Bump deps that dependabot isn't (#13861)

Author: alex

ci-constraints-requirements.txt

@@ -28,7 +28,9 @@ certifi==2025.10.5
     #   requests
 charset-normalizer==3.4.4
     # via requests
-check-sdist==1.2.0
+check-sdist==1.2.0 ; python_full_version < '3.9'
+    # via cryptography (pyproject.toml)
+check-sdist==1.3.0 ; python_full_version >= '3.9'
     # via cryptography (pyproject.toml)
 click==8.1.8 ; python_full_version < '3.10'
     # via cryptography (pyproject.toml)
@@ -47,7 +49,7 @@ coverage==7.6.1 ; python_full_version < '3.9'
     # via pytest-cov
 coverage==7.10.7 ; python_full_version == '3.9.*'
     # via pytest-cov
-coverage==7.11.2 ; python_full_version >= '3.10'
+coverage==7.11.3 ; python_full_version >= '3.10'
     # via pytest-cov
 dependency-groups==1.3.1
     # via nox