chore(deps-dev): Update mypy requirement from 1.17.1 to 1.18.1 (#967)

Updates the requirements on [mypy](https://github.com/python/mypy) to
permit the latest version.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/python/mypy/blob/master/CHANGELOG.md">mypy's
changelog</a>.</em></p>
<blockquote>
<h1>Mypy Release Notes</h1>
<h2>Next Release</h2>
<h2>Mypy 1.18</h2>
<p>We’ve just uploaded mypy 1.18 to the Python Package Index (<a
href="https://pypi.org/project/mypy/">PyPI</a>).
Mypy is a static type checker for Python. This release includes new
features, performance
improvements and bug fixes. You can install it as follows:</p>
<pre><code>python3 -m pip install -U mypy
</code></pre>
<p>You can read the full documentation for this release on <a
href="http://mypy.readthedocs.io">Read the Docs</a>.</p>
<h3>Mypy Performance Improvements</h3>
<p>Mypy 1.18 includes numerous performance improvements, resulting in
about 40% speedup
compared to 1.17 when type checking mypy itself. In extreme cases, the
improvement
can be 10x or higher. The list below is an overview of the various mypy
optimizations.
Many mypyc improvements (discussed in a separate section below) also
improve performance.</p>
<p>Type caching optimizations have a small risk of causing regressions.
When
reporting issues with unexpected inferred types, please also check if
<code>--disable-expression-cache</code> will work around the issue, as
it turns off some of
these optimizations.</p>
<ul>
<li>Improve self check performance by 1.8% (Jukka Lehtosalo, PR <a
href="https://redirect.github.com/python/mypy/pull/19768">19768</a>, <a
href="https://redirect.github.com/python/mypy/pull/19769">19769</a>, <a
href="https://redirect.github.com/python/mypy/pull/19770">19770</a>)</li>
<li>Optimize fixed-format deserialization (Ivan Levkivskyi, PR <a
href="https://redirect.github.com/python/mypy/pull/19765">19765</a>)</li>
<li>Use macros to optimize fixed-format deserialization (Ivan
Levkivskyi, PR <a
href="https://redirect.github.com/python/mypy/pull/19757">19757</a>)</li>
<li>Two additional micro‑optimizations (Ivan Levkivskyi, PR <a
href="https://redirect.github.com/python/mypy/pull/19627">19627</a>)</li>
<li>Another set of micro‑optimizations (Ivan Levkivskyi, PR <a
href="https://redirect.github.com/python/mypy/pull/19633">19633</a>)</li>
<li>Cache common types (Ivan Levkivskyi, PR <a
href="https://redirect.github.com/python/mypy/pull/19621">19621</a>)</li>
<li>Skip more method bodies in third‑party libraries for speed (Ivan
Levkivskyi, PR <a
href="https://redirect.github.com/python/mypy/pull/19586">19586</a>)</li>
<li>Simplify the representation of callable types (Ivan Levkivskyi, PR
<a
href="https://redirect.github.com/python/mypy/pull/19580">19580</a>)</li>
<li>Add cache for types of some expressions (Ivan Levkivskyi, PR <a
href="https://redirect.github.com/python/mypy/pull/19505">19505</a>)</li>
<li>Use cache for dictionary expressions (Ivan Levkivskyi, PR <a
href="https://redirect.github.com/python/mypy/pull/19536">19536</a>)</li>
<li>Use cache for binary operations (Ivan Levkivskyi, PR <a
href="https://redirect.github.com/python/mypy/pull/19523">19523</a>)</li>
<li>Cache types of type objects (Ivan Levkivskyi, PR <a
href="https://redirect.github.com/python/mypy/pull/19514">19514</a>)</li>
<li>Avoid duplicate work when checking boolean operations (Ivan
Levkivskyi, PR <a
href="https://redirect.github.com/python/mypy/pull/19515">19515</a>)</li>
<li>Optimize generic inference passes (Ivan Levkivskyi, PR <a
href="https://redirect.github.com/python/mypy/pull/19501">19501</a>)</li>
<li>Speed up the default plugin (Jukka Lehtosalo, PRs <a
href="https://redirect.github.com/python/mypy/pull/19385">19385</a> and
<a
href="https://redirect.github.com/python/mypy/pull/19462">19462</a>)</li>
<li>Remove nested imports from the default plugin (Ivan Levkivskyi, PR
<a
href="https://redirect.github.com/python/mypy/pull/19388">19388</a>)</li>
<li>Micro‑optimize type expansion (Jukka Lehtosalo, PR <a
href="https://redirect.github.com/python/mypy/pull/19461">19461</a>)</li>
<li>Micro‑optimize type indirection (Jukka Lehtosalo, PR <a
href="https://redirect.github.com/python/mypy/pull/19460">19460</a>)</li>
<li>Micro‑optimize the plugin framework (Jukka Lehtosalo, PR <a
href="https://redirect.github.com/python/mypy/pull/19464">19464</a>)</li>
<li>Avoid temporary set creation in subtype checking (Jukka Lehtosalo,
PR <a
href="https://redirect.github.com/python/mypy/pull/19463">19463</a>)</li>
<li>Subtype checking micro‑optimization (Jukka Lehtosalo, PR <a
href="https://redirect.github.com/python/mypy/pull/19384">19384</a>)</li>
<li>Return early where possible in subtype check (Stanislav Terliakov,
PR <a
href="https://redirect.github.com/python/mypy/pull/19400">19400</a>)</li>
<li>Deduplicate some types before joining (Stanislav Terliakov, PR <a
href="https://redirect.github.com/python/mypy/pull/19409">19409</a>)</li>
<li>Speed up type checking by caching argument inference context (Jukka
Lehtosalo, PR <a
href="https://redirect.github.com/python/mypy/pull/19323">19323</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/python/mypy/commit/03fbaa941bccc3a9f8aea796d586603b67119bf2"><code>03fbaa9</code></a>
bump version to 1.18.1 due to wheels failure</li>
<li><a
href="https://github.com/python/mypy/commit/b44a1fbf0cf9fd90fd29d6bcd9f64c55dd2fd4c8"><code>b44a1fb</code></a>
removed +dev from version</li>
<li><a
href="https://github.com/python/mypy/commit/7197a99d1aebb1b7a584f82a53c44efb7dddf136"><code>7197a99</code></a>
Removed Unreleased in the Changelog for Release 1.18 (<a
href="https://redirect.github.com/python/mypy/issues/19827">#19827</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/ee61cec0d654463874ddee3a60914f0a6cd08222"><code>ee61cec</code></a>
Updates to 1.18 changelog (<a
href="https://redirect.github.com/python/mypy/issues/19826">#19826</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/24eed0bd0bb1107ede163ed314082a0f3e7dbbc4"><code>24eed0b</code></a>
Initial changelog for release 1.18 (<a
href="https://redirect.github.com/python/mypy/issues/19818">#19818</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/0ca1f2a7e50ed38eed95ecf8c1f2df1057da902d"><code>0ca1f2a</code></a>
Expose --fixed-format-cache if compiled (<a
href="https://redirect.github.com/python/mypy/issues/19815">#19815</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/2ce1bb225f3ced0ad4b2080af8a9a0eb39f8b38e"><code>2ce1bb2</code></a>
[mypyc] Fix subclass processing in detect_undefined_bitmap (<a
href="https://redirect.github.com/python/mypy/issues/19787">#19787</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/a6b55f061d6a352e7d272ec5bc890650b7187380"><code>a6b55f0</code></a>
feat: new mypyc primitives for weakref.proxy (<a
href="https://redirect.github.com/python/mypy/issues/19217">#19217</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/5a323dd2f8927eb958835e51916402c27ec2f31f"><code>5a323dd</code></a>
Make --allow-redefinition-new argument public (<a
href="https://redirect.github.com/python/mypy/issues/19796">#19796</a>)</li>
<li><a
href="https://github.com/python/mypy/commit/8638eb40aa7b9d3088f17ab005c538c86c752edd"><code>8638eb4</code></a>
[stubtest] temporary <code>--ignore-disjoint-bases</code> flag (<a
href="https://redirect.github.com/python/mypy/issues/19740">#19740</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/python/mypy/compare/v1.17.1...v1.18.1">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jan Kowalleck <jan.kowalleck@gmail.com>

Author: dependabot[bot]

cyclonedx_py/__main__.py

@@ -15,7 +15,7 @@
 # SPDX-License-Identifier: Apache-2.0
 # Copyright (c) OWASP Foundation. All Rights Reserved.
 
-__all__ = [  # type:ignore[var-annotated]
+__all__ = [
     # There is no stable/public API.
     # However, you might call the stable CLI instead, like so:
     #   from sys import executable

pyproject.toml

@@ -90,7 +90,7 @@ pep8-naming = "0.15.1"
 flake8-logging = "1.8.0"
 isort = "6.0.1"
 autopep8 = "2.3.2"
-mypy = "1.17.1"
+mypy = "1.18.1"
 bandit = "1.8.6"
 tomli = { version = "^2.0.1", python = "<3.11" }
 tox = "4.30.2"