chore: bump dependencies (AAI-857)

dependencies/templates.py

@@ -1,10 +1,12 @@
 from fastapi.templating import Jinja2Templates
-from jinja2 import StrictUndefined
+from jinja2 import Environment, FileSystemLoader, StrictUndefined, select_autoescape
 
 TEMPLATES = Jinja2Templates(
-    directory="templates",
-    autoescape=True,
-    undefined=StrictUndefined,
+    env=Environment(
+        loader=FileSystemLoader("templates"),
+        autoescape=select_autoescape(),
+        undefined=StrictUndefined,
+    ),
 )
 
 

pyproject.toml

@@ -5,32 +5,32 @@ description = "Add your description here"
 readme = "README.md"
 requires-python = ">=3.13"
 dependencies = [
-    "alembic>=1.16.2",
-    "fastapi[standard]>=0.136.1",
+    "alembic>=1.18.5",
+    "fastapi[standard]>=0.139.0",
     # Security floor for CVE-2026-26007 (subgroup validation for SECT curves)
-    "cryptography>=46.0.7",
+    "cryptography>=49.0",
     "httpx>=0.28.1",
     "psycopg[binary]>=3.3.4",
     "email-validator~=2.3",
-    "pydantic-settings>=2.14.1",
-    "pyjwt[crypto]>=2.10.1",
-    "sqlmodel>=0.0.38",
-    "boto3>=1.43.6",
+    "pydantic-settings>=2.14.2",
+    "pyjwt[crypto]>=2.13.0",
+    "sqlmodel>=0.0.39",
+    "boto3>=1.43.45",
     "authlib>=1.6.11",
     "itsdangerous>=2.2.0",
-    "prometheus-fastapi-instrumentator>=6.0.0",
+    "prometheus-fastapi-instrumentator>=8.0.2",
     "apscheduler[redis,sqlalchemy]~=3.11",
     "loguru>=0.7.3",
     "cachetools~=7.1",
-    "typer>=0.25.1",
-    "starlette-admin>=0.15.1",
+    "typer>=0.26.8",
+    "starlette-admin>=0.16.1",
     # Security floor for CVE-2026-27199 (safe_join Windows device names)
     "werkzeug>=3.1.8",
 ]
 
 [project.optional-dependencies]
 dev = [
-    "boto3-stubs>=1.42.70",
+    "boto3-stubs>=1.43.45",
     "pytest>=9.0.3",
     "pytest-mock>=3.14.0",
     "pytest-asyncio~=1.2",