fix(security): update transitive deps (17 vulns)

[git-steer]

Security: Force Dependency Resolution

This PR removes lock files to force fresh dependency resolution, picking up patched versions of transitive dependencies.

Affected Packages

• idna (medium) → fix: 3.15
• authlib (medium) → fix: 1.6.12
• urllib3 (high) → fix: 2.7.0
• mem0ai (low) → fix: 2.0.0b2
• python-multipart (high) → fix: 0.0.27
• python-dotenv (medium) → fix: 1.2.2
• authlib (medium) → fix: 1.6.11
• python-multipart (medium) → fix: 0.0.26
• pytest (medium) → fix: 9.0.3
• cryptography (medium) → fix: 46.0.7
• Pygments (low) → fix: 2.20.0
• cryptography (low) → fix: 46.0.6
• requests (medium) → fix: 2.33.0
• nltk (high) → fix: 3.9.4
• nltk (medium) → fix: 3.9.4
• PyJWT (high) → fix: 2.12.0

Lock Files Removed

• uv.lock

Summary

• Vulnerabilities addressed: 17
• Critical: 0 High: 5 Medium: 9 Low: 3

After Merge

Run npm install / uv sync / pip install -r requirements.txt to regenerate lock files.

---

Generated by git-steer automated remediation