fix(deps): update fsspec and multidict for security fixes (#531)

Author: arekay-nv

pyproject.toml

@@ -23,7 +23,14 @@ conflicts = [
 # via transformers -> typer; 8.3.2 carries PYSEC-2026-2132 (fixed in 8.3.3).
 # setuptools is pulled in via pbr/torch; 82.0.1 carries PYSEC-2026-3447 (fixed
 # in 83.0.0).
-constraint-dependencies = ["click>=8.3.3", "setuptools>=83.0.0"]
+# fsspec (datasets) and multidict (aiohttp) require fixes for CVE-2026-104851
+# and CVE-2026-104874, respectively.
+constraint-dependencies = [
+    "click>=8.3.3",
+    "setuptools>=83.0.0",
+    "fsspec>=2026.6.0",
+    "multidict>=6.9.1",
+]
 
 [tool.uv.build-backend]
 module-root = "src"