All pip audit fixes into one

.github/workflows/code_checks.yml

@@ -55,9 +55,13 @@ jobs:
         uses: pypa/gh-action-pip-audit@1220774d901786e6f652ae159f7b6bc8fea6d266
         with:
           virtual-environment: .venv/
-          # GHSA-7p48-42j8-8846: Vulnerabilities in streamlit that cannot be upgraded because it has an issue with tests:
+          # GHSA-7p48-42j8-8846, PYSEC-2026-212: Vulnerabilities in streamlit that cannot be upgraded because it
+          # has an issue with tests:
           # https://github.com/streamlit/streamlit/issues/12566
           # GHSA-5239-wwwm-4pmq: issue with pygments 2.19.12 that can't be upgraded because it breaks the docs build
+          # PYSEC-2026-2132: Click cannot be upgraded to 8.3.3 because of inspectai
           ignore-vulns: |
             GHSA-7p48-42j8-8846
             GHSA-5239-wwwm-4pmq
+            PYSEC-2026-212
+            PYSEC-2026-2132

pyproject.toml

@@ -11,7 +11,7 @@ dependencies = [
     "fastapi[standard]>=0.121.0",
     "google-genai>=2.2.0",
     "inspect-ai>=0.3.160",
-    "langchain>=1.2.0",
+    "langchain>=1.3.9",
     "langchain-openai>=1.1.14",
     "pydantic>=2.11.7",
     "pyyaml>=6.0.2",