chore(deps): Bump the agent-minor-patch group across 1 directory with 68 updates

services/agent/constraints.txt

@@ -16,7 +16,7 @@
 #       && pip install -q --upgrade setuptools && pip freeze' \
 #     > services/agent/constraints.txt
 #   then re-add this header and update the torch/setuptools pins in the Dockerfile.
-annotated-doc==0.0.4
+annotated-doc==0.0.5
 annotated-types==0.8.0
 anthropic==0.120.0
 anyio==4.14.2
@@ -29,27 +29,27 @@ azure-monitor-opentelemetry==1.8.9
 azure-monitor-opentelemetry-exporter==1.0.0b55
 backoff==2.2.1
 certifi==2026.7.22
-cffi==2.1.0
-charset-normalizer==3.4.9
-click==8.4.2
-cryptography==50.0.0
+cffi==2.1.1
+charset-normalizer==3.5.1
+click==8.5.0
+cryptography==50.0.1
 distro==1.9.0
 docstring_parser==0.18.0
-fastapi==0.140.0
-filelock==3.29.0
+fastapi==0.141.1
+filelock==3.32.4
 filetype==1.2.0
-fsspec==2026.4.0
-google-auth==2.56.2
-google-genai==2.14.0
-googleapis-common-protos==1.75.0
+fsspec==2026.7.0
+google-auth==2.57.0
+google-genai==2.20.0
+googleapis-common-protos==1.75.2
 h11==0.16.0
-hf-xet==1.5.2
+hf-xet==1.6.0
 httpcore==1.0.9
 httptools==0.8.0
 httpx==0.28.1
 httpx-sse==0.4.3
-huggingface_hub==1.24.0
-idna==3.18
+huggingface_hub==1.29.0
+idna==3.19
 isodate==0.7.2
 Jinja2==3.1.6
 jiter==0.16.0
@@ -58,72 +58,72 @@ jsonpatch==1.33
 jsonpointer==3.1.1
 jsonschema==4.26.0
 jsonschema-specifications==2025.9.1
-langchain==1.3.14
-langchain-anthropic==1.5.2
-langchain-core==1.5.1
-langchain-google-genai==4.3.1
-langchain-mcp-adapters==0.3.0
-langchain-openai==1.4.1
-langchain-protocol==0.0.18
-langfuse==4.14.1
-langgraph==1.2.9
-langgraph-checkpoint==4.1.1
-langgraph-checkpoint-postgres==3.1.1
+langchain==1.3.18
+langchain-anthropic==1.7.0
+langchain-core==1.6.1
+langchain-google-genai==4.3.7
+langchain-mcp-adapters==0.3.2
+langchain-openai==1.6.0
+langchain-protocol==0.0.19
+langfuse==4.15.1
+langgraph==1.2.11
+langgraph-checkpoint==4.2.0
+langgraph-checkpoint-postgres==3.1.2
 langgraph-prebuilt==1.1.0
-langgraph-sdk==0.4.2
-langsmith==0.10.10
+langgraph-sdk==0.4.4
+langsmith==0.11.2
 markdown-it-py==4.2.0
 MarkupSafe==3.0.3
 mcp==1.28.1
 mdurl==0.1.2
-mpmath==1.3.0
-msal==1.37.0
+mpmath==1.4.1
+msal==1.38.0
 msal-extensions==1.3.1
 msrest==0.7.1
-narwhals==2.24.0
+narwhals==2.25.0
 networkx==3.6.1
 numpy==2.5.1
 oauthlib==3.3.1
 openai==2.48.0
-opentelemetry-api==1.43.0
-opentelemetry-exporter-otlp-proto-common==1.43.0
-opentelemetry-exporter-otlp-proto-http==1.43.0
-opentelemetry-instrumentation==0.64b0
-opentelemetry-instrumentation-asgi==0.64b0
-opentelemetry-instrumentation-dbapi==0.64b0
-opentelemetry-instrumentation-django==0.64b0
-opentelemetry-instrumentation-fastapi==0.64b0
-opentelemetry-instrumentation-flask==0.64b0
-opentelemetry-instrumentation-logging==0.64b0
-opentelemetry-instrumentation-psycopg2==0.64b0
-opentelemetry-instrumentation-requests==0.64b0
-opentelemetry-instrumentation-urllib==0.64b0
-opentelemetry-instrumentation-urllib3==0.64b0
-opentelemetry-instrumentation-wsgi==0.64b0
-opentelemetry-proto==1.43.0
-opentelemetry-resource-detector-azure==0.1.5
-opentelemetry-sdk==1.43.0
-opentelemetry-semantic-conventions==0.64b0
-opentelemetry-util-http==0.64b0
-orjson==3.11.9
+opentelemetry-api==1.44.0
+opentelemetry-exporter-otlp-proto-common==1.44.0
+opentelemetry-exporter-otlp-proto-http==1.44.0
+opentelemetry-instrumentation==0.65b0
+opentelemetry-instrumentation-asgi==0.65b0
+opentelemetry-instrumentation-dbapi==0.65b0
+opentelemetry-instrumentation-django==0.65b0
+opentelemetry-instrumentation-fastapi==0.65b0
+opentelemetry-instrumentation-flask==0.65b0
+opentelemetry-instrumentation-logging==0.65b0
+opentelemetry-instrumentation-psycopg2==0.65b0
+opentelemetry-instrumentation-requests==0.65b0
+opentelemetry-instrumentation-urllib==0.65b0
+opentelemetry-instrumentation-urllib3==0.65b0
+opentelemetry-instrumentation-wsgi==0.65b0
+opentelemetry-proto==1.44.0
+opentelemetry-resource-detector-azure==0.2.0
+opentelemetry-sdk==1.44.0
+opentelemetry-semantic-conventions==0.65b0
+opentelemetry-util-http==0.65b0
+orjson==3.12.0
 ormsgpack==1.12.2
-packaging==26.2
+packaging==26.3
 pandas==2.3.3
-protobuf==7.35.1
+protobuf==7.36.0
 psutil==7.2.2
 psycopg==3.3.4
 psycopg-binary==3.3.4
 psycopg-pool==3.3.1
 pyasn1==0.6.4
 pyasn1_modules==0.4.2
 pycparser==3.0
-pydantic==2.13.4
-pydantic-settings==2.14.2
-pydantic_core==2.46.4
-Pygments==2.20.0
+pydantic==2.13.5
+pydantic-settings==2.15.0
+pydantic_core==2.48.0
+Pygments==2.21.0
 PyJWT==2.13.0
 python-dateutil==2.9.0.post0
-python-dotenv==1.2.2
+python-dotenv==1.2.3
 python-multipart==0.0.32
 pytz==2026.3.post1
 PyYAML==6.0.3
@@ -142,26 +142,26 @@ setuptools==83.0.0
 shellingham==1.5.4
 six==1.17.0
 sniffio==1.3.1
-sse-starlette==3.4.6
-starlette==1.3.1
+sse-starlette==3.4.8
+starlette==1.6.0
 sympy==1.14.0
 tenacity==9.1.4
 threadpoolctl==3.6.0
-tiktoken==0.13.0
-tokenizers==0.22.2
+tiktoken==0.14.0
+tokenizers==0.23.1
 torch==2.13.0+cpu
-tqdm==4.69.1
-transformers==5.14.1
-typer==0.27.0
-typing-inspection==0.4.2
+tqdm==4.70.0
+transformers==5.16.1
+typer==0.27.2
+typing-inspection==0.4.4
 typing_extensions==4.16.0
 tzdata==2026.3
 urllib3==2.7.0
 uuid_utils==0.17.0
-uvicorn==0.39.0
+uvicorn==0.52.4
 uvloop==0.22.1
 watchfiles==1.2.0
 websockets==15.0.1
-wrapt==2.2.2
+wrapt==2.3.0
 xxhash==3.8.1
 zstandard==0.25.0

services/agent/requirements-rag.txt

@@ -5,5 +5,5 @@ psycopg[binary]>=3.2,<4
 sentence-transformers>=3.0,<6
 # Durable HITL checkpointer (QA·D). Lazily imported only when DATABASE_URL is set, so
 # CI's light test job (which omits this file) stays green on the InMemorySaver fallback.
-langgraph-checkpoint-postgres>=3.1,<4
+langgraph-checkpoint-postgres>=3.1.2,<4
 psycopg-pool>=3.3.1,<4

services/agent/requirements.txt

@@ -2,23 +2,23 @@
 # RAG deps (psycopg, pgvector, sentence-transformers) are added in Phase 10,
 # telemetry deps (pandas) in Phase 11.
 # fastapi >=0.137 allows Starlette 1.x, which the MCP SDK (Phase 3 · N) requires.
-fastapi>=0.140.0,<0.141
-uvicorn[standard]>=0.30,<0.40
-pydantic>=2.7,<3
-pydantic-settings>=2.3,<3
-python-dotenv>=1.2.2,<2
+fastapi>=0.141.1,<0.142
+uvicorn[standard]>=0.52.4,<0.53
+pydantic>=2.13.5,<3
+pydantic-settings>=2.15.0,<3
+python-dotenv>=1.2.3,<2
 
 # LangChain provider-agnostic layer
-langchain>=1.0,<2
-langchain-anthropic>=1.0,<2
-langchain-openai>=1.0,<2
-langchain-google-genai>=4.3.1,<5
+langchain>=1.3.18,<2
+langchain-anthropic>=1.7.0,<2
+langchain-openai>=1.6.0,<2
+langchain-google-genai>=4.3.7,<5
 
 # LangGraph application-assistant orchestration (Phase 3 · Workstream K).
-langgraph>=1.2.9,<2
+langgraph>=1.2.11,<2
 
 # Agent-as-MCP-client: load external MCP tools into the research agent (Phase 3 · N).
-langchain-mcp-adapters>=0.3,<1
+langchain-mcp-adapters>=0.3.2,<1
 
 # HTTP client for agent tools (web search)
 httpx>=0.28.1,<1
@@ -31,4 +31,4 @@ numpy>=1.26,<3
 azure-monitor-opentelemetry>=1.8.9,<2
 
 # LLM tracing/observability (Phase 1 LLMOps). No-op when unconfigured.
-langfuse>=4.14.1,<5
+langfuse>=4.15.1,<5