build(deps): bump the python group across 9 directories with 9 updates

requirements-dev.txt

@@ -2,25 +2,25 @@
 # Les tests tournent hors Docker : les imports lourds optionnels (xgboost,
 # codecarbon, openstacksdk) sont volontairement absents — les services ont des
 # fallbacks lazy que les tests de caractérisation figent explicitement.
-fastapi>=0.128.8
-uvicorn[standard]>=0.39.0
+fastapi>=0.138.1
+uvicorn[standard]>=0.49.0
 httpx>=0.28.1
 pydantic>=2.13.4
 python-multipart>=0.0.32
 pyyaml>=6.0.3
-redis>=7.0.1
+redis>=8.0.1
 jinja2>=3.1.6
-numpy>=2.0.2
+numpy>=2.2.6
 tiktoken>=0.13.0
 
 # Security floors for transitive deps flagged by pip-audit, pinned to patched
 # versions (resolution verified compatible with fastapi/uvicorn/tiktoken).
 # Note: starlette>=1.3.1 implies fastapi>=0.137.1 (first release to drop the
-# starlette upper-bound) — which is what fastapi>=0.128.8 already resolves to.
+# starlette upper-bound) — which is what fastapi>=0.138.1 already resolves to.
 starlette>=1.3.1
 python-dotenv>=1.2.2
-requests>=2.33.0
+requests>=2.34.2
 urllib3>=2.7.0
 
-pytest>=9.0.3
-pytest-asyncio>=1.2.0
+pytest>=9.1.1
+pytest-asyncio>=1.4.0

services/api/requirements.txt

@@ -1,4 +1,4 @@
-fastapi>=0.137.1
+fastapi>=0.138.1
 uvicorn[standard]>=0.49.0
 # Security floors (pip-audit): patched transitive deps of fastapi/uvicorn.
 starlette>=1.3.1

services/fake_portal/requirements.txt

@@ -1,4 +1,4 @@
-fastapi>=0.137.1
+fastapi>=0.138.1
 uvicorn[standard]>=0.49.0
 httpx>=0.28.1
 pydantic>=2.13.4

services/ghost_shell/requirements.txt

@@ -1,10 +1,10 @@
-fastapi>=0.137.1
+fastapi>=0.138.1
 uvicorn[standard]>=0.49.0
 # Security floors (pip-audit): patched transitive deps of fastapi/uvicorn.
 starlette>=1.3.1
 python-dotenv>=1.2.2
 pydantic>=2.13.4
 httpx>=0.28.1
 pyyaml>=6.0.3
-redis>=8.0.0
+redis>=8.0.1
 jinja2>=3.1.6

services/mcp_server/requirements.txt

@@ -1,13 +1,13 @@
-fastapi>=0.137.1
+fastapi>=0.138.1
 uvicorn[standard]>=0.49.0
 # Security floors (pip-audit): patched transitive deps of fastapi/uvicorn.
 starlette>=1.3.1
 python-dotenv>=1.2.2
 pydantic>=2.13.4
 httpx>=0.28.1
-redis>=8.0.0          # REROUTE_BACKEND=redis (cloud-free inline-proxy backend)
+redis>=8.0.1          # REROUTE_BACKEND=redis (cloud-free inline-proxy backend)
 
 # OPTIONAL — only needed for a real OVH/OpenStack reroute (REROUTE_BACKEND=octavia).
 # The default mock backend (REROUTE_BACKEND=mock) does not import these.
 ovh>=1.2
-openstacksdk>=4.16.0
+openstacksdk>=4.17.0

services/mirage_metrics/requirements.txt

@@ -1,4 +1,4 @@
-fastapi>=0.137.1
+fastapi>=0.138.1
 uvicorn[standard]>=0.49.0
 # Security floors (pip-audit): patched transitive deps of fastapi/uvicorn.
 starlette>=1.3.1

services/orchestrator/requirements.txt

@@ -1,8 +1,8 @@
-fastapi>=0.137.1
+fastapi>=0.138.1
 uvicorn[standard]>=0.49.0
 # Security floors (pip-audit): patched transitive deps of fastapi/uvicorn.
 starlette>=1.3.1
 python-dotenv>=1.2.2
 httpx>=0.28.1
 pydantic>=2.13.4
-redis>=8.0.0          # ORCHESTRATOR_STATE_BACKEND=redis (shared, crash-safe engagement state)
+redis>=8.0.1          # ORCHESTRATOR_STATE_BACKEND=redis (shared, crash-safe engagement state)

services/sentinel/requirements.txt

@@ -1,11 +1,11 @@
-fastapi>=0.137.1
+fastapi>=0.138.1
 uvicorn[standard]>=0.49.0
 # Security floors (pip-audit): patched transitive deps of fastapi/uvicorn.
 starlette>=1.3.1
 python-dotenv>=1.2.2
 httpx>=0.28.1
 pydantic>=2.13.4
 pyyaml>=6.0.3
-redis>=8.0.0
-numpy>=2.4.6
-xgboost>=3.2.0
+redis>=8.0.1
+numpy>=2.5.0
+xgboost>=3.3.0