fix: update idna 3.11 to 3.16 to resolve CVE DoS vulnerability (GHSA-65pc-fj4g-8rjx)

idna < 3.15 is vulnerable to denial of service via specially crafted
inputs to idna.encode() that bypass the CVE-2024-3651 fix. Payloads
using certain Unicode characters cause excessive processing time in
the valid_contexto function before length rejection.

This is a transitive runtime dependency used by httpx, anyio, aiohttp,
and yarl. Added explicit idna>=3.15 constraint to pyproject.toml and
updated the lock file to idna 3.16.

Author: Regaddi

pipecat/pyproject.toml

@@ -21,6 +21,7 @@ classifiers = [
 ]
 dependencies = [
     "aiofiles>=24.1.0,<25",
+    "idna>=3.15",
     "loguru>=0.7.3,<1",
     "msgpack>=1.1.1,<2",
     "pipecat-ai>=1.0.0",