Merge branch 'main' into chore/ci_using_ogx_open_client

Author: aegeiger

.github/workflows/pypi.yml

@@ -811,7 +811,7 @@ jobs:
           matrix.registry == 'pypi' &&
           steps.check-artifacts.outputs.has_artifacts == 'true' &&
           steps.pypi-target.outputs.is_production == 'true'
-        uses: sigstore/gh-action-sigstore-python@04cffa1d795717b140764e8b640de88853c92acc # v3.3.0
+        uses: sigstore/gh-action-sigstore-python@5b79a39c381910c090341a2c9b0bf022c8b387e1 # v3.4.0
         with:
           inputs: >-
             ./dist/*.tar.gz

pyproject.toml

@@ -10,12 +10,11 @@ required-version = ">=0.7.0"
 constraint-dependencies = [
     "aiohttp>=3.13.4",                # CVE-2026-34514 + 9 more: CRLF injection, header leak, DoS
     "authlib>=1.6.11",                 # CVE-2026-41425 + 7 more: account takeover, JWE padding oracle, sig bypass
-    "cryptography>=46.0.7",            # CVE-2026-39892: buffer overflow; CVE-2026-34073: DNS constraint bypass
+    "cryptography>=48.0.1",            # CVE-2026-39892: buffer overflow; CVE-2026-34073: DNS constraint bypass
     "fonttools>=4.60.2",
     "gitpython>=3.1.47",               # Command injection via Git options bypass
     "h11>=0.16.0",
     "idna>=3.15",
-    "pydantic>=2.11.9,<2.12.0",        # 2.12 breaks int coercion in openai.types.model.Model during test replay
     "lxml>=6.1.0",                     # CVE-2026-41066: XML entity expansion with default resolve_entities=True
     "pillow>=12.2.0",                  # CVE-2026-40192 + 4 more: heap overflow, OOB write, DoS
     "protobuf>=5.29.6",               # CVE-2025-4565 + CVE-2026-0994: parsing vulnerabilities
@@ -111,7 +110,7 @@ starter = [
     "pgvector>=0.3.0",
     "pymilvus[milvus-lite]>=2.4.10",
     "pymongo",
-    "pypdf>=6.12.0",
+    "pypdf>=6.13.0",
     "pythainlp",
     "qdrant-client",
     "redis>=8.0.0",
@@ -158,7 +157,7 @@ type_checking = [
     "types-setuptools",
     "types-jsonschema",
     "markitdown[all]",
-    "pypdf>=6.12.0",
+    "pypdf>=6.13.0",
     "pandas-stubs",
     "types-psutil>=7.2.2.20260518",
     "types-tqdm",
@@ -196,7 +195,7 @@ test-common = [
     "mcp>=1.23.0,<2.0",
     "pgvector>=0.3.0",
     "psycopg2-binary>=2.9.0",
-    "pypdf>=6.12.0",
+    "pypdf>=6.13.0",
     "sqlalchemy[asyncio]>=2.0.41",
 ]
 # These are the dependencies required for running unit tests.