From 2108f420eaafe936742e97731e8647c105ea4900 Mon Sep 17 00:00:00 2001
From: Classic298 <27028174+Classic298@users.noreply.github.com>
Date: Sun, 8 Mar 2026 00:12:22 +0100
Subject: [PATCH] chore: dep bump (#22305)

* chore: dep bump

* revert: Brotli dependency bump (1.2.0 -> 1.1.0)
---
 backend/requirements-min.txt | 18 ++++----
 backend/requirements.txt     | 79 ++++++++++++++++++------------------
 pyproject.toml               | 56 ++++++++++++-------------
 3 files changed, 76 insertions(+), 77 deletions(-)

diff --git a/backend/requirements-min.txt b/backend/requirements-min.txt
index 6d28dc16d9..13bd199f08 100644
--- a/backend/requirements-min.txt
+++ b/backend/requirements-min.txt
@@ -1,8 +1,8 @@
 # Minimal requirements for backend to run
 # WIP: use this as a reference to build a minimal docker image
 
-fastapi==0.128.5
-uvicorn[standard]==0.40.0
+fastapi==0.135.1
+uvicorn[standard]==0.41.0
 pydantic==2.12.5
 python-multipart==0.0.22
 itsdangerous==2.2.0
@@ -13,7 +13,7 @@ cryptography
 bcrypt==5.0.0
 argon2-cffi==25.1.0
 PyJWT[crypto]==2.11.0
-authlib==1.6.7
+authlib==1.6.9
 
 requests==2.32.5
 aiohttp==3.13.2 # do not update to 3.13.3 - broken
@@ -25,12 +25,12 @@ Brotli==1.1.0
 httpx[socks,http2,zstd,cli,brotli]==0.28.1
 starsessions[redis]==2.2.1
 
-sqlalchemy==2.0.46
-alembic==1.18.3
+sqlalchemy==2.0.48
+alembic==1.18.4
 peewee==3.19.0
 peewee-migrate==1.14.3
 
-pycrdt==0.12.46
+pycrdt==0.12.47
 redis
 
 APScheduler==3.11.2
@@ -42,14 +42,14 @@ asgiref==3.11.1
 mcp==1.26.0
 openai
 
-langchain==1.2.9
+langchain==1.2.10
 langchain-community==0.4.1
 langchain-classic==1.0.1
-langchain-text-splitters==1.1.0
+langchain-text-splitters==1.1.1
 
 fake-useragent==2.2.0
 
-chromadb==1.4.1
+chromadb==1.5.2
 black==26.1.0
 pydub
 chardet==5.2.0
diff --git a/backend/requirements.txt b/backend/requirements.txt
index 06fb3b8194..3d3a54965d 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -1,5 +1,5 @@
-fastapi==0.128.5
-uvicorn[standard]==0.40.0
+fastapi==0.135.1
+uvicorn[standard]==0.41.0
 pydantic==2.12.5
 python-multipart==0.0.22
 itsdangerous==2.2.0
@@ -10,7 +10,7 @@ cryptography
 bcrypt==5.0.0
 argon2-cffi==25.1.0
 PyJWT[crypto]==2.11.0
-authlib==1.6.7
+authlib==1.6.9
 
 requests==2.32.5
 aiohttp==3.13.2 # do not update to 3.13.3 - broken
@@ -23,17 +23,17 @@ httpx[socks,http2,zstd,cli,brotli]==0.28.1
 starsessions[redis]==2.2.1
 python-mimeparse==2.0.0
 
-sqlalchemy==2.0.46
-alembic==1.18.3
+sqlalchemy==2.0.48
+alembic==1.18.4
 peewee==3.19.0
 peewee-migrate==1.14.3
 
-pycrdt==0.12.46
+pycrdt==0.12.47
 redis
 
 APScheduler==3.11.2
 RestrictedPython==8.1
-pytz==2025.2
+pytz==2026.1.post1
 
 loguru==0.7.3
 asgiref==3.11.1
@@ -44,38 +44,38 @@ mcp==1.26.0
 
 openai
 anthropic
-google-genai==1.62.0
+google-genai==1.66.0
 
-langchain==1.2.9
+langchain==1.2.10
 langchain-community==0.4.1
 langchain-classic==1.0.1
-langchain-text-splitters==1.1.0
+langchain-text-splitters==1.1.1
 
 fake-useragent==2.2.0
-chromadb==1.4.1
-weaviate-client==4.19.2
+chromadb==1.5.2
+weaviate-client==4.20.3
 opensearch-py==3.1.0
 
-transformers==5.1.0
-sentence-transformers==5.2.2
+transformers==5.3.0
+sentence-transformers==5.2.3
 accelerate
 pyarrow==20.0.0 # fix: pin pyarrow version to 20 for rpi compatibility #15897
 einops==0.8.2 
 
 ftfy==6.3.1
 chardet==5.2.0
-pypdf==6.7.0
-fpdf2==2.8.5
-pymdown-extensions==10.20.1
+pypdf==6.7.5
+fpdf2==2.8.7
+pymdown-extensions==10.21
 docx2txt==0.9
 python-pptx==1.0.2
 unstructured==0.18.31
 msoffcrypto-tool==6.0.0
-nltk==3.9.2
-Markdown==3.10.1
+nltk==3.9.3
+Markdown==3.10.2
 beautifulsoup4
 pypandoc==1.16.2
-pandas==3.0.0
+pandas==3.0.1
 openpyxl==3.1.5
 pyxlsb==1.0.10
 xlrd==2.0.2
@@ -84,12 +84,12 @@ psutil
 sentencepiece
 soundfile==0.13.1
 
-pillow==12.1.0
+pillow==12.1.1
 opencv-python-headless==4.13.0.92
 rapidocr-onnxruntime==1.4.4
 rank-bm25==0.2.2
 
-onnxruntime==1.24.1
+onnxruntime==1.24.3
 faster-whisper==1.2.1
 
 black==26.1.0
@@ -97,10 +97,10 @@ youtube-transcript-api==1.2.4
 pytube==15.0.0
 
 pydub
-ddgs==9.10.0
+ddgs==9.11.2
 
 azure-ai-documentintelligence==1.0.2
-azure-identity==1.25.1
+azure-identity==1.25.2
 azure-storage-blob==12.28.0
 azure-search-documents==11.6.0
 
@@ -118,10 +118,10 @@ psycopg2-binary==2.9.11
 pgvector==0.4.2
 
 PyMySQL==1.1.2
-boto3==1.42.44
+boto3==1.42.62
 
-pymilvus==2.6.8
-qdrant-client==1.16.2
+pymilvus==2.6.9
+qdrant-client==1.17.0
 playwright==1.58.0 # Caution: version must match docker-compose.playwright.yaml - Update the docker-compose.yaml if necessary
 elasticsearch==9.3.0
 pinecone==6.0.2
@@ -141,18 +141,17 @@ pytest-docker~=3.2.5
 ldap3==2.9.1
 
 ## Firecrawl
-firecrawl-py==4.14.0
+firecrawl-py==4.18.0
 
 ## Trace
-opentelemetry-api==1.39.1
-opentelemetry-sdk==1.39.1
-opentelemetry-exporter-otlp==1.39.1
-opentelemetry-instrumentation==0.60b1
-opentelemetry-instrumentation-fastapi==0.60b1
-opentelemetry-instrumentation-sqlalchemy==0.60b1
-opentelemetry-instrumentation-redis==0.60b1
-opentelemetry-instrumentation-requests==0.60b1
-opentelemetry-instrumentation-logging==0.60b1
-opentelemetry-instrumentation-httpx==0.60b1
-opentelemetry-instrumentation-aiohttp-client==0.60b1
-opentelemetry-instrumentation-system-metrics==0.60b1
+opentelemetry-api==1.40.0
+opentelemetry-sdk==1.40.0
+opentelemetry-exporter-otlp==1.40.0
+opentelemetry-instrumentation==0.61b0
+opentelemetry-instrumentation-fastapi==0.61b0
+opentelemetry-instrumentation-sqlalchemy==0.61b0
+opentelemetry-instrumentation-redis==0.61b0
+opentelemetry-instrumentation-requests==0.61b0
+opentelemetry-instrumentation-logging==0.61b0
+opentelemetry-instrumentation-httpx==0.61b0
+opentelemetry-instrumentation-aiohttp-client==0.61b0
diff --git a/pyproject.toml b/pyproject.toml
index d240449dff..251240ac48 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -6,8 +6,8 @@ authors = [
 ]
 license = { file = "LICENSE" }
 dependencies = [
-    "fastapi==0.128.5",
-    "uvicorn[standard]==0.40.0",
+    "fastapi==0.135.1",
+    "uvicorn[standard]==0.41.0",
     "pydantic==2.12.5",
     "python-multipart==0.0.22",
     "itsdangerous==2.2.0",
@@ -18,7 +18,7 @@ dependencies = [
     "bcrypt==5.0.0",
     "argon2-cffi==25.1.0",
     "PyJWT[crypto]==2.11.0",
-    "authlib==1.6.7",
+    "authlib==1.6.9",
 
     "requests==2.32.5",
     "aiohttp==3.13.2", # do not update to 3.13.3 - broken
@@ -31,15 +31,15 @@ dependencies = [
     "starsessions[redis]==2.2.1",
     "python-mimeparse==2.0.0",
 
-    "sqlalchemy==2.0.46",
-    "alembic==1.18.3",
+    "sqlalchemy==2.0.48",
+    "alembic==1.18.4",
     "peewee==3.19.0",
     "peewee-migrate==1.14.3",
 
-    "pycrdt==0.12.46",
+    "pycrdt==0.12.47",
     "redis",
 
-    "pytz==2025.2",
+    "pytz==2026.1.post1",
     "APScheduler==3.11.2",
     "RestrictedPython==8.1",
 
@@ -51,38 +51,38 @@ dependencies = [
 
     "openai",
     "anthropic",
-    "google-genai==1.62.0",
+    "google-genai==1.66.0",
 
-    "langchain==1.2.9",
+    "langchain==1.2.10",
     "langchain-community==0.4.1",
     "langchain-classic==1.0.1",
-    "langchain-text-splitters==1.1.0",
+    "langchain-text-splitters==1.1.1",
 
     "fake-useragent==2.2.0",
-    "chromadb==1.4.1",
+    "chromadb==1.5.2",
     "opensearch-py==3.1.0",
     "PyMySQL==1.1.2",
-    "boto3==1.42.44",
+    "boto3==1.42.62",
     
-    "transformers==5.1.0",
-    "sentence-transformers==5.2.2",
+    "transformers==5.3.0",
+    "sentence-transformers==5.2.3",
     "accelerate",
     "pyarrow==20.0.0", # fix: pin pyarrow version to 20 for rpi compatibility #15897
     "einops==0.8.2",
 
     "ftfy==6.3.1",
     "chardet==5.2.0",
-    "pypdf==6.7.0",
-    "fpdf2==2.8.5",
-    "pymdown-extensions==10.20.1",
+    "pypdf==6.7.5",
+    "fpdf2==2.8.7",
+    "pymdown-extensions==10.21",
     "docx2txt==0.9",
     "python-pptx==1.0.2",
     "unstructured==0.18.31",
     "msoffcrypto-tool==6.0.0",
-    "nltk==3.9.2",
-    "Markdown==3.10.1",
+    "nltk==3.9.3",
+    "Markdown==3.10.2",
     "pypandoc==1.16.2",
-    "pandas==3.0.0",
+    "pandas==3.0.1",
     "openpyxl==3.1.5",
     "pyxlsb==1.0.10",
     "xlrd==2.0.2",
@@ -92,12 +92,12 @@ dependencies = [
     "soundfile==0.13.1",
     "azure-ai-documentintelligence==1.0.2",
 
-    "pillow==12.1.0",
+    "pillow==12.1.1",
     "opencv-python-headless==4.13.0.92",
     "rapidocr-onnxruntime==1.4.4",
     "rank-bm25==0.2.2",
 
-    "onnxruntime==1.24.1",
+    "onnxruntime==1.24.3",
     "faster-whisper==1.2.1",
 
     "black==26.1.0",
@@ -105,7 +105,7 @@ dependencies = [
     "pytube==15.0.0",
 
     "pydub",
-    "ddgs==9.10.0",
+    "ddgs==9.11.2",
 
     "google-api-python-client",
     "google-auth-httplib2",
@@ -114,7 +114,7 @@ dependencies = [
     "googleapis-common-protos==1.72.0",
     "google-cloud-storage==3.9.0",
 
-    "azure-identity==1.25.1",
+    "azure-identity==1.25.2",
     "azure-storage-blob==12.28.0",
 
     "ldap3==2.9.1",
@@ -150,15 +150,15 @@ all = [
     "playwright==1.58.0", # Caution: version must match docker-compose.playwright.yaml - Update the docker-compose.yaml if necessary
     "elasticsearch==9.3.0",
 
-    "qdrant-client==1.16.2",
+    "qdrant-client==1.17.0",
     
-    "weaviate-client==4.19.2",
-    "pymilvus==2.6.8",
+    "weaviate-client==4.20.3",
+    "pymilvus==2.6.9",
     "pinecone==6.0.2",
     "oracledb==3.4.2",
     "colbert-ai==0.2.22",
 
-    "firecrawl-py==4.14.0",
+    "firecrawl-py==4.18.0",
     "azure-search-documents==11.6.0",
 ]