From 7004292241a4557aaf84b8661ee9bc1367c06471 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 14 Mar 2026 04:48:43 +0000
Subject: [PATCH] build(deps): bump the pip group across 1 directory with 6
 updates

Bumps the pip group with 6 updates in the /api directory:

| Package | From | To |
| --- | --- | --- |
| [flask-cors](https://github.com/corydolphin/flask-cors) | `3.0.10` | `6.0.0` |
| [langchain](https://github.com/langchain-ai/langchain) | `0.0.250` | `0.2.5` |
| [pycryptodome](https://github.com/Legrandin/pycryptodome) | `3.17` | `3.19.1` |
| [authlib](https://github.com/authlib/authlib) | `1.2.0` | `1.6.7` |
| [scikit-learn](https://github.com/scikit-learn/scikit-learn) | `1.2.2` | `1.5.0` |
| [werkzeug](https://github.com/pallets/werkzeug) | `2.3.7` | `3.1.6` |



Updates `flask-cors` from 3.0.10 to 6.0.0
- [Release notes](https://github.com/corydolphin/flask-cors/releases)
- [Changelog](https://github.com/corydolphin/flask-cors/blob/main/CHANGELOG.md)
- [Commits](https://github.com/corydolphin/flask-cors/compare/3.0.10...6.0.0)

Updates `langchain` from 0.0.250 to 0.2.5
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](https://github.com/langchain-ai/langchain/compare/v0.0.250...langchain==0.2.5)

Updates `pycryptodome` from 3.17 to 3.19.1
- [Release notes](https://github.com/Legrandin/pycryptodome/releases)
- [Changelog](https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst)
- [Commits](https://github.com/Legrandin/pycryptodome/compare/v3.17.0...v3.19.1)

Updates `authlib` from 1.2.0 to 1.6.7
- [Release notes](https://github.com/authlib/authlib/releases)
- [Changelog](https://github.com/authlib/authlib/blob/main/docs/changelog.rst)
- [Commits](https://github.com/authlib/authlib/compare/v1.2.0...v1.6.7)

Updates `scikit-learn` from 1.2.2 to 1.5.0
- [Release notes](https://github.com/scikit-learn/scikit-learn/releases)
- [Commits](https://github.com/scikit-learn/scikit-learn/compare/1.2.2...1.5.0)

Updates `werkzeug` from 2.3.7 to 3.1.6
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/werkzeug/compare/2.3.7...3.1.6)

---
updated-dependencies:
- dependency-name: flask-cors
  dependency-version: 6.0.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain
  dependency-version: 0.2.5
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pycryptodome
  dependency-version: 3.19.1
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: authlib
  dependency-version: 1.6.7
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: scikit-learn
  dependency-version: 1.5.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: werkzeug
  dependency-version: 3.1.6
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 api/requirements.txt | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/api/requirements.txt b/api/requirements.txt
index 8c873f6113b778..629bdef691dd25 100644
--- a/api/requirements.txt
+++ b/api/requirements.txt
@@ -1,31 +1,31 @@
 coverage~=7.2.4
 beautifulsoup4==4.12.2
-flask~=2.3.2
+flask~=3.1.3
 Flask-SQLAlchemy~=3.0.3
 SQLAlchemy~=1.4.28
 flask-login==0.6.2
 flask-migrate~=4.0.4
 flask-restful==0.3.9
 flask-session2==1.3.1
-flask-cors==3.0.10
-gunicorn~=21.2.0
-gevent~=22.10.2
-langchain==0.0.250
+flask-cors==6.0.0
+gunicorn~=25.1.0
+gevent~=25.9.1
+langchain==0.2.5
 openai~=0.28.0
 psycopg2-binary~=2.9.6
-pycryptodome==3.17
+pycryptodome==3.19.1
 python-dotenv==1.0.0
 pytest~=7.3.1
 pytest-mock~=3.11.1
 tiktoken==0.3.3
-Authlib==1.2.0
+Authlib==1.6.7
 boto3==1.28.17
 tenacity==8.2.2
 cachetools~=5.3.0
 weaviate-client~=3.21.0
 qdrant_client~=1.1.6
 mailchimp-transactional~=1.0.50
-scikit-learn==1.2.2
+scikit-learn==1.5.0
 sentry-sdk[flask]~=1.21.1
 jieba==0.42.1
 celery==5.2.7
@@ -46,11 +46,11 @@ replicate~=0.9.0
 websocket-client~=1.6.1
 dashscope~=1.11.0
 huggingface_hub~=0.16.4
-transformers~=4.31.0
+transformers~=5.3.0
 stripe~=5.5.0
 pandas==1.5.3
 xinference-client~=0.1.2
 safetensors==0.3.2
 zhipuai==1.0.7
-werkzeug==2.3.7
+werkzeug==3.1.6
 pymilvus==2.3.0
\ No newline at end of file