chore(deps): bump the minor-and-patch group across 1 directory with 23 updates

packages/pythinker-core/pyproject.toml

@@ -25,7 +25,7 @@ dependencies = [
     "jsonschema>=4.26.0",
     "loguru>=0.6.0,<0.7",
     "openai>=2.14.0,<3",
-    "pydantic>=2.12.5",
+    "pydantic>=2.13.5",
     "python-dotenv>=1.2.2",
     "typing-extensions>=4.15.0",
     "mcp>=1.23,<2",

packages/pythinker-host/pyproject.toml

@@ -34,7 +34,7 @@ Changelog     = "https://github.com/PyModel/pythinker-cli/blob/main/packages/pyt
 [dependency-groups]
 dev = [
     "inline-snapshot[black]>=0.31.1",
-    "pyright>=1.1.407",
+    "pyright>=1.1.414",
     "ty>=0.0.7",
     "pytest>=9.0.3",
     "pytest-asyncio>=1.3.0",

packages/pythinker-review/pyproject.toml

@@ -20,7 +20,7 @@ classifiers = [
     "Topic :: Security",
 ]
 dependencies = [
-    "typer==0.26.7",
+    "typer==0.27.2",
     "pydantic>=2.12.5",
     "pyyaml==6.0.3",
     "rich==15.0.0",

pyproject.toml

@@ -22,59 +22,59 @@ classifiers = [
     "Topic :: Utilities",
 ]
 dependencies = [
-    "agent-client-protocol==0.10.1",
+    "agent-client-protocol==0.12.1",
     "aiofiles>=24.0,<26.0",
-    "aiohttp==3.14.1",
-    "typer==0.26.7",
+    "aiohttp==3.14.3",
+    "typer==0.27.2",
     "pythinker-core[contrib]==1.2.0",
     # notify-py (via batrachian-toad) caps loguru at <=0.6.0 on 3.14+.
     "loguru>=0.6.0,<0.7",
-    "prompt-toolkit==3.0.52",
-    "pillow==12.2.0",
+    "prompt-toolkit==3.0.53",
+    "pillow==12.3.0",
     "pyyaml==6.0.3",
     "rich==15.0.0",
-    "certifi>=2025.10.5",
+    "certifi>=2026.7.22",
     "pyperclip==1.11.0",
     # Pinned: click 8.4.x regresses pyright (`click.Option` typed partially
     # unknown, ~95 errors in `make check`). Unpin once that type regression is
     # fixed upstream. Mirrored as a Dependabot ignore in .github/dependabot.yml.
-    "click==8.3.0",
+    "click==8.3.3",
     "streamingjson==0.0.5",
-    "trafilatura==2.0.0",
+    "trafilatura==2.2.0",
     # lxml is used by trafilatura/htmldate/justext; keep pinned for binary wheels.
-    "lxml==6.1.1",
+    "lxml==6.1.3",
     "tenacity==9.1.4",
     "fastmcp==3.2.0",
-    "pydantic==2.13.4",
+    "pydantic==2.13.5",
     "httpx[socks]==0.28.1",
     "pythinker-host==1.0.0",
     "pythinker-review==0.1.0",
     "batrachian-toad==0.5.23; python_version >= \"3.14\"",
-    "tomlkit==0.15.0",
+    "tomlkit==0.15.1",
     "jinja2==3.1.6",
-    "pyobjc-framework-cocoa>=12.1 ; sys_platform == 'darwin'",
-    "fastapi>=0.115.0",
+    "pyobjc-framework-cocoa>=12.2.2 ; sys_platform == 'darwin'",
+    "fastapi>=0.141.1",
     "uvicorn[standard]>=0.32.0",
-    "scalar-fastapi>=1.8.2",
+    "scalar-fastapi>=1.9.0",
     "websockets>=14.0",
     "keyring>=25.7.0",
     "setproctitle>=1.3.0",
     # Telemetry: Sentry-protocol error reporting (Bugsink) + OTLP traces/logs/metrics (SigNoz).
     # Both default to pythinker-operated endpoints; opt out with PYTHINKER_DISABLE_TELEMETRY=1.
-    "sentry-sdk>=2.20,<3",
-    "opentelemetry-api>=1.30,<2",
+    "sentry-sdk>=2.69.2,<3",
+    "opentelemetry-api>=1.44.0,<2",
     "opentelemetry-sdk>=1.30,<2",
     "opentelemetry-exporter-otlp-proto-http>=1.30,<2",
 ]
 
 [dependency-groups]
 dev = [
-    "pyinstaller==6.18.0",
+    "pyinstaller==6.22.3",
     "inline-snapshot[black]>=0.31.1",
-    "pyright>=1.1.409",
-    "ty>=0.0.9",
-    "pytest>=9.0.3",
-    "pytest-asyncio>=1.3.0",
+    "pyright>=1.1.414",
+    "ty>=0.0.83",
+    "pytest>=9.1.1",
+    "pytest-asyncio>=1.4.0",
     "pytest-cov>=6.0",
     # Pure-Python VT100/xterm emulator: PTY UI tests feed raw terminal bytes to
     # a virtual screen so they can assert on the *rendered* frame (catching

sdks/pythinker-sdk/pyproject.toml

@@ -32,7 +32,7 @@ dev = [
     "httpx>=0.28.1,<0.29.0",
     "inline-snapshot[black]>=0.31.1",
     "pdoc>=16.0.0",
-    "pyright>=1.1.407",
+    "pyright>=1.1.414",
     "ty>=0.0.7",
     "pytest>=9.0.3",
     "pytest-asyncio>=1.3.0",