bump versions

[andreashappe]

No description provided.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 3 package(s) with unknown licenses.

See the Details below.

License Issues

pyproject.toml

Package	Version	License	Issue Type
Mako		Null	Unknown License
PyYAML		Null	Unknown License
pypsexec		Null	Unknown License

OpenSSF Scorecard

Scorecard details

Package	Version	Score	Details
pip/Mako		Unknown	Unknown
pip/PyYAML		Unknown	Unknown
pip/pypsexec		Unknown	Unknown
pip/charset-normalizer	3.5.1	Unknown	Unknown
pip/fabric	3.2.3	Unknown	Unknown
pip/filelock	3.32.3	Unknown	Unknown
pip/greenlet	3.5.5	Unknown	Unknown
pip/huggingface-hub	1.28.0	🟢 6.8	Details Check Score Reason Code-Review 🟢 6 Found 16/24 approved changesets -- score normalized to 6 Security-Policy 🟢 10 security policy file detected Maintained 🟢 10 30 commit(s) and 15 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies 🟢 5 dependency not pinned by hash detected -- score normalized to 5 License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Signed-Releases ⚠️ -1 no releases found Packaging 🟢 10 packaging workflow detected SAST 🟢 6 SAST tool is not run on all commits -- score normalized to 6
pip/idna	3.19	Unknown	Unknown
pip/importlib-metadata	8.9.0	Unknown	Unknown
pip/invoke	2.2.1	Unknown	Unknown
pip/kubernetes	36.0.3	🟢 6.2	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10 Code-Review 🟢 10 all changesets reviewed Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy 🟢 10 security policy file detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Binary-Artifacts 🟢 10 no binaries found in the repo Fuzzing ⚠️ 0 project is not fuzzed Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0
pip/langchain-core	1.6.0	Unknown	Unknown
pip/langchain-openai	1.6.0	Unknown	Unknown
pip/langsmith	0.11.1	Unknown	Unknown
pip/litellm	1.97.0	Unknown	Unknown
pip/mako	1.4.1	Unknown	Unknown
pip/onnxruntime	1.29.0	Unknown	Unknown
pip/openai	2.54.0	Unknown	Unknown
pip/orjson	3.12.0	Unknown	Unknown
pip/protobuf	7.36.0	Unknown	Unknown
pip/pydantic	2.13.4	Unknown	Unknown
pip/pydantic-core	2.46.4	🟢 6.6	Details Check Score Reason Code-Review 🟢 3 Found 11/29 approved changesets -- score normalized to 3 Maintained 🟢 10 30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions License 🟢 10 license file detected Binary-Artifacts 🟢 10 no binaries found in the repo Branch-Protection 🟢 3 branch protection is not maximal on development and all release branches Fuzzing 🟢 10 project is fuzzed Pinned-Dependencies 🟢 8 dependency not pinned by hash detected -- score normalized to 8 Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 10 security policy file detected Packaging 🟢 10 packaging workflow detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
pip/pygments	2.21.0	Unknown	Unknown
pip/python-dotenv	1.2.3	Unknown	Unknown
pip/pyyaml	6.0.3	Unknown	Unknown
pip/requests	2.34.2	Unknown	Unknown
pip/rich	15.0.0	Unknown	Unknown
pip/ruff	0.16.4	Unknown	Unknown
pip/sqlalchemy	2.0.52	Unknown	Unknown
pip/tiktoken	0.14.0	Unknown	Unknown
pip/typer	0.27.1	Unknown	Unknown
pip/typing-inspection	0.4.4	Unknown	Unknown
pip/uvicorn	0.52.4	Unknown	Unknown
pip/websockets	17.0.1	Unknown	Unknown
pip/xxhash	4.0.1	🟢 4.2	Details Check Score Reason Binary-Artifacts 🟢 10 no binaries found in the repo Code-Review ⚠️ 0 Found 0/15 approved changesets -- score normalized to 0 Maintained 🟢 10 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies 🟢 7 dependency not pinned by hash detected -- score normalized to 7 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Packaging 🟢 10 packaging workflow detected

Scanned Files

• pyproject.toml
• uv.lock