chore(security): Bump pygments and update npm security dependencies across projects

libs/admin-api-lib/pyproject.toml

@@ -80,7 +80,7 @@ known_local_folder = ["admin_api_lib", "rag_core_lib"]
 max-line-length = 120
 
 [tool.poetry.group.test.dependencies]
-pytest = "^8.3.5"
+pytest = "^9.0.3"
 pytest-asyncio = "^1.0.0"
 coverage = "^7.8.0"
 
@@ -125,7 +125,7 @@ tqdm = "^4.67.1"
 langfuse = "^3.10.1"
 redis = "^6.0.0"
 pyyaml = "^6.0.2"
-python-multipart = "^0.0.29"
+python-multipart = "^0.0.30"
 marshmallow = "^3.26.2"
 protobuf = ">=5.29.6,<6.0.0"
 langchain-experimental = "^0.4.0"

libs/extractor-api-lib/pyproject.toml

@@ -94,7 +94,7 @@ dependency-injector = "^4.46.0"
 pydantic-settings = "^2.9.1"
 boto3 = "^1.38.10"
 rag-core-lib = "==4.2.0"
-python-multipart = "^0.0.29"
+python-multipart = "^0.0.30"
 oauthlib = "^3.2.2"
 requests-oauthlib = "^2.0.0"
 pdfplumber = "0.11.9"

libs/pyproject.toml

@@ -68,7 +68,7 @@ python = "^3.13"
 fastapi = "^0.136.0"
 
 [tool.poetry.group.test.dependencies]
-pytest = "^8.3.5"
+pytest = "^9.0.3"
 pytest-asyncio = "^1.0.0"
 coverage = "^7.8.0"
 

libs/rag-core-lib/pyproject.toml

@@ -32,13 +32,13 @@ deprecated = "^1.2.18"
 openai = "^1.77.0"
 langchain-core = "^1.0.7"
 langchain-openai = "^1.0.3"
-langgraph-checkpoint = ">=4.0.0,<4.1.0"
+langgraph-checkpoint = ">=4.0.0,<4.2.0"
 boto3 = "^1.38.10"
 filelock = "^3.20.3"
 marshmallow = "^3.26.2"
 
 [tool.poetry.group.test.dependencies]
-pytest = "^8.3.5"
+pytest = "^9.0.3"
 pytest-asyncio = "^1.0.0"
 coverage = "^7.5.4"
 

package.json

@@ -11,6 +11,6 @@
         "lodash-es": "^4.18.1",
         "npm": "^11.16.0",
         "picomatch": "^4.0.4",
-        "undici": "^6.24.0"
+        "undici": "^6.25.0"
     }
 }