Fix Dependabot alerts for llama-vision

comps/lvms/src/requirements-cpu.txt

@@ -50,7 +50,7 @@ colorlog==6.10.1
     # via trimesh
 cryptography==46.0.3
     # via pyjwt
-datasets==4.4.1
+datasets==4.4.2
     # via -r ./comps/lvms/src/requirements.in
 diffusers==0.34.0
     # via optimum-habana
@@ -64,9 +64,9 @@ docarray==0.41.0
     # via -r ./comps/lvms/src/requirements.in
 embreex==2.17.7.post7 ; platform_machine == 'x86_64'
     # via trimesh
-fastapi==0.124.4
+fastapi==0.128.0
     # via -r ./comps/lvms/src/requirements.in
-filelock==3.20.0
+filelock==3.20.1
     # via
     #   datasets
     #   diffusers
@@ -120,17 +120,17 @@ idna==3.11
     #   httpx
     #   requests
     #   yarl
-importlib-metadata==8.7.0
+importlib-metadata==8.7.1
     # via
     #   diffusers
     #   opentelemetry-api
-jax==0.8.1
+jax==0.8.2
     # via docarray
-jaxlib==0.8.1
+jaxlib==0.8.2
     # via jax
 jiter==0.12.0
     # via openai
-joblib==1.5.2
+joblib==1.5.3
     # via scikit-learn
 jsonpatch==1.33
     # via langchain-core
@@ -142,9 +142,9 @@ jsonschema==4.25.1
     #   trimesh
 jsonschema-specifications==2025.9.1
     # via jsonschema
-langchain-core==1.2.0
+langchain-core==1.2.5
     # via -r ./comps/lvms/src/requirements.in
-langsmith==0.4.59
+langsmith==0.5.1
     # via langchain-core
 lxml==6.0.2
     # via trimesh
@@ -158,7 +158,7 @@ markdown-it-py==4.0.0
     # via rich
 markupsafe==3.0.3
     # via jinja2
-mcp==1.24.0
+mcp==1.25.0
     # via -r ./comps/lvms/src/requirements.in
 mdurl==0.1.2
     # via markdown-it-py
@@ -179,7 +179,7 @@ mypy-extensions==1.1.0
 networkx==3.6.1
     # via
     #   trimesh
-numpy==2.3.5
+numpy==2.4.0
     # via
     #   accelerate
     #   datasets
@@ -200,7 +200,7 @@ numpy==2.3.5
     #   transformers
     #   trimesh
     #   vhacdx
-openai==2.11.0
+openai==2.14.0
     # via -r ./comps/lvms/src/requirements.in
 opentelemetry-api==1.39.1
     # via
@@ -233,7 +233,7 @@ opentelemetry-semantic-conventions==0.60b1
     # via opentelemetry-sdk
 opt-einsum==3.4.0
     # via jax
-optimum==2.0.0
+optimum==2.1.0
     # via
     #   -r ./comps/lvms/src/requirements.in
     #   optimum-habana
@@ -276,7 +276,7 @@ protobuf==6.33.2
     #   docarray
     #   googleapis-common-protos
     #   opentelemetry-proto
-psutil==7.1.3
+psutil==7.2.1
     # via accelerate
 pyarrow==22.0.0
     # via datasets
@@ -312,7 +312,7 @@ python-dateutil==2.9.0.post0
     #   pycollada
 python-dotenv==1.2.1
     # via pydantic-settings
-python-multipart==0.0.20
+python-multipart==0.0.21
     # via mcp
 pytz==2025.2
     # via pandas
@@ -378,7 +378,7 @@ six==1.17.0
     # via python-dateutil
 sniffio==1.3.1
     # via openai
-sse-starlette==3.0.4
+sse-starlette==3.1.1
     # via mcp
 starlette==0.50.0
     # via
@@ -451,7 +451,7 @@ uuid-utils==0.12.0
     # via
     #   langchain-core
     #   langsmith
-uvicorn==0.38.0
+uvicorn==0.40.0
     # via
     #   -r ./comps/lvms/src/requirements.in
     #   mcp

comps/lvms/src/requirements-gpu.txt

@@ -50,7 +50,7 @@ colorlog==6.10.1
     # via trimesh
 cryptography==46.0.3
     # via pyjwt
-datasets==4.4.1
+datasets==4.4.2
     # via -r ./comps/lvms/src/requirements.in
 diffusers==0.34.0
     # via optimum-habana
@@ -64,9 +64,9 @@ docarray==0.41.0
     # via -r ./comps/lvms/src/requirements.in
 embreex==2.17.7.post7 ; platform_machine == 'x86_64'
     # via trimesh
-fastapi==0.124.4
+fastapi==0.128.0
     # via -r ./comps/lvms/src/requirements.in
-filelock==3.20.0
+filelock==3.20.1
     # via
     #   datasets
     #   diffusers
@@ -122,19 +122,19 @@ idna==3.11
     #   httpx
     #   requests
     #   yarl
-importlib-metadata==8.7.0
+importlib-metadata==8.7.1
     # via
     #   diffusers
     #   opentelemetry-api
-jax==0.8.1
+jax==0.8.2
     # via docarray
-jaxlib==0.8.1
+jaxlib==0.8.2
     # via jax
 jinja2==3.1.6
     # via torch
 jiter==0.12.0
     # via openai
-joblib==1.5.2
+joblib==1.5.3
     # via scikit-learn
 jsonpatch==1.33
     # via langchain-core
@@ -146,9 +146,9 @@ jsonschema==4.25.1
     #   trimesh
 jsonschema-specifications==2025.9.1
     # via jsonschema
-langchain-core==1.2.0
+langchain-core==1.2.5
     # via -r ./comps/lvms/src/requirements.in
-langsmith==0.4.59
+langsmith==0.5.1
     # via langchain-core
 lxml==6.0.2
     # via trimesh
@@ -162,7 +162,7 @@ markdown-it-py==4.0.0
     # via rich
 markupsafe==3.0.3
     # via jinja2
-mcp==1.24.0
+mcp==1.25.0
     # via -r ./comps/lvms/src/requirements.in
 mdurl==0.1.2
     # via markdown-it-py
@@ -184,7 +184,7 @@ networkx==3.6.1
     # via
     #   torch
     #   trimesh
-numpy==2.3.5
+numpy==2.4.0
     # via
     #   accelerate
     #   datasets
@@ -244,7 +244,7 @@ nvidia-nvshmem-cu12==3.3.20 ; platform_machine == 'x86_64' and sys_platform == '
     # via torch
 nvidia-nvtx-cu12==12.8.90 ; platform_machine == 'x86_64' and sys_platform == 'linux'
     # via torch
-openai==2.11.0
+openai==2.14.0
     # via -r ./comps/lvms/src/requirements.in
 opentelemetry-api==1.39.1
     # via
@@ -277,7 +277,7 @@ opentelemetry-semantic-conventions==0.60b1
     # via opentelemetry-sdk
 opt-einsum==3.4.0
     # via jax
-optimum==2.0.0
+optimum==2.1.0
     # via
     #   -r ./comps/lvms/src/requirements.in
     #   optimum-habana
@@ -320,7 +320,7 @@ protobuf==6.33.2
     #   docarray
     #   googleapis-common-protos
     #   opentelemetry-proto
-psutil==7.1.3
+psutil==7.2.1
     # via accelerate
 pyarrow==22.0.0
     # via datasets
@@ -356,7 +356,7 @@ python-dateutil==2.9.0.post0
     #   pycollada
 python-dotenv==1.2.1
     # via pydantic-settings
-python-multipart==0.0.20
+python-multipart==0.0.21
     # via mcp
 pytz==2025.2
     # via pandas
@@ -424,7 +424,7 @@ six==1.17.0
     # via python-dateutil
 sniffio==1.3.1
     # via openai
-sse-starlette==3.0.4
+sse-starlette==3.1.1
     # via mcp
 starlette==0.50.0
     # via
@@ -508,7 +508,7 @@ uuid-utils==0.12.0
     # via
     #   langchain-core
     #   langsmith
-uvicorn==0.38.0
+uvicorn==0.40.0
     # via
     #   -r ./comps/lvms/src/requirements.in
     #   mcp

comps/lvms/src/requirements.in

@@ -3,7 +3,7 @@ datasets
 docarray[full]
 fastapi
 huggingface_hub
-langchain-core>=0.3.80
+langchain-core>=1.2.5
 mcp>=1.23.0
 openai
 opentelemetry-api