyproject.toml

@@ -41,6 +41,9 @@ fastimport = ["fastimport"]
 https = ["urllib3>=1.24.1"]
 pgp = ["gpg"]
 paramiko = ["paramiko"]
+dev = [
+    "ruff==0.4.4"
+]
 
 [project.scripts]
 dulwich = "dulwich.cli:main"