chore(deps): bump the web-api group with 4 updates (#208)

* chore(deps): bump the web-api group with 4 updates

Bumps the web-api group with 4 updates: [pydantic](https://github.com/pydantic/pydantic), [fastapi](https://github.com/fastapi/fastapi), [uvicorn](https://github.com/Kludex/uvicorn) and [starlette](https://github.com/Kludex/starlette).


Updates `pydantic` from 2.9.2 to 2.12.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.9.2...v2.12.5)

Updates `fastapi` from 0.115.0 to 0.135.3
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.115.0...0.135.3)

Updates `uvicorn` from 0.30.6 to 0.44.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.30.6...0.44.0)

Updates `starlette` from 0.50.0 to 1.0.0
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](Kludex/starlette@0.50.0...1.0.0)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.12.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-api
- dependency-name: fastapi
  dependency-version: 0.135.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-api
- dependency-name: uvicorn
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-api
- dependency-name: starlette
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: web-api
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): regenerate lock files for pydantic 2.13.0 + fastapi/starlette/uvicorn bumps

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Yaroslav Vasylenko <neuron7x@users.noreply.github.com>

Author: dependabot[bot]

coherence_bridge/requirements.txt

@@ -1,10 +1,10 @@
-fastapi==0.115.0
+fastapi==0.135.3
 grpcio==1.79.3
 grpcio-health-checking==1.80.0
 kafka-python==2.2.15
 numpy==2.4.4
 prometheus-client==0.25.0
-pydantic==2.9.2
+pydantic==2.13.0
 python-dotenv==1.0.1
 questdb==2.0.4
-uvicorn==0.30.6
+uvicorn==0.44.0

constraints/security.txt

@@ -50,7 +50,7 @@ SQLAlchemy==2.0.44
 
 # pydantic: Data validation, critical for API input validation
 # Security fixes for ReDoS and validation bypass
-pydantic==2.12.4
+pydantic==2.13.0
 pydantic-settings==2.12.0
 
 # pandera: DataFrame validation, data quality and security

pyproject.toml

@@ -34,7 +34,7 @@ dependencies = [
     "optuna>=3.6.1,<4.0.0",
     "numba>=0.60.0",
     # Data validation
-    "pydantic>=2.12.4,<3.0.0",
+    "pydantic>=2.13.0,<3.0.0",
     "pydantic-settings>=2.12.0,<3.0.0",
     "pandera>=0.20.4,<0.27",
     "exchange-calendars>=4.11.1",
@@ -54,14 +54,14 @@ dependencies = [
     "ccxt>=4.5.12",
     "tenacity>=9.1.2",
     "aiolimiter>=1.2.1",
-    "fastapi>=0.120.0,<1.0.0",
+    "fastapi>=0.135.3,<1.0.0",
     "strawberry-graphql[fastapi]>=0.214.0",
     "alembic>=1.14.0",
     "psycopg[binary]>=3.2.3",
     # Templates & packaging helpers
     "click>=8.3.0",
     "jinja2>=3.1.6",
-    "uvicorn>=0.37.0",
+    "uvicorn>=0.44.0",
     # Dashboard & visualization
     "streamlit>=1.54.0",
     "streamlit-authenticator>=0.3.1",

requirements-dev.lock

@@ -39,10 +39,9 @@ async-timeout==5.0.1
 attrs==25.4.0
     # via
     #   aiohttp
-    #   hypothesis
     #   jsonschema
     #   referencing
-bandit==1.8.6
+bandit==1.9.4
     # via geosync (pyproject.toml)
 bashlex==0.18
     # via cibuildwheel
@@ -106,6 +105,12 @@ cryptography==46.0.7
     #   pyjwt
     #   secretstorage
     #   streamlit-authenticator
+cuda-bindings==13.2.0
+    # via torch
+cuda-pathfinder==1.5.2
+    # via cuda-bindings
+cuda-toolkit[cublas,cudart,cufft,cufile,cupti,curand,cusolver,cusparse,nvjitlink,nvrtc,nvtx]==13.0.2
+    # via torch
 deap==1.4.3
     # via geosync (pyproject.toml)
 dependency-groups==1.3.1
@@ -118,7 +123,7 @@ execnet==2.1.1
     # via pytest-xdist
 extra-streamlit-components==0.1.81
     # via streamlit-authenticator
-fastapi==0.124.2
+fastapi==0.135.3
     # via
     #   -c constraints/security.txt
     #   geosync (pyproject.toml)
@@ -165,7 +170,7 @@ humanize==4.13.0
     # via cibuildwheel
 hydra-core==1.3.2
     # via geosync (pyproject.toml)
-hypothesis==6.140.3
+hypothesis==6.151.13
     # via geosync (pyproject.toml)
 id==1.5.0
     # via twine
@@ -218,6 +223,8 @@ lia-web==0.2.3
     # via strawberry-graphql
 libcst==1.7.0
     # via mutmut
+librt==0.9.0
+    # via mypy
 linkify-it-py==2.0.3
     # via markdown-it-py
 llvmlite==0.46.0
@@ -251,7 +258,7 @@ multidict==6.7.0
     #   yarl
 mutmut==3.3.1
     # via geosync (pyproject.toml)
-mypy==1.18.2
+mypy==1.20.1
     # via geosync (pyproject.toml)
 mypy-extensions==1.1.0
     # via
@@ -281,47 +288,47 @@ numpy==2.3.3
     #   scikit-learn
     #   scipy
     #   streamlit
-nvidia-cublas-cu12==12.8.4.1
-    # via
-    #   nvidia-cudnn-cu12
-    #   nvidia-cusolver-cu12
-    #   torch
-nvidia-cuda-cupti-cu12==12.8.90
-    # via torch
-nvidia-cuda-nvrtc-cu12==12.8.93
-    # via torch
-nvidia-cuda-runtime-cu12==12.8.90
-    # via torch
-nvidia-cudnn-cu12==9.10.2.21
-    # via torch
-nvidia-cufft-cu12==11.3.3.83
+nvidia-cublas==13.1.0.3
+    # via
+    #   cuda-toolkit
+    #   nvidia-cudnn-cu13
+    #   nvidia-cusolver
+nvidia-cuda-cupti==13.0.85
+    # via cuda-toolkit
+nvidia-cuda-nvrtc==13.0.88
+    # via cuda-toolkit
+nvidia-cuda-runtime==13.0.96
+    # via cuda-toolkit
+nvidia-cudnn-cu13==9.19.0.56
     # via torch
-nvidia-cufile-cu12==1.13.1.3
-    # via torch
-nvidia-curand-cu12==10.3.9.90
-    # via torch
-nvidia-cusolver-cu12==11.7.3.90
-    # via torch
-nvidia-cusparse-cu12==12.5.8.93
-    # via
-    #   nvidia-cusolver-cu12
-    #   torch
-nvidia-cusparselt-cu12==0.7.1
+nvidia-cufft==12.0.0.61
+    # via cuda-toolkit
+nvidia-cufile==1.15.1.6
+    # via cuda-toolkit
+nvidia-curand==10.4.0.35
+    # via cuda-toolkit
+nvidia-cusolver==12.0.4.66
+    # via cuda-toolkit
+nvidia-cusparse==12.6.3.3
+    # via
+    #   cuda-toolkit
+    #   nvidia-cusolver
+nvidia-cusparselt-cu13==0.8.0
     # via torch
 nvidia-ml-py==13.580.82
     # via scalene
-nvidia-nccl-cu12==2.27.5
+nvidia-nccl-cu13==2.28.9
     # via torch
-nvidia-nvjitlink-cu12==12.8.93
+nvidia-nvjitlink==13.0.88
     # via
-    #   nvidia-cufft-cu12
-    #   nvidia-cusolver-cu12
-    #   nvidia-cusparse-cu12
-    #   torch
-nvidia-nvshmem-cu12==3.3.20
-    # via torch
-nvidia-nvtx-cu12==12.8.90
+    #   cuda-toolkit
+    #   nvidia-cufft
+    #   nvidia-cusolver
+    #   nvidia-cusparse
+nvidia-nvshmem-cu13==3.4.5
     # via torch
+nvidia-nvtx==13.0.85
+    # via cuda-toolkit
 omegaconf==2.3.0
     # via
     #   geosync (pyproject.toml)
@@ -403,7 +410,7 @@ pluggy==1.6.0
     # via
     #   pytest
     #   pytest-cov
-prometheus-client==0.23.1
+prometheus-client==0.25.0
     # via geosync (pyproject.toml)
 propcache==0.4.1
     # via
@@ -435,15 +442,15 @@ pycodestyle==2.12.1
     # via flake8
 pycparser==2.23
     # via cffi
-pydantic==2.12.4
+pydantic==2.13.0
     # via
     #   -c constraints/security.txt
     #   fastapi
     #   geosync (pyproject.toml)
     #   pandera
     #   pydantic-settings
     #   scalene
-pydantic-core==2.41.5
+pydantic-core==2.46.0
     # via pydantic
 pydantic-settings==2.12.0
     # via
@@ -473,7 +480,7 @@ pyproject-hooks==1.2.0
     # via
     #   build
     #   pip-tools
-pytest==8.4.2
+pytest==9.0.3
     # via
     #   geosync (pyproject.toml)
     #   mutmut
@@ -486,15 +493,15 @@ pytest==8.4.2
     #   pytest-profiling
     #   pytest-rerunfailures
     #   pytest-xdist
-pytest-asyncio==1.2.0
+pytest-asyncio==1.3.0
     # via geosync (pyproject.toml)
-pytest-benchmark==5.1.0
+pytest-benchmark==5.2.3
     # via geosync (pyproject.toml)
-pytest-cov==7.0.0
+pytest-cov==7.1.0
     # via geosync (pyproject.toml)
-pytest-html==4.1.1
+pytest-html==4.2.0
     # via geosync (pyproject.toml)
-pytest-httpx==0.35.0
+pytest-httpx==0.36.2
     # via geosync (pyproject.toml)
 pytest-metadata==3.1.1
     # via pytest-html
@@ -557,7 +564,7 @@ rpds-py==0.27.1
     # via
     #   jsonschema
     #   referencing
-ruff==0.14.0
+ruff==0.15.10
     # via geosync (pyproject.toml)
 scalene==1.5.55
     # via geosync (pyproject.toml)
@@ -616,15 +623,15 @@ toml==0.10.2
     # via streamlit
 toolz==1.0.0
     # via exchange-calendars
-torch==2.9.1
+torch==2.11.0
     # via geosync (pyproject.toml)
 tornado==6.5.5
     # via streamlit
 towncrier==25.8.0
     # via geosync (pyproject.toml)
 tqdm==4.67.1
     # via optuna
-triton==3.5.1
+triton==3.6.0
     # via torch
 twine==6.2.0
     # via geosync (pyproject.toml)
@@ -668,6 +675,7 @@ typing-inspect==0.9.0
     # via pandera
 typing-inspection==0.4.2
     # via
+    #   fastapi
     #   pydantic
     #   pydantic-settings
 tzdata==2025.2
@@ -681,7 +689,7 @@ urllib3==2.6.3
     #   -c constraints/security.txt
     #   requests
     #   twine
-uvicorn==0.37.0
+uvicorn==0.44.0
     # via geosync (pyproject.toml)
 watchdog==6.0.0
     # via streamlit

requirements-scan.lock

@@ -20,7 +20,6 @@ async-timeout==5.0.1
 attrs==25.4.0
 bcrypt==5.0.0
 blinker==1.9.0
-brotli==1.2.0
 cachetools==6.2.4
 captcha==0.7.1
 ccxt==4.5.30
@@ -31,7 +30,7 @@ click==8.3.1
 coincurve==21.0.0
 colorlog==6.10.1
 cross-web==0.4.0
-cryptography==46.0.6
+cryptography==46.0.7
 deap==1.4.3
 exchange-calendars==4.11.3
 extra-streamlit-components==0.1.81
@@ -85,8 +84,8 @@ psycopg-binary==3.3.2
 pyarrow==22.0.0
 pycares==4.11.0
 pycparser==2.23
-pydantic==2.12.4
-pydantic-core==2.41.5
+pydantic==2.13.0
+pydantic-core==2.46.0
 pydantic-settings==2.12.0
 pydeck==0.9.1
 pyjwt==2.12.0