Build(deps): Bump pdm from 2.17.3 to 2.18.1 (#1171)

Bumps [pdm](https://github.com/pdm-project/pdm) from 2.17.3 to 2.18.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pdm-project/pdm/releases">pdm's
releases</a>.</em></p>
<blockquote>
<h2>v2.18.1</h2>
<h3>Bug Fixes</h3>
<ul>
<li>Skip checking <code>project.name</code> if it is absent when running
<code>pdm outdated</code>. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3095">#3095</a>)</li>
<li>Don't remove the <code>cross_platform</code> strategy from old lock
files. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3105">#3105</a>)</li>
<li>Fix a bug that the VCS revision is lost if the candidate metadata is
cached during resolution. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3107">#3107</a>)</li>
<li>Fix a bug that PDM can't delete source password when saved in
keyring. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3108">#3108</a>)</li>
</ul>
<h2>v2.18.0</h2>
<h3>Features &amp; Improvements</h3>
<ul>
<li>Respect certificates in env vars <code>REQUESTS_CA_BUNDLE</code> and
<code>CURL_CA_BUNDLE</code> when verifying SSL certificates. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3076">#3076</a>)</li>
<li>Allow pypi.verify_ssl to be configured via PDM_PYPI_VERIFY_SSL
environmental variable. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3081">#3081</a>)</li>
<li>Clean logs older than 7 days. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3091">#3091</a>)</li>
<li>Polish the UI looking of locking packages to display the progress.
(<a
href="https://redirect.github.com/pdm-project/pdm/issues/3100">#3100</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Fixed <code>pdm venv activate</code> to remove quotes such that
<code>iex (pdm venv activate)</code> works correctly (<a
href="https://redirect.github.com/pdm-project/pdm/issues/2895">#2895</a>)</li>
<li>Don't crash if the version can't be resolved from the self project.
(<a
href="https://redirect.github.com/pdm-project/pdm/issues/3077">#3077</a>)</li>
<li>Don't fail <code>install-pdm.py</code> if there is an invalid
<code>pyproject.toml</code> file under the current directory. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3085">#3085</a>)</li>
<li>Make it able to expand env vars in the the dotenv file. Expose
<code>PDM_PROJECT_ROOT</code> to the dotenv file for expansion. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3087">#3087</a>)</li>
<li>Fix a bug that Python markers from the existing locked packages are
considered when locking with <code>--append</code> option. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3089">#3089</a>)</li>
<li>Backfill urls from configured indexed when exporting to
requirements.txt. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3094">#3094</a>)</li>
<li>Consider the auto-selected Python range when installing from
requirements.txt. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3095">#3095</a>)</li>
<li>Fix a bug that env vars do not override project config correctly.
(<a
href="https://redirect.github.com/pdm-project/pdm/issues/3099">#3099</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pdm-project/pdm/blob/main/CHANGELOG.md">pdm's
changelog</a>.</em></p>
<blockquote>
<h2>Release v2.18.1 (2024-08-16)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>Skip checking <code>project.name</code> if it is absent when running
<code>pdm outdated</code>. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3095">#3095</a>)</li>
<li>Don't remove the <code>cross_platform</code> strategy from old lock
files. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3105">#3105</a>)</li>
<li>Fix a bug that the VCS revision is lost if the candidate metadata is
cached during resolution. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3107">#3107</a>)</li>
<li>Fix a bug that PDM can't delete source password when saved in
keyring. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3108">#3108</a>)</li>
</ul>
<h2>Release v2.18.0 (2024-08-14)</h2>
<h3>Features &amp; Improvements</h3>
<ul>
<li>Respect certificates in env vars <code>REQUESTS_CA_BUNDLE</code> and
<code>CURL_CA_BUNDLE</code> when verifying SSL certificates. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3076">#3076</a>)</li>
<li>Allow pypi.verify_ssl to be configured via PDM_PYPI_VERIFY_SSL
environmental variable. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3081">#3081</a>)</li>
<li>Clean logs older than 7 days. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3091">#3091</a>)</li>
<li>Polish the UI looking of locking packages to display the progress.
(<a
href="https://redirect.github.com/pdm-project/pdm/issues/3100">#3100</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Fixed <code>pdm venv activate</code> to remove quotes such that
<code>iex (pdm venv activate)</code> works correctly (<a
href="https://redirect.github.com/pdm-project/pdm/issues/2895">#2895</a>)</li>
<li>Don't crash if the version can't be resolved from the self project.
(<a
href="https://redirect.github.com/pdm-project/pdm/issues/3077">#3077</a>)</li>
<li>Don't fail <code>install-pdm.py</code> if there is an invalid
<code>pyproject.toml</code> file under the current directory. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3085">#3085</a>)</li>
<li>Make it able to expand env vars in the the dotenv file. Expose
<code>PDM_PROJECT_ROOT</code> to the dotenv file for expansion. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3087">#3087</a>)</li>
<li>Fix a bug that Python markers from the existing locked packages are
considered when locking with <code>--append</code> option. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3089">#3089</a>)</li>
<li>Backfill urls from configured indexed when exporting to
requirements.txt. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3094">#3094</a>)</li>
<li>Consider the auto-selected Python range when installing from
requirements.txt. (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3095">#3095</a>)</li>
<li>Fix a bug that env vars do not override project config correctly.
(<a
href="https://redirect.github.com/pdm-project/pdm/issues/3099">#3099</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pdm-project/pdm/commit/8ad143c11509ae1a1e0cf8b4e58f2bb9e6bdc30a"><code>8ad143c</code></a>
chore: Release 2.18.1</li>
<li><a
href="https://github.com/pdm-project/pdm/commit/25da5e0fb8ed459a413502c5160ff4a092e37d7c"><code>25da5e0</code></a>
fix: Don't remove the <code>cross_platform</code> strategy from old lock
files</li>
<li><a
href="https://github.com/pdm-project/pdm/commit/e09ef100de7e8606e9e84bf9f99852aa19f5950e"><code>e09ef10</code></a>
doc: clarify the difference between project.scripts and
tool.pdm.scripts</li>
<li><a
href="https://github.com/pdm-project/pdm/commit/77b8c2f92191dead160ee5bfcfb2c33cb75e1617"><code>77b8c2f</code></a>
fix: Struggling with installs from git -- `unearth.errors.UnpackError:
fatal:...</li>
<li><a
href="https://github.com/pdm-project/pdm/commit/761a4f2f799972c526fa15b5e33ab7fd27aba91a"><code>761a4f2</code></a>
fix: PDM unable to delete source password when saved in keyring (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3109">#3109</a>)</li>
<li><a
href="https://github.com/pdm-project/pdm/commit/fdfc2fb5ea7df6664c35b7d8188caa4551f3be5d"><code>fdfc2fb</code></a>
fix: Skip checking <code>project.name</code> if it is absent when
running <code>pdm outdated</code></li>
<li><a
href="https://github.com/pdm-project/pdm/commit/4de696394016a749da84a436b65490bef6450808"><code>4de6963</code></a>
fix: update tomlkit to 0.13.2</li>
<li><a
href="https://github.com/pdm-project/pdm/commit/2cfa78e1b17d55a12bff96a3ca194960d960140c"><code>2cfa78e</code></a>
chore: Release 2.18.0</li>
<li><a
href="https://github.com/pdm-project/pdm/commit/4fa35c44b30d7a5f993580c68da25c1b5a3f3978"><code>4fa35c4</code></a>
chore(lint): update ruff rules</li>
<li><a
href="https://github.com/pdm-project/pdm/commit/041aea14cbe4178893a12be566dffb245728215d"><code>041aea1</code></a>
fix: PDM_IGNORE_STORED_INDEX environment variable is ignored (<a
href="https://redirect.github.com/pdm-project/pdm/issues/3102">#3102</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pdm-project/pdm/compare/2.17.3...2.18.1">compare
view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pdm&package-manager=pip&previous-version=2.17.3&new-version=2.18.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>