build(deps): bump pdm from 2.27.0 to 2.28.0

[dependabot]

Bumps pdm from 2.27.0 to 2.28.0.

Release notes

Sourced from pdm's releases.

v2.28.0

Features & Improvements

• Add experimental workspace support for managing local member projects in a shared root lock file. (#1505)
• Defer startup-time imports for Python, virtualenv, and self-management commands. (#3673)

Bug Fixes

• Fix pdm completion bash printing __ltrim_colon_completions: command not found (and a similar error for _get_comp_words_by_ref) when the generated script is sourced in a bash without the bash-completion package loaded, such as Git Bash on Windows or minimal Linux containers. The script now defines small fallbacks for both helpers when they are not already available. (#3793)
• Avoid forwarding duplicate SIGINT in pdm run on POSIX. (#3808)

Documentation

• Fix the Windows installation instructions for a specific version. Invoke-Expression (iex) does not accept an -Args parameter and cannot forward arguments to a piped script, so the documented command failed. Use the $env:PDM_VERSION environment variable, which the install script reads, instead. (#3792)

Changelog

Sourced from pdm's changelog.

Release v2.28.0 (2026-06-23)

Features & Improvements

• Add experimental workspace support for managing local member projects in a shared root lock file. (#1505)
• Defer startup-time imports for Python, virtualenv, and self-management commands. (#3673)

Bug Fixes

• Fix pdm completion bash printing __ltrim_colon_completions: command not found (and a similar error for _get_comp_words_by_ref) when the generated script is sourced in a bash without the bash-completion package loaded, such as Git Bash on Windows or minimal Linux containers. The script now defines small fallbacks for both helpers when they are not already available. (#3793)
• Avoid forwarding duplicate SIGINT in pdm run on POSIX. (#3808)

Documentation

• Fix the Windows installation instructions for a specific version. Invoke-Expression (iex) does not accept an -Args parameter and cannot forward arguments to a piped script, so the documented command failed. Use the $env:PDM_VERSION environment variable, which the install script reads, instead. (#3792)

Commits

• ef05456 chore: Release 2.28.0
• 342d47c fix: add documentation for avoiding duplicate SIGINT in pdm run on POSIX
• d693542 fix: avoid forwarding duplicate SIGINT in pdm run on POSIX (#3808)
• 9650f50 feat: Experimental workspace support (#3810)
• ad49b1d perf: defer virtualenv command imports (#3806)
• a842994 docs: add Sponsor CTA badge to README (#3807)
• e02de21 perf: defer command imports during startup (#3805)
• ef0dcf5 docs: sync Chinese README (#3804)
• 7f2cdce docs: fix Windows install command for a specific version (#3803)
• 935b256 fix: make bash completion script work without bash-completion pkg (#3801)
• Additional commits viewable in compare view

[Martin005]

@dependabot rebase