MAINT: Fix 16 dependabot security vulnerabilities (microsoft#1683)

Co-authored-by: Roman Lutz <romanlutz@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: romanlutz

frontend/package-lock.json

@@ -61,6 +61,7 @@
   "overrides": {
     "rollup": "4.59.0",
     "@tootallnate/once": "3.0.1",
-    "follow-redirects": ">=1.15.11"
+    "follow-redirects": "1.16.0",
+    "postcss": "8.5.13"
   }
 }

frontend/package.json

@@ -53,9 +53,9 @@ dependencies = [
     "pydantic>=2.11.5",
     "PyJWT[crypto]>=2.8.0",
     "pyodbc>=5.1.0",
-    "pypdf>=6.10.0",
+    "pypdf>=6.10.2",
     "python-docx>=1.1.0",
-    "python-dotenv>=1.0.1",
+    "python-dotenv>=1.2.2",
     "reportlab>=4.4.4",
     "segno>=1.6.6",
     "scipy>=1.15.3",
@@ -64,7 +64,7 @@ dependencies = [
     "tenacity>=9.1.2",
     "tinytag>=2.2.1",
     "tqdm>=4.67.1",
-    "transformers>=4.55.0",
+    "transformers>=5.0.0rc3",
     "treelib>=1.7.1",
     "uvicorn[standard]>=0.32.0",
     "websockets>=14.0",
@@ -200,9 +200,15 @@ invalid-argument-type = "warn"
 [tool.uv]
 constraint-dependencies = [
     "aiohttp>=3.13.4",
+    "GitPython>=3.1.47",
+    "jupyterlab>=4.5.7",
+    "lxml>=6.1.0",
+    "Mako>=1.3.11",
+    "nbconvert>=7.17.1",
+    "notebook>=7.5.6",
+    "orjson>=3.11.6",
     "pyasn1>=0.6.3",
     "cryptography>=46.0.7",
-    "orjson>=3.11.6",
     "Pygments>=2.20.0",
     "PyJWT>=2.12.0",
     "requests>=2.33.0",