From 0ae5556e88725d201ff251108d3bd31817b8db03 Mon Sep 17 00:00:00 2001
From: Patrick Michalina <pmichalina@groq.com>
Date: Mon, 10 Aug 2026 15:38:51 -0500
Subject: [PATCH] chore(deps): update lock files to fix known vulnerabilities

Updates the pinned versions with published security advisories:

- aiohttp 3.13.3 -> 3.14.3 (multiple advisories, e.g. GHSA-2fqr-mr3j-6wp8)
- filelock 3.19.1 -> 3.32.2 (GHSA-qmgc-5h2g-mvrw, GHSA-w853-jp5j-5j7f)
- idna 3.11 -> 3.18 (GHSA-65pc-fj4g-8rjx)
- pygments 2.19.2 -> 2.20.0 (GHSA-5239-wwwm-4pmq)
- pytest 8.4.2 -> 9.1.1 (GHSA-6w46-j5rx-g56g)
- pytest-asyncio 1.2.0 -> 1.4.0 (required by pytest 9)

All other pins are unchanged. pydantic stays at 2.12.5 because
pydantic 2.13 adds a model_dump parameter that the generated
model overrides do not accept yet (pyright failure).

OSV scan of the updated lock file reports zero known
vulnerabilities across all 59 pins.
---
 requirements-dev.lock | 13 +++++++------
 requirements.lock     |  5 +++--
 2 files changed, 10 insertions(+), 8 deletions(-)

diff --git a/requirements-dev.lock b/requirements-dev.lock
index 19201a0..c0c9353 100644
--- a/requirements-dev.lock
+++ b/requirements-dev.lock
@@ -12,7 +12,7 @@
 -e file:.
 aiohappyeyeballs==2.6.1
     # via aiohttp
-aiohttp==3.13.3
+aiohttp==3.14.3
     # via groq
     # via httpx-aiohttp
 aiosignal==1.4.0
@@ -48,7 +48,7 @@ exceptiongroup==1.3.1
     # via pytest
 execnet==2.1.2
     # via pytest-xdist
-filelock==3.19.1
+filelock==3.32.2
     # via virtualenv
 frozenlist==1.8.0
     # via aiohttp
@@ -65,7 +65,7 @@ httpx-aiohttp==0.1.12
     # via groq
 humanize==4.13.0
     # via nox
-idna==3.11
+idna==3.18
     # via anyio
     # via httpx
     # via yarl
@@ -102,14 +102,14 @@ pydantic==2.12.5
     # via groq
 pydantic-core==2.41.5
     # via pydantic
-pygments==2.19.2
+pygments==2.20.0
     # via pytest
     # via rich
 pyright==1.1.399
-pytest==8.4.2
+pytest==9.1.1
     # via pytest-asyncio
     # via pytest-xdist
-pytest-asyncio==1.2.0
+pytest-asyncio==1.4.0
 pytest-xdist==3.8.0
 python-dateutil==2.9.0.post0
     # via time-machine
@@ -127,6 +127,7 @@ tomli==2.4.0
     # via nox
     # via pytest
 typing-extensions==4.15.0
+    # via aiohttp
     # via aiosignal
     # via anyio
     # via exceptiongroup
diff --git a/requirements.lock b/requirements.lock
index 04d57c2..2847bbb 100644
--- a/requirements.lock
+++ b/requirements.lock
@@ -12,7 +12,7 @@
 -e file:.
 aiohappyeyeballs==2.6.1
     # via aiohttp
-aiohttp==3.13.3
+aiohttp==3.14.3
     # via groq
     # via httpx-aiohttp
 aiosignal==1.4.0
@@ -45,7 +45,7 @@ httpx==0.28.1
     # via httpx-aiohttp
 httpx-aiohttp==0.1.12
     # via groq
-idna==3.11
+idna==3.18
     # via anyio
     # via httpx
     # via yarl
@@ -62,6 +62,7 @@ pydantic-core==2.41.5
 sniffio==1.3.1
     # via groq
 typing-extensions==4.15.0
+    # via aiohttp
     # via aiosignal
     # via anyio
     # via exceptiongroup