Update deps to address security vulnerabilities (#5873)

This PR updates dependencies to address security vulnerabilities

### Key changes
- **GitHub Actions:** Updated `tj-actions/changed-files` from v44/v45 to
v46 across all workflows
- **Python package updates:**
<img width="618" height="548" alt="image"
src="https://github.com/user-attachments/assets/c48ccd41-55f4-4dd6-b43a-4eb921c28b7d"
/>

.github/workflows/changelog_reminder.yaml

@@ -1,6 +1,6 @@
 name: Verify changelog updated
 
-on: 
+on:
   pull_request_target:
     types:
       - opened
@@ -14,20 +14,20 @@ jobs:
 
       - name: Get all updated Python files
         id: changed-python-files
-        uses: tj-actions/changed-files@v44
+        uses: tj-actions/changed-files@v46
         with:
           files: |
             **.py
 
       - name: Check for the changelog update
         id: changelog-update
-        uses: tj-actions/changed-files@v44
+        uses: tj-actions/changed-files@v46
         with:
           files: docs/changelog.rst
-          
+
       - name: Comment under the PR with a reminder
         if: steps.changed-python-files.outputs.any_changed == 'true' && steps.changelog-update.outputs.any_changed == 'false'
         uses: thollander/actions-comment-pull-request@v2
         with:
-           message: 'Thank you for the PR! The changelog has not been updated, so here is a friendly reminder to check if you need to add an entry.'
-           GITHUB_TOKEN: '${{ secrets.GITHUB_TOKEN }}'
+          message: 'Thank you for the PR! The changelog has not been updated, so here is a friendly reminder to check if you need to add an entry.'
+          GITHUB_TOKEN: '${{ secrets.GITHUB_TOKEN }}'

.github/workflows/ci.yaml

@@ -37,7 +37,7 @@ jobs:
 
       - name: Get changed lyrics files
         id: lyrics-update
-        uses: tj-actions/changed-files@v45
+        uses: tj-actions/changed-files@v46
         with:
           files: |
             beetsplug/lyrics.py

.github/workflows/lint.yml

@@ -22,13 +22,13 @@ jobs:
       - uses: actions/checkout@v4
       - name: Get changed docs files
         id: changed-doc-files
-        uses: tj-actions/changed-files@v44
+        uses: tj-actions/changed-files@v46
         with:
           files: |
             docs/**
       - name: Get changed python files
         id: raw-changed-python-files
-        uses: tj-actions/changed-files@v44
+        uses: tj-actions/changed-files@v46
         with:
           files: |
             **.py