chore: upgrade dependencies to resolve high-severity CVEs

Author: 1minds3t

requirements-trace.txt

@@ -4,17 +4,17 @@
 #
 #    pip-compile --output-file=requirements-trace.txt --strip-extras pyproject.toml
 #
-aiohappyeyeballs==2.6.1
+aiohappyeyeballs==2.6.2
     # via aiohttp
-aiohttp==3.13.5 ; python_version >= "3.9"
+aiohttp==3.14.0 ; python_version >= "3.9"
     # via omnipkg (pyproject.toml)
 aiosignal==1.4.0
     # via aiohttp
 annotated-doc==0.0.4
     # via typer
-attrs==25.4.0
+attrs==26.1.0
     # via aiohttp
-authlib==1.6.9 ; python_version >= "3.9"
+authlib==1.7.2 ; python_version >= "3.9"
     # via omnipkg (pyproject.toml)
 blinker==1.9.0
     # via flask
@@ -24,49 +24,50 @@ cachecontrol==0.14.4
     # via
     #   cachecontrol
     #   pip-audit
-certifi==2026.2.25
+certifi==2026.5.20
     # via requests
 cffi==2.0.0
     # via cryptography
-charset-normalizer==3.4.6
+charset-normalizer==3.4.7
     # via requests
-click==8.3.1
-    # via
-    #   flask
-    #   typer
-cryptography==46.0.7 ; python_version >= "3.8"
+click==8.4.1
+    # via flask
+cryptography==48.0.0 ; python_version >= "3.8" and platform_system != "Emscripten"
     # via
     #   authlib
+    #   joserfc
     #   omnipkg (pyproject.toml)
-cyclonedx-python-lib==11.7.0
+cyclonedx-python-lib==11.8.0
     # via pip-audit
 defusedxml==0.7.1
     # via py-serializable
-filelock==3.25.2 ; python_version >= "3.10"
+filelock==3.29.1 ; python_version >= "3.10"
     # via
     #   cachecontrol
     #   omnipkg (pyproject.toml)
 flask==3.1.3 ; python_version >= "3.9"
     # via
     #   flask-cors
     #   omnipkg (pyproject.toml)
-flask-cors==6.0.2 ; python_version >= "3.8"
+flask-cors==6.0.3 ; python_version >= "3.8"
     # via omnipkg (pyproject.toml)
 frozenlist==1.8.0
     # via
     #   aiohttp
     #   aiosignal
-idna==3.11
+idna==3.18
     # via
     #   requests
     #   yarl
 itsdangerous==2.2.0
     # via flask
 jinja2==3.1.6
     # via flask
+joserfc==1.7.0
+    # via authlib
 license-expression==30.4.4
     # via cyclonedx-python-lib
-markdown-it-py==4.0.0
+markdown-it-py==4.2.0
     # via rich
 markupsafe==3.0.3
     # via
@@ -83,7 +84,7 @@ multidict==6.7.1
     #   yarl
 packageurl-python==0.17.6
     # via cyclonedx-python-lib
-packaging==26.0 ; python_version >= "3.10"
+packaging==26.2 ; python_version >= "3.10"
     # via
     #   omnipkg (pyproject.toml)
     #   pip-audit
@@ -94,13 +95,13 @@ pip-audit==2.10.0
     # via omnipkg (pyproject.toml)
 pip-requirements-parser==32.0.1
     # via pip-audit
-platformdirs==4.9.4
+platformdirs==4.10.0
     # via pip-audit
-propcache==0.4.1
+propcache==0.5.2
     # via
     #   aiohttp
     #   yarl
-psutil==7.2.2
+psutil==7.2.2 ; platform_system != "Emscripten"
     # via omnipkg (pyproject.toml)
 py-serializable==2.1.0
     # via cyclonedx-python-lib
@@ -112,12 +113,12 @@ pygments==2.20.0 ; python_version >= "3.9"
     #   rich
 pyparsing==3.3.2
     # via pip-requirements-parser
-requests==2.33.1
+requests==2.34.2
     # via
     #   cachecontrol
     #   omnipkg (pyproject.toml)
     #   pip-audit
-rich==14.3.3
+rich==15.0.0
     # via
     #   omnipkg (pyproject.toml)
     #   pip-audit
@@ -126,30 +127,31 @@ shellingham==1.5.4
     # via typer
 sortedcontainers==2.4.0
     # via cyclonedx-python-lib
-tomli==2.4.0
+tomli==2.4.1
     # via pip-audit
 tomli-w==1.2.0
     # via pip-audit
-typer==0.24.1
+typer==0.26.7
     # via omnipkg (pyproject.toml)
 typing-extensions==4.15.0
     # via
+    #   aiohttp
     #   aiosignal
     #   cyclonedx-python-lib
-urllib3==2.6.3 ; python_version >= "3.10"
+urllib3==2.7.0 ; python_version >= "3.10"
     # via
     #   omnipkg (pyproject.toml)
     #   requests
-uv==0.10.11 ; python_version >= "3.8"
+uv==0.11.19 ; python_version >= "3.8"
     # via omnipkg (pyproject.toml)
-uv-ffi==0.10.8.post7 ; python_version >= "3.8" and python_version <= "3.14"
+uv-ffi==0.10.8.post15 ; python_version >= "3.8" and python_version <= "3.14" and platform_system != "Emscripten"
     # via omnipkg (pyproject.toml)
-werkzeug==3.1.6 ; python_version >= "3.9"
+werkzeug==3.1.8 ; python_version >= "3.9"
     # via
     #   flask
     #   flask-cors
     #   omnipkg (pyproject.toml)
-yarl==1.23.0
+yarl==1.24.2
     # via aiohttp
 
 # The following packages are considered to be unsafe in a requirements file:

requirements.txt

@@ -4,60 +4,61 @@
 #
 #    pip-compile --no-annotate --output-file=requirements.txt --strip-extras pyproject.toml
 #
-aiohappyeyeballs==2.6.1
-aiohttp==3.13.5 ; python_version >= "3.9"
+aiohappyeyeballs==2.6.2
+aiohttp==3.14.0 ; python_version >= "3.9"
 aiosignal==1.4.0
 annotated-doc==0.0.4
-attrs==25.4.0
-authlib==1.6.9 ; python_version >= "3.9"
+attrs==26.1.0
+authlib==1.7.2 ; python_version >= "3.9"
 blinker==1.9.0
 boolean-py==5.0
 cachecontrol==0.14.4
-certifi==2026.2.25
+certifi==2026.5.20
 cffi==2.0.0
-charset-normalizer==3.4.6
-click==8.3.1
-cryptography==46.0.7 ; python_version >= "3.8"
-cyclonedx-python-lib==11.7.0
+charset-normalizer==3.4.7
+click==8.4.1
+cryptography==48.0.0 ; python_version >= "3.8" and platform_system != "Emscripten"
+cyclonedx-python-lib==11.8.0
 defusedxml==0.7.1
-filelock==3.25.2 ; python_version >= "3.10"
+filelock==3.29.1 ; python_version >= "3.10"
 flask==3.1.3 ; python_version >= "3.9"
-flask-cors==6.0.2 ; python_version >= "3.8"
+flask-cors==6.0.3 ; python_version >= "3.8"
 frozenlist==1.8.0
-idna==3.11
+idna==3.18
 itsdangerous==2.2.0
 jinja2==3.1.6
+joserfc==1.7.0
 license-expression==30.4.4
-markdown-it-py==4.0.0
+markdown-it-py==4.2.0
 markupsafe==3.0.3
 mdurl==0.1.2
 msgpack==1.1.2
 multidict==6.7.1
 packageurl-python==0.17.6
-packaging==26.0 ; python_version >= "3.10"
+packaging==26.2 ; python_version >= "3.10"
 pip-api==0.0.34
 pip-audit==2.10.0
 pip-requirements-parser==32.0.1
-platformdirs==4.9.4
-propcache==0.4.1
-psutil==7.2.2
+platformdirs==4.10.0
+propcache==0.5.2
+psutil==7.2.2 ; platform_system != "Emscripten"
 py-serializable==2.1.0
 pycparser==3.0
 pygments==2.20.0 ; python_version >= "3.9"
 pyparsing==3.3.2
-requests==2.33.1
-rich==14.3.3
+requests==2.34.2
+rich==15.0.0
 shellingham==1.5.4
 sortedcontainers==2.4.0
-tomli==2.4.0
+tomli==2.4.1
 tomli-w==1.2.0
-typer==0.24.1
+typer==0.26.7
 typing-extensions==4.15.0
-urllib3==2.6.3 ; python_version >= "3.10"
-uv==0.10.11 ; python_version >= "3.8"
-uv-ffi==0.10.8.post7 ; python_version >= "3.8" and python_version <= "3.14"
-werkzeug==3.1.6 ; python_version >= "3.9"
-yarl==1.23.0
+urllib3==2.7.0 ; python_version >= "3.10"
+uv==0.11.19 ; python_version >= "3.8"
+uv-ffi==0.10.8.post15 ; python_version >= "3.8" and python_version <= "3.14" and platform_system != "Emscripten"
+werkzeug==3.1.8 ; python_version >= "3.9"
+yarl==1.24.2
 
 # The following packages are considered to be unsafe in a requirements file:
 # pip