chore(deps): bump the python-minor-patch group across 1 directory with 11 updates

apps/api/pyproject.toml

@@ -38,7 +38,7 @@ dependencies = [
     # Adaptive Orchestration — the provider-agnostic tier -> model router
     # (ao-settings-api's routing-preview resolves a concrete model through it).
     "forge-agent",
-    "fastapi>=0.139.0",
+    "fastapi>=0.141.1",
     "uvicorn[standard]>=0.51.0",
     "pydantic-settings>=2.2",
     "sqlalchemy>=2.0",

apps/mcp-gateway/pyproject.toml

@@ -11,7 +11,7 @@ dependencies = [
     "forge-mcp",
     # F38 — metrics facade (forge_mcp_* emission) + telemetry init.
     "forge-obs",
-    "fastapi>=0.139.0",
+    "fastapi>=0.141.1",
     "uvicorn[standard]>=0.51.0",
 ]
 

apps/worker/pyproject.toml

@@ -24,7 +24,7 @@ dependencies = [
     # F31 — deployment gates: drive promotions/health/rollback on the worker.
     "forge-deploy",
     "celery>=5.3",
-    "redis>=5.0",
+    "redis>=8.1.0",
     "forge-approval",
     # F41 — Self-Eval Gate: mint hidden regression cases into private suites and
     # re-freeze their manifests (forge_eval.mint + benchmark.manifest.freeze);

packages/agent-runtime/pyproject.toml

@@ -9,7 +9,7 @@ authors = [{ name = "The Forge Authors" }]
 dependencies = [
     "forge-contracts",
     "forge-orchestration-policy",
-    "langgraph>=1.2.9,<2",
+    "langgraph>=1.2.10,<2",
     "docker>=7.2.0,<8",
     "forge-policy",
 ]

packages/db/pyproject.toml

@@ -9,7 +9,7 @@ authors = [{ name = "The Forge Authors" }]
 dependencies = [
     "forge-contracts",
     "sqlalchemy>=2.0",
-    "alembic>=1.13",
+    "alembic>=1.19.0",
     "pgvector>=0.5.0",
     "psycopg[binary]>=3.3.4",
 ]

packages/evaluation/pyproject.toml

@@ -19,7 +19,7 @@ dependencies = [
 # The learned local embedder for the honest real-corpus eval (HARD-04). Optional
 # so the base package and default test suite never require torch. uv lock owned
 # by HARD-14.
-eval = ["sentence-transformers>=3.0"]
+eval = ["sentence-transformers>=5.6.1"]
 
 [project.scripts]
 # HARD-12: the automated RELEASE_READINESS meta-gate. Runs/inspects every spec

packages/workflow-engine/pyproject.toml

@@ -13,7 +13,7 @@ dependencies = [
     "pyyaml>=6.0",
     # F25 — Temporal durable workflow engine (V2). Pinned exactly: the Workflow
     # Update API + time-skipping WorkflowEnvironment are version-sensitive.
-    "temporalio==1.30.0",
+    "temporalio==1.31.0",
     # F25 — RedactingEncryptionCodec AES-GCM encryption of Temporal payloads.
     "cryptography>=43",
 ]

pyproject.toml

@@ -37,20 +37,20 @@ dev = [
     "pytest>=8.0",
     "pytest-asyncio>=0.23",
     "pytest-cov>=5.0",
-    "ruff>=0.15.21",
-    "mypy>=2.2.0",
+    "ruff>=0.16.1",
+    "mypy>=2.3.0",
     "httpx>=0.27",
     # Validates the Helm chart values files against deploy/helm/forge/values.schema.json (F24).
     "jsonschema>=4.0",
     "pyyaml>=6.0",
     "bandit>=1.9.4",
     "pip-audit>=2.10.1",
-    "cyclonedx-bom>=7.3.0",
-    "semgrep>=1.169.0",
+    "cyclonedx-bom>=7.3.1",
+    "semgrep>=1.172.0",
     # HARD-12: single-source-of-truth versioning + conventional-commit lint +
     # SemVer bump + CHANGELOG generation. `uv run cz …` works with no global
     # install. Drives `make bump` / `make changelog` / the CI commit-lint step.
-    "commitizen>=3.29",
+    "commitizen>=4.17.0",
 ]
 
 # The workspace root is a virtual project: its dependencies (every member) are