chore(deps): bump the security-updates group across 1 directory with 4 updates

Bumps the security-updates group with 4 updates in the / directory: [fastapi](https://github.com/fastapi/fastapi), [click](https://github.com/pallets/click), [google-auth](https://github.com/googleapis/google-cloud-python) and [typing-extensions](https://github.com/python/typing_extensions).


Updates `fastapi` from 0.138.0 to 0.139.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.138.0...0.139.0)

Updates `click` from 8.4.1 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.4.1...8.4.2)

Updates `google-auth` from 2.55.0 to 2.55.1
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-auth-v2.55.0...google-auth-v2.55.1)

Updates `typing-extensions` from 4.15.0 to 4.16.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](python/typing_extensions@4.15.0...4.16.0)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.139.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security-updates
- dependency-name: click
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security-updates
- dependency-name: google-auth
  dependency-version: 2.55.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security-updates
- dependency-name: typing-extensions
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security-updates
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

k8s-legacy/constraints.txt

@@ -6,11 +6,11 @@ cachetools==7.1.4
 certifi==2026.6.17
 cffi==2.0.0
 charset-normalizer==3.4.7
-click==8.4.1
+click==8.4.2
 coverage==7.14.3
 editables==0.6
-fastapi==0.138.0
-google-auth==2.55.0
+fastapi==0.139.0
+google-auth==2.55.1
 hatchling==1.30.1
 httpx==0.28.1
 idna==3.18
@@ -53,7 +53,7 @@ tenacity==9.1.4
 toml==0.10.2
 tomli==2.4.1
 trove-classifiers==2026.6.1.19
-typing_extensions==4.15.0
+typing_extensions==4.16.0
 urllib3==2.7.0
 websocket-client==1.9.0
 wheel==0.47.0