fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-14151620

requirements-dev.txt

@@ -1,67 +1,61 @@
-#
+# This file was autogenerated by uv via the following command:
-# This file is autogenerated by pip-compile with python 3.10
+#    uv pip compile requirements-dev.in
-# To update, run:
+astroid==3.3.11
-#
-#    pip-compile requirements-dev.in
-#
-astroid==2.11.7
     # via pylint
-beautifulsoup4==4.11.1
+beautifulsoup4==4.13.5
     # via bs4
-bs4==0.0.1
+blinker==1.9.0
-    # via -r requirements.in
-certifi==2022.6.15
-    # via requests
-charset-normalizer==2.1.0
-    # via requests
-click==8.1.3
     # via flask
-dill==0.3.5.1
+bs4==0.0.2
+    # via -r requirements.in
+certifi==2025.8.3
+    # via requests
+charset-normalizer==3.4.3
+    # via requests
+click==8.2.1
+    # via flask
+dill==0.4.0
     # via pylint
-feedgen==0.9.0
+feedgen==1.0.0
     # via -r requirements.in
-flask==2.1.3
+flask==3.1.2
     # via -r requirements.in
-idna==3.3
+idna==3.10
     # via requests
-isort==5.10.1
+isort==6.0.1
     # via pylint
-itsdangerous==2.1.2
+itsdangerous==2.2.0
     # via flask
-jinja2==3.1.2
+jinja2==3.1.6
     # via flask
-lazy-object-proxy==1.7.1
+lxml==6.0.1
-    # via astroid
-lxml==4.9.1
     # via feedgen
-markupsafe==2.1.1
+markupsafe==3.0.2
-    # via jinja2
+    # via
+    #   flask
+    #   jinja2
+    #   werkzeug
 mccabe==0.7.0
     # via pylint
-peewee==3.15.1
+peewee==3.18.2
     # via -r requirements.in
-platformdirs==2.5.2
+platformdirs==4.4.0
     # via pylint
-pylint==2.14.5
+pylint==3.3.8
     # via -r requirements-dev.in
-python-dateutil==2.8.2
+python-dateutil==2.9.0.post0
     # via feedgen
-requests==2.28.1
+requests==2.32.5
     # via -r requirements.in
-six==1.16.0
+six==1.17.0
     # via python-dateutil
-soupsieve==2.3.2.post1
+soupsieve==2.8
     # via beautifulsoup4
-tomli==2.0.1
+tomlkit==0.13.3
     # via pylint
-tomlkit==0.11.1
+typing-extensions==4.15.0
-    # via pylint
+    # via beautifulsoup4
-urllib3==1.26.10
+urllib3==2.5.0
     # via requests
-werkzeug==2.1.2
+werkzeug==3.1.3
     # via flask
-wrapt==1.14.1
-    # via astroid
-
-# The following packages are considered to be unsafe in a requirements file:
-# setuptools

requirements.txt

@@ -1,44 +1,47 @@
-#
+# This file was autogenerated by uv via the following command:
-# This file is autogenerated by pip-compile with python 3.10
+#    uv pip compile requirements.in
-# To update, run:
+beautifulsoup4==4.13.5
-#
-#    pip-compile requirements.in
-#
-beautifulsoup4==4.11.1
     # via bs4
-bs4==0.0.1
+blinker==1.9.0
-    # via -r requirements.in
-certifi==2022.6.15
-    # via requests
-charset-normalizer==2.1.0
-    # via requests
-click==8.1.3
     # via flask
-feedgen==0.9.0
+bs4==0.0.2
     # via -r requirements.in
-flask==2.1.3
+certifi==2025.8.3
-    # via -r requirements.in
-idna==3.3
     # via requests
-itsdangerous==2.1.2
+charset-normalizer==3.4.3
+    # via requests
+click==8.2.1
     # via flask
-jinja2==3.1.2
+feedgen==1.0.0
+    # via -r requirements.in
+flask==3.1.2
+    # via -r requirements.in
+idna==3.10
+    # via requests
+itsdangerous==2.2.0
     # via flask
-lxml==4.9.1
+jinja2==3.1.6
+    # via flask
+lxml==6.0.1
     # via feedgen
-markupsafe==2.1.1
+markupsafe==3.0.2
-    # via jinja2
+    # via
-peewee==3.15.1
+    #   flask
+    #   jinja2
+    #   werkzeug
+peewee==3.18.2
     # via -r requirements.in
-python-dateutil==2.8.2
+python-dateutil==2.9.0.post0
     # via feedgen
-requests==2.28.1
+requests==2.32.5
     # via -r requirements.in
-six==1.16.0
+six==1.17.0
     # via python-dateutil
-soupsieve==2.3.2.post1
+soupsieve==2.8
     # via beautifulsoup4
-urllib3==1.26.10
+typing-extensions==4.15.0
+    # via beautifulsoup4
+urllib3==2.5.0
     # via requests
-werkzeug==2.1.2
+werkzeug==3.1.4
     # via flask