fix(backend): patch dependabot alerts with lock bumps and floor raises

Clears 202 of the 224 open Dependabot alerts on surfsense_backend without
application code changes and without lifting a deliberate cap. Versions
are the lowest patched line, capped at releases at least 7 days old.

Manifest changes:
- chonkie[all] -> chonkie[all] minus its vector-store handshakes (chroma,
  qdrant, tpuf, pgvector, weaviate, pinecone, mongodb, elastic, milvus,
  datasets). The app only uses AutoEmbeddings, RecursiveChunker and
  CodeChunker. This drops chromadb, which has no patched release, and
  vecs, whose deprecated==1.2.* -> wrapt<2 pin blocked unstructured>=0.24.
- unstructured[all-docs] -> the same extras minus audio. From 0.24
  all-docs adds openai-whisper (sdist only); audio goes through litellm.
- Raised floors of direct deps to their patched versions: authlib, PyJWT,
  tornado, docling, pypdf, sentence-transformers, langgraph-checkpoint-
  postgres, mcp, unstructured, langchain, litellm, pillow, pytest.

Side effects in the lock: cryptography 50 needs langchain-litellm 0.7.2,
which needs langchain-core 1.6 (langchain 1.3.18, langgraph 1.2.12,
langgraph-sdk 0.4.5); unstructured 0.24 needs wrapt 2, which moves the
OpenTelemetry stack 1.40/0.61b0 -> 1.41.1/0.62b1, and caps pandas <3
(3.0.1 -> 2.3.3); docling 2.94 drops ocrmac/pyobjc (macOS only).
lxml-html-clean 0.4.4 -> 0.4.5 for GHSA-4jhm-jv67-739f (OSV, no alert).

Advisories cleared:
- accelerate 1.15.0: GHSA-4j2p-28q2-5m79
- aiohttp 3.14.3: GHSA-2fqr-mr3j-6wp8, GHSA-4fvr-rgm6-gqmc,
  GHSA-4m7w-qmgq-4wj5, GHSA-63hw-fmq6-xxg2, GHSA-9x8q-7h8h-wcw9,
  GHSA-cq5v-8q36-5273, GHSA-g3cq-j2xw-wf74, GHSA-hg6j-4rv6-33pg,
  GHSA-hpj7-wq8m-9hgp, GHSA-jg22-mg44-37j8, GHSA-m6qw-4cw2-hm4m,
  GHSA-mfx4-hv73-q22v, GHSA-mq44-7p77-q5h7, GHSA-xcgm-r5h9-7989
- anthropic 0.125.0: GHSA-q5f5-3gjm-7mfm, GHSA-w828-4qhx-vxx3
- anyio 4.14.2: GHSA-5p39-cfhj-2xmp, GHSA-82r6-8w77-94w6
- authlib 1.6.12: GHSA-jj8c-mmj3-mmgv, GHSA-r95x-qfjj-fjj2,
  GHSA-w8p2-r796-3vmq
- banks 2.4.5: GHSA-gphh-9q3h-jgpp, GHSA-x8wg-4xgc-vr54
- chromadb (removed): GHSA-2wm9-hf6c-p5cr, GHSA-36p7-vc44-83pf,
  GHSA-f4j7-r4q5-qw2c, GHSA-xph7-9rjv-w5fr
- cryptography 50.0.1: GHSA-537c-gmf6-5ccf, GHSA-g6cj-pr64-35w5,
  GHSA-jwv3-5hgf-82ww, GHSA-m2h6-j472-rp4c, GHSA-p423-j2cm-9vmq
- docling 2.94.0: GHSA-2j5p-7p5m-cvqr, GHSA-cjqg-rq2h-2fvj,
  GHSA-pj2v-ggqh-cmq2, GHSA-q29v-xc37-wh5m, GHSA-r3xg-rg9j-67fv
- docling-core 2.76.0: GHSA-j5xp-7m2f-49jv, GHSA-jmmv-h3mp-59v8
- h2 4.4.1: GHSA-6hr6-w5qg-qmwg
- hpack 4.2.0: GHSA-8v8h-hg4w-mvq2
- httplib2 0.32.0: GHSA-j5g9-f88f-gfj3
- idna 3.15: GHSA-65pc-fj4g-8rjx
- langchain 1.3.18, langchain-anthropic 1.4.8: GHSA-gr75-jv2w-4656
- langchain-classic 1.0.8: GHSA-3644-q5cj-c5c7
- langchain-core 1.6.4: GHSA-926x-3r5x-gfhw, GHSA-pjwx-r37v-7724
- langchain-text-splitters 1.1.2: GHSA-fv5p-p927-qmxr
- langgraph-checkpoint 4.1.1: GHSA-fjqc-hq36-qh5p
- langgraph-checkpoint-postgres 3.1.2: GHSA-47pj-3jcm-6whg
- langgraph-sdk 0.4.5: GHSA-w39p-vh2g-g8g5
- langsmith 0.8.18: GHSA-3644-q5cj-c5c7, GHSA-f4xh-w4cj-qxq8,
  GHSA-rr7j-v2q5-chgv
- litellm 1.88.6: GHSA-3cv6-jpf6-8222
- mako 1.3.12: GHSA-2h4p-vjrc-8xpq, GHSA-v92g-xgxw-vvmm
- mcp 1.30.0: GHSA-hvrp-rf83-w775, GHSA-jpw9-pfvf-9f58,
  GHSA-vj7q-gjh5-988w
- mistune 3.3.4: GHSA-2hm2-hc3v-44h9, GHSA-4j32-57v6-6g45,
  GHSA-58cw-g322-p94v, GHSA-6269-cqxg-mhhv, GHSA-8c25-4j27-2rv3,
  GHSA-8g87-j6q8-g93x, GHSA-8mp2-v27r-99xp, GHSA-8mpj-m6qm-5qr8,
  GHSA-c8j7-8cv4-2xmq, GHSA-ccfx-mfmx-2fx9, GHSA-ffq3-xpv3-j92q,
  GHSA-g97x-gvcm-x72h, GHSA-qcq2-496w-v96p, GHSA-qfrw-5rxm-mhh2,
  GHSA-r4rv-85jg-w4mf, GHSA-v87v-83h2-53w7
- nltk 3.10.3: GHSA-3gq4-3j92-5w49, GHSA-3gqm-fcw5-w839,
  GHSA-568f-pv23-39p4, GHSA-6hm5-jgcp-p838, GHSA-6hwm-xvph-95vm,
  GHSA-6ww7-3frv-cqxh, GHSA-8mpw-7fpc-4gqj, GHSA-97qj-x29f-37w7,
  GHSA-cv22-g7mw-8v73, GHSA-cw6x-m8jw-qmrh, GHSA-f794-5jv7-7672,
  GHSA-ff5c-cp5c-9wjf, GHSA-fg7f-2386-8897, GHSA-m42h-3232-vpv3,
  GHSA-m4rf-3fr8-xwx3, GHSA-p3m8-78j2-g5p3, GHSA-p4gq-832x-fm9v,
  GHSA-p4rw-rvv2-7xwr, GHSA-qvv7-cg9c-w4x3, GHSA-qx2g-xrx7-vfh8,
  GHSA-rhp5-r9x4-f5g2, GHSA-rrv8-h7p8-rx55, GHSA-vp2x-qp44-57v7,
  GHSA-w3v8-gmh9-3wv7, GHSA-ww6m-cw3f-q94g, GHSA-x5ph-mj9p-rfr8,
  GHSA-x99w-6fgc-pmfw, GHSA-xh95-f55m-82fw
- onnx 1.22.0: GHSA-538c-55jv-c5g9, GHSA-cmw6-hcpp-c6jp,
  GHSA-hqmj-h5c6-369m, GHSA-hwpq-hmq9-wj77, GHSA-p433-9wv8-28xj,
  GHSA-p893-rvq9-2xf9, GHSA-q56x-g2fj-4rj6
- pillow 12.3.0: GHSA-45hq-cxwh-f6vc, GHSA-4x4j-2g7c-83w6,
  GHSA-5x94-69rx-g8h2, GHSA-5xmw-vc9v-4wf2, GHSA-62p4-gmf7-7g93,
  GHSA-6r8x-57c9-28j4, GHSA-8v84-f9pq-wr9x, GHSA-9hw9-ch79-4vh6,
  GHSA-fj7v-r99m-22gq, GHSA-jjj6-mw9f-p565, GHSA-pg7v-jwj7-p798,
  GHSA-phj9-mv4w-65pm, GHSA-pwv6-vv43-88gr, GHSA-r73j-pqj5-w3x7,
  GHSA-vjc4-5qp5-m44j, GHSA-whj4-6x5x-4v2j, GHSA-wjx4-4jcj-g98j,
  GHSA-xj96-63gp-2gmr
- pyasn1 0.6.4: GHSA-8ppf-4f7h-5ppj, GHSA-hm4w-wwcw-mr6r,
  GHSA-m4p7-r5rc-7g4j
- pydantic-settings 2.14.2: GHSA-4xgf-cpjx-pc3j
- pygments 2.20.0: GHSA-5239-wwwm-4pmq
- pyjwt 2.15.0: GHSA-2gx3-rcp4-g85q, GHSA-42vr-xj54-vc7v,
  GHSA-993g-76c3-p5m4, GHSA-9v7f-9g4p-ffgj, GHSA-ffc3-869f-jxw9,
  GHSA-fhv5-28vv-h8m8, GHSA-gvp8-978c-rx2q, GHSA-hxm8-2xgr-2p9m,
  GHSA-jq35-7prp-9v3f, GHSA-jwrc-g2q2-pq5p, GHSA-p4g4-x82p-q773,
  GHSA-w6j9-cwv2-h6wq, GHSA-w7vc-732c-9m39, GHSA-xgmm-8j9v-c9wx
- pypdf 6.16.2: GHSA-23w6-3w8w-8484, GHSA-248m-82v9-q6g6,
  GHSA-3crg-w4f6-42mx, GHSA-4pxv-j86v-mhcw, GHSA-52x6-gq3r-vpf4,
  GHSA-55h5-xmcq-c37v, GHSA-5hgr-hg42-57jg, GHSA-5qjq-93h5-hrgp,
  GHSA-5xf7-4p34-54qr, GHSA-763m-79hh-57f2, GHSA-7gw9-cf7v-778f,
  GHSA-cj93-chg6-vgv8, GHSA-fc8x-2rww-xw9m, GHSA-fp3f-mc75-235c,
  GHSA-fwg2-594c-jp42, GHSA-g867-7843-wf8q, GHSA-g9xf-7f8q-9mcj,
  GHSA-j543-4vmf-qm7v, GHSA-jj6c-8h6c-hppx, GHSA-jm82-fx9c-mx94,
  GHSA-jp53-mhqp-8xcg, GHSA-m2v9-299j-rv96, GHSA-wjqc-6w8f-h24c,
  GHSA-x284-j5p8-9c5p
- pytest 9.0.3: GHSA-6w46-j5rx-g56g
- python-multipart 0.0.32: GHSA-5rvq-cxj2-64vf, GHSA-6jv3-5f52-599m,
  GHSA-mj87-hwqh-73pj, GHSA-pp6c-gr5w-3c5g, GHSA-v9pg-7xvm-68hf,
  GHSA-vffw-93wf-4j4q
- sentence-transformers 5.6.1: GHSA-jhr6-gm9c-rqjv
- soupsieve 2.9.2: GHSA-2wc2-fm75-p42x, GHSA-836r-79rf-4m37,
  GHSA-gjv8-xp57-g29c, GHSA-j934-xhv5-fg8f
- tornado 6.5.10: GHSA-3hv7-mjh2-fv65, GHSA-3x9g-8vmp-wqvf,
  GHSA-8423-8fgw-73vq, GHSA-c2m8-h5v5-343r, GHSA-chx6-46f5-w4vp,
  GHSA-cx3h-4qpv-8hc9, GHSA-mgf9-4vpg-hj56, GHSA-mpf4-983q-p7j4,
  GHSA-pw6j-qg29-8w7f, GHSA-wwv5-g3v4-889x
- unstructured 0.24.1: GHSA-4mvj-m6j5-pmf7
- urllib3 2.8.0: GHSA-8988-9cw3-xx77, GHSA-gh4c-6fx4-qh6g,
  GHSA-mf9v-mfxr-j63j, GHSA-qccp-gfcp-xxvc, GHSA-vxq7-64xx-v4gw

Deferred:
- starlette (10 alerts incl. pyproject.toml) and pyarrow (2): need the
  deliberate <0.51.0 / <19.0.0 caps lifted; done in a follow-up branch.
- torch (GHSA-rrmf-rvhw-rf47) and setuptools (GHSA-h35f-9h28-mq5c):
  torch==2.11.0 pins setuptools<82; needs the torch/torchvision pin bump.
- transformers (5 alerts): needs the 4.x -> 5.x major.
- oauthlib (GHSA-hj66-6f7g-4r5v, GHSA-xpv3-w29h-x7cv): the only fix,
  4.0.0, is a major published 2026-09-28; wait out the 7-day window.
- nltk GHSA-8mgp-746c-j5xp: affects <=3.10.3, the latest release.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

surfsense_backend/pyproject.toml

@@ -6,13 +6,13 @@ requires-python = ">=3.12"
 dependencies = [
     "alembic>=1.13.0",
     "asyncpg>=0.30.0",
-    "authlib>=1.6.9",
-    "PyJWT>=2.12.0",
-    "tornado>=6.5.5",
+    "authlib>=1.6.12",
+    "PyJWT>=2.15.0",
+    "tornado>=6.5.9",
     "datasets>=2.21.0",
     "pyarrow>=15.0.0,<19.0.0",
     "discord-py>=2.5.2",
-    "docling>=2.15.0",
+    "docling>=2.94.0",
     "fastapi>=0.115.8",
     "github3.py==4.0.1",
     "google-api-python-client>=2.156.0",
@@ -24,10 +24,10 @@ dependencies = [
     "notion-client>=2.3.0",
     "numpy>=1.24.0",
     "pgvector>=0.3.6",
-    "pypdf>=5.1.0",
+    "pypdf>=6.16.1",
     "python-ffmpeg>=2.0.12",
     "rerankers[flashrank]>=0.7.1",
-    "sentence-transformers>=3.4.1",
+    "sentence-transformers>=5.6.0",
     "slack-sdk>=3.34.0",
     "soundfile>=0.13.1",
     "spacy>=3.8.7",
@@ -45,15 +45,19 @@ dependencies = [
     "fake-useragent>=2.2.0",
     "trafilatura>=2.0.0",
     "fastapi-users[oauth,sqlalchemy]>=15.0.3",
-    "chonkie[all]>=1.5.0",
-    "langgraph-checkpoint-postgres>=3.0.2",
+    # chonkie[all] minus the vector-store handshakes we never call; they pulled in
+    # chromadb (no patched release) and vecs, whose wrapt<2 pin blocks unstructured>=0.24.
+    "chonkie[hub,viz,tokenizers,tiktoken,code,neural,model2vec,st,openai,semantic,gemini,azure-openai,groq,cerebras,voyageai,cohere,jina,catsu,litellm,genie,table]>=1.5.0",
+    "langgraph-checkpoint-postgres>=3.1.1",
     "psycopg[binary,pool]>=3.3.2",
-    "mcp>=1.25.0",
+    "mcp>=1.28.1",
     "starlette>=0.40.0,<0.51.0",
     "sse-starlette>=3.1.1,<3.1.2",
     "gitingest>=0.3.1",
     "composio>=0.10.9",
-    "unstructured[all-docs]>=0.18.31",
+    # all-docs minus audio: from 0.24 all-docs adds openai-whisper, and audio is
+    # transcribed through litellm, not unstructured.
+    "unstructured[csv,doc,docx,epub,image,md,odt,org,pdf,ppt,pptx,rst,rtf,tsv,xlsx]>=0.24.0",
     "unstructured-client>=0.42.3",
     "langchain-unstructured>=1.0.1",
     "slowapi>=0.1.9",
@@ -63,12 +67,12 @@ dependencies = [
     "pypandoc>=1.16.2",
     "notion-markdown>=0.7.0",
     "fractional-indexing>=0.1.3",
-    "langchain>=1.2.13",
+    "langchain>=1.3.9",
     "langgraph>=1.1.3",
     "langchain-community>=0.4.1",
     "stripe>=15.0.0",
     "azure-ai-documentintelligence>=1.0.2",
-    "litellm>=1.83.7",
+    "litellm>=1.88.6",
     "langchain-litellm>=0.6.4",
     "deepagents>=0.4.12,<0.5",
     "opentelemetry-api>=1.40.0",
@@ -89,7 +93,7 @@ dependencies = [
     "dulwich>=0.22.0",
     "opensandbox==0.1.15",
     "opensandbox-code-interpreter==0.1.2",
-    "pillow>=12.1.1",
+    "pillow>=12.3.0",
     "disposable-email-domains>=0.0.271",
 ]
 
@@ -101,7 +105,7 @@ cu128 = ["torch==2.11.0", "torchvision==0.26.0"]
 [dependency-groups]
 dev = [
     "ruff>=0.12.5",
-    "pytest>=9.0.2",
+    "pytest>=9.0.3",
     "pytest-asyncio>=1.3.0",
     "pytest-mock>=3.14",
     "httpx>=0.28.1",