build(deps): bump pyvbaanalysis from 3.0.0 to 3.0.1 in the minor-and-patch group

[dependabot]

Bumps the minor-and-patch group with 1 update: pyvbaanalysis.

Updates pyvbaanalysis from 3.0.0 to 3.0.1

Release notes

Sourced from pyvbaanalysis's releases.

pyVBAanalysis 3.0.1

Sync pyVBAanalysis to XLIDE 11.1.0, commit 8f64c2ce8d4c7104c7aa3559da0e98b6c178303e.

• Correct module-owned DefType defaults, indexed property setter contracts, array and enum assignment identities, and bracketed source member names.
• Check read-only Excel Range values and scalar host setter assignments.
• Reduce false positives from assumed Office collection contents and mutable state after calls, aliases and error handlers.
• Add Scripting and VBScript RegExp reference models and preserve enum library ownership.
• Support the upstream errors_only analysis option.

Validation: 38,879 distinct recorded upstream calls, 13,969 corpus module analyses, and 132 modules from Office, export and VB6 projects all match.

Two shared upstream assignment gaps remain tracked in xlide_vscode#1303 and #1304.

The Publish workflow attaches security and malware reports and signed build provenance to this release.

Changelog

Sourced from pyvbaanalysis's changelog.

3.0.1 - 2026-10-06

Sync the analyzer and evidence data to XLIDE 11.1.0 (commit 8f64c2c).

• Correct module-owned DefType defaults, indexed Property Let/Set contracts, array setter values, enum storage types and bracketed source member names.
• Check read-only Excel Range values and scalar host setter assignments.
• Stop inferring runtime bounds from saved sheets, UserForm designer contents, new Word documents or PowerPoint slide counts. Forget mutable state after calls, aliases and error handlers that make a failure uncertain.
• Add the upstream Scripting and VBScript RegExp reference models and preserve the library that owns an Office or DAO enum.
• Add the upstream errors_only analysis option and save differing replay inputs so a failed differential can be rerun directly.

Commits

• 29f6fb9 Sync XLIDE 11.1 analyzer and prepare 3.0.1
• d792566 Update YARA pins: YARA Forge 20261004 (#35)
• 24be29c Use GitHub App tokens for YARA update PRs
• 6b1030a chore(deps): update pyOpenVBA and preserve cross-platform test locks
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions