Skip editable package in pip-audit; require setuptools>=83.0.0

pip-audit can't look up the local editable "gallery" package on PyPI,
so skip it explicitly. Also bump the setuptools build requirement to
pull in recent security fixes.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

.gitea/workflows/ci.yml

@@ -55,7 +55,7 @@ jobs:
           cache: pip
           cache-dependency-path: pyproject.toml
       - run: pip install -e ".[dev,plotting]"
-      - run: pip-audit
+      - run: pip-audit --skip-editable
 
   test:
     name: test:pytest

CLAUDE.md

@@ -52,7 +52,7 @@ Code style: ruff (lint + format), `line-length = 120`. Type-checked with `ty`.
 ruff check gallery plotstyle tests
 ruff format gallery plotstyle tests
 ty check gallery plotstyle
-pip-audit
+pip-audit --skip-editable
 ```
 
 **Before committing**, run the same checks CI (`.gitea/workflows/ci.yml`) runs and make sure they pass — `ruff check`, `ruff format --check`, `ty check`, `pip-audit`, and `pytest tests/`. Catching a failure locally is faster than waiting on the pipeline.

pyproject.toml

@@ -1,5 +1,5 @@
 [build-system]
-requires = ["setuptools>=65.0", "wheel"]
+requires = ["setuptools>=83.0.0", "wheel"]
 build-backend = "setuptools.build_meta"
 
 [project]