Bump pybind11 from 3.0.1 to 3.0.4

[dependabot]

Bumps pybind11 from 3.0.1 to 3.0.4.

Release notes

Sourced from pybind11's releases.

Version 3.0.4

Bug fixes:

• Fixed test builds with installed Eigen 5 by improving Eigen3 CMake package detection. #6036

• Fixed move semantics of scoped_ostream_redirect to preserve buffered output and avoid crashes when moved redirects restore stream buffers. #6033

• Fixed py::dynamic_attr() traversal on Python 3.13+ to correctly propagate PyObject_VisitManagedDict() results. #6032

• Fixed std::shared_ptr<T> fallback casting to avoid unnecessary copy-constructor instantiation in reference_internal paths. #6028

CI:

• Updated setup-uv to the maintained GitHub Action tag scheme. #6035

• Updated pre-commit hooks. #6029

• Updated GitHub Actions dependencies, including actions-setup-cmake and cibuildwheel. #6027

Version 3.0.3

Bug fixes:

• Fixed TSS key exhaustion in implicitly_convertible() when many implicit conversions are registered across large module sets. #6020

• Fixed heap-buffer-overflow in pythonbuf with undersized buffers by enforcing a minimum buffer size. #6019

• Fixed virtual-inheritance pointer offset crashes when dispatching inherited methods through virtual bases. #6017

• Fixed free(): invalid pointer crashes during interpreter shutdown with py::enum_<> by duplicating late-added def_property_static argument strings. #6015

• Fixed function_record heap-type deallocation to call PyObject_Free() and decref the type. #6010

• Hardened PYBIND11_MODULE_PYINIT and get_internals() against module-initialization crashes. #6018

• Fixed static_pointer_cast build failure with virtual inheritance in holder_caster_foreign_helpers.h. #6014

... (truncated)

Changelog

Sourced from pybind11's changelog.

Version 3.0.4 (April 18, 2026)

Bug fixes:

• Fixed test builds with installed Eigen 5 by improving Eigen3 CMake package detection. #6036

• Fixed move semantics of scoped_ostream_redirect to preserve buffered output and avoid crashes when moved redirects restore stream buffers. #6033

• Fixed py::dynamic_attr() traversal on Python 3.13+ to correctly propagate PyObject_VisitManagedDict() results. #6032

• Fixed std::shared_ptr<T> fallback casting to avoid unnecessary copy-constructor instantiation in reference_internal paths. #6028

CI:

• Updated setup-uv to the maintained GitHub Action tag scheme. #6035

• Updated pre-commit hooks. #6029

• Updated GitHub Actions dependencies, including actions-setup-cmake and cibuildwheel. #6027

Version 3.0.3 (March 31, 2026)

Bug fixes:

• Fixed TSS key exhaustion in implicitly_convertible() when many implicit conversions are registered across large module sets. #6020

• Fixed heap-buffer-overflow in pythonbuf with undersized buffers by enforcing a minimum buffer size. #6019

• Fixed virtual-inheritance pointer offset crashes when dispatching inherited methods through virtual bases. #6017

• Fixed free(): invalid pointer crashes during interpreter shutdown with py::enum_<> by duplicating late-added def_property_static argument strings. #6015

• Fixed function_record heap-type deallocation to call PyObject_Free() and decref the type. #6010

• Hardened PYBIND11_MODULE_PYINIT and get_internals() against module-initialization crashes. #6018

... (truncated)

Commits

• d03662f build: support Eigen 5 (#6036)
• 3d8aabc Bump version from v3.0.3 → v3.0.4
• 2c1b391 [skip ci] docs: add v3.0.4 changelog updates. (#6041)
• 804e2c1 fix: segfault when moving scoped_ostream_redirect (#6033)
• a15579c ci: bump setup-uv to maintained tag scheme (#6035)
• e2fdf43 Handle result from PyObject_VisitManagedDict (#6032)
• 98003e2 chore(deps): update pre-commit hooks (#6029)
• ab392bd fix: avoid copy constructor instantiation in shared_ptr fallback cast (#6028)
• ad5bc9e chore(deps): bump the actions group with 2 updates (#6027)
• 1b49908 docs: add v3.0.3 and v3.1.0 changelog updates. (#6023)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)