Fix dependabot alerts (#214)

fix moderate alerts

Signed-off-by: Jack Luar <jluar@precisioninno.com>

Author: luarss

backend/pyproject.toml

@@ -6,6 +6,7 @@ readme = "README.md"
 requires-python = ">=3.13"
 dependencies = [
     "asyncpg>=0.30.0",
+    "cryptography>=46.0.5",
     "faiss-cpu==1.12.0",
     "fastapi>=0.117.0",
     "fastmcp>=2.12.2",
@@ -26,6 +27,7 @@ dependencies = [
     "nest-asyncio>=1.6.0",
     "nltk==3.9.1",
     "openai==1.100.2",
+    "protobuf>=5.29.6",
     "psycopg2-binary>=2.9.11",
     "pydantic>=2.11.7",
     "pypdf==6.6.2",

backend/uv.lock

@@ -21,6 +21,7 @@ dependencies = [
     "huggingface-hub==0.26.2",
     "instructor[vertexai]==1.5.2",
     "openai==1.58.1",
+    "protobuf>=5.29.6",
     "pydantic==2.10.4",
     "tqdm==4.67.1",
     "plotly==5.24.1",