Pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
@atlaskit/pragmatic-drag-and-drop (source)	dependencies	pin	^1.7.7 → 1.8.1
@atlaskit/pragmatic-drag-and-drop-hitbox (source)	dependencies	pin	^1.1.0 → 1.1.0
@vite-pwa/assets-generator	devDependencies	pin	^1.0.2 → 1.0.2
alembic (changelog)	project.dependencies	pin	>=1.14.0 → ==1.18.4
asgi-correlation-id	project.dependencies	pin	>=4.3.4 → ==4.3.4
asyncpg	project.dependencies	pin	>=0.30.0 → ==0.31.0
cloudpickle	project.dependencies	pin	>=3.1.2 → ==3.1.2
fastapi (changelog)	project.dependencies	pin	>=0.135.3 → ==0.136.1
ghcr.io/kreuzberg-dev/kreuzberg		pinDigest	→ db5429b
httpx (changelog)	project.dependencies	pin	>=0.28.1 → ==0.28.1
langchain (changelog)	project.dependencies	pin	>=1.2.15 → ==1.2.17
langchain-core (changelog)	project.dependencies	pin	>=1.2.31 → ==1.3.3
langchain-mcp-adapters	project.dependencies	pin	>=0.2.2 → ==0.2.2
langchain-openai (changelog)	project.dependencies	pin	>=1.1.12 → ==1.2.1
langchain_community (changelog)	project.dependencies	pin	>=0.4.1 → ==0.4.1
langfuse	project.dependencies	pin	>=4.0.1 → ==4.5.1
langgraph (source, changelog)	project.dependencies	pin	>=1.1.6 → ==1.1.10
langsmith	project.dependencies	pin	>=0.7.31 → ==0.8.2
prismjs	dependencies	pin	>=1.30.0 → 1.30.0
psycopg2-binary (source, changelog)	project.dependencies	pin	>=2.9.10 → ==2.9.12
pydantic-settings (changelog)	project.dependencies	pin	>=2.8.1 → ==2.14.0
pydantic-settings (changelog)	project.dependencies	pin	>=2.10.1 → ==2.14.0
python (source)	requires-python	pin	>=3.10 → ==3.14.5
python (source)	requires-python	pin	>=3.13 → ==3.14.5
python-multipart (changelog)	project.dependencies	pin	>=0.0.5 → ==0.0.27
redis (changelog)	project.dependencies	pin	>=7.3.0 → ==7.4.0
rehype-external-links	dependencies	pin	^3.0.0 → 3.0.0
requests (changelog)	project.dependencies	pin	>=2.32.5 → ==2.33.1
sqlalchemy (changelog)	project.dependencies	pin	>=2.0.43 → ==2.0.49
sqlalchemy (changelog)	project.dependencies	pin	>=2.0.41 → ==2.0.49
truststore	project.dependencies	pin	>=0.10.4 → ==0.10.4
uvicorn (changelog)	project.dependencies	pin	>=0.44.0 → ==0.46.0
uvicorn (changelog)	project.dependencies	pin	>=0.35.0 → ==0.46.0
vite-plugin-pwa	devDependencies	pin	^1.3.0 → 1.3.0

⚠️ Renovate's pin functionality does not currently wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: mucgpt-assistant-service-migrations/uv.lock

Command failed: uv lock --upgrade-package alembic --upgrade-package asyncpg --upgrade-package psycopg2-binary --upgrade-package pydantic-settings --upgrade-package python --upgrade-package sqlalchemy
Downloading cpython-3.12.4-linux-x86_64-gnu (download) (21.2MiB)
 Downloaded cpython-3.12.4-linux-x86_64-gnu (download)
Using CPython 3.12.4
error: The Python request from `.python-version` resolved to Python 3.12.4, which is incompatible with the project's Python requirement: `==3.14.5` (from `project.requires-python`)
Use `uv python pin` to update the `.python-version` file to a compatible version

File name: mucgpt-assistant-service/uv.lock

Command failed: uv lock --upgrade-package asyncpg --upgrade-package psycopg2-binary --upgrade-package pydantic-settings --upgrade-package python --upgrade-package requests --upgrade-package sqlalchemy --upgrade-package uvicorn
Downloading cpython-3.13.13-linux-x86_64-gnu (download) (33.2MiB)
 Downloaded cpython-3.13.13-linux-x86_64-gnu (download)
Using CPython 3.13.13
error: The Python request from `.python-version` resolved to Python 3.13.13, which is incompatible with the project's Python requirement: `==3.14.5` (from `project.requires-python`)
Use `uv python pin` to update the `.python-version` file to a compatible version

File name: mucgpt-core-service/uv.lock

Command failed: uv lock --upgrade-package asgi-correlation-id --upgrade-package cloudpickle --upgrade-package fastapi --upgrade-package httpx --upgrade-package langchain --upgrade-package langchain-core --upgrade-package langchain-mcp-adapters --upgrade-package langchain-openai --upgrade-package langchain-community --upgrade-package langfuse --upgrade-package langgraph --upgrade-package langsmith --upgrade-package pydantic-settings --upgrade-package python --upgrade-package python-multipart --upgrade-package redis --upgrade-package truststore --upgrade-package uvicorn
Using CPython 3.13.13
error: The Python request from `.python-version` resolved to Python 3.13.13, which is incompatible with the project's Python requirement: `==3.14.5` (from `project.requires-python`)
Use `uv python pin` to update the `.python-version` file to a compatible version

File name: uv.lock

Command failed: uv lock --upgrade-package python
Using CPython 3.12.4
error: The Python request from `.python-version` resolved to Python 3.12.4, which is incompatible with the project's Python requirement: `==3.14.5` (from `project.requires-python`)
Use `uv python pin` to update the `.python-version` file to a compatible version

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}