Bump the pip group across 2 directories with 2 updates (#189)

Bumps the pip group with 1 update in the /python directory: [urllib3](https://github.com/urllib3/urllib3).
Bumps the pip group with 2 updates in the /template directory: [urllib3](https://github.com/urllib3/urllib3) and [bokeh](https://github.com/bokeh/bokeh).


Updates `urllib3` from 2.6.0 to 2.6.3
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.6.0...2.6.3)

Updates `urllib3` from 2.6.0 to 2.6.3
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.6.0...2.6.3)

Updates `bokeh` from 3.7.3 to 3.8.2
- [Changelog](https://github.com/bokeh/bokeh/blob/3.8.2/docs/CHANGELOG)
- [Commits](bokeh/bokeh@3.7.3...3.8.2)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.3
  dependency-type: indirect
  dependency-group: pip
- dependency-name: urllib3
  dependency-version: 2.6.3
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: bokeh
  dependency-version: 3.8.2
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

python/poetry.lock

@@ -14,7 +14,7 @@ e2b_charts
 # Other packages
 aiohttp==3.13.3
 beautifulsoup4==4.13.4
-bokeh==3.7.3
+bokeh==3.8.2
 gensim==4.3.3 # unmaintained, blocking numpy and scipy bump
 imageio==2.37.0
 joblib==1.5.0
@@ -38,7 +38,7 @@ soundfile==0.13.1
 spacy==3.8.2 # doesn't work on 3.13.x
 textblob==0.19.0
 tornado==6.5.1
-urllib3==2.6.0
+urllib3==2.6.3
 xarray==2025.4.0
 xlrd==2.0.1
 sympy==1.14.0