Out-of-date `click` dependency has an attached CVE

Running `uv audit` on my project which uses `fixit` as a direct dependency gives the following warning for `click` as a transative dependency:
```
Vulnerabilities:

click 8.1.8 has 1 known vulnerability:

- PYSEC-2026-2132: No summary provided

Fixed in: 8.3.3

Advisory information: https://access.redhat.com/errata/RHSA-2026:24761
```

In Fixit's `pyproject.toml`, `click` has a dependency marker of `click>=8.0,<8.2`. Is there any reason why this cannot be upgraded to `click>=8.3.3`?

Start by inspecting the click dependency constraint in pyproject.toml and run uv audit to reproduce the reported vulnerability. Check the project's dependency and test setup for compatibility with click 8.3.3; done means the constraint permits the fixed version, tests pass, and uv audit no longer reports this vulnerability.

Written by the indexing model from the issue text.