Merge pull request #241 from microsoft/con-migdhmoh

fix: upgrade vulnerable dependencies (urllib3, python-multipart, auth…

Author: Roopan-Microsoft

src/backend-api/pyproject.toml

@@ -17,7 +17,7 @@ dependencies = [
     "httpx==0.28.1",
     "pydantic-settings==2.10.1",
     "python-dotenv==1.2.2",
-    "python-multipart==0.0.26",
+    "python-multipart==0.0.27",
     "protobuf==7.34.0",
     "sas-cosmosdb==0.1.4",
     "semantic-kernel[azure]==1.40.0",
@@ -36,7 +36,7 @@ override-dependencies = [
     "starlette==0.49.1",
     "aiohttp==3.13.4",
     "azure-core==1.38.0",
-    "urllib3==2.6.3",
+    "urllib3==2.7.0",
     "requests==2.33.0",
     "werkzeug==3.1.4",
     "pygments==2.20.0",

src/backend-api/uv.lock

@@ -27,7 +27,7 @@
     "js-yaml": "^4.1.1",
     "lottie-react": "^2.4.1",
     "lucide-react": "^0.471.2",
-    "mermaid": "^11.13.0",
+    "mermaid": "^11.15.0",
     "messagebar": "^0.2.1",
     "postcss": "^8.5.0",
     "react": "^18.3.1",

src/frontend/package-lock.json

@@ -4,4 +4,4 @@ uvicorn[standard]==0.35.0
 jinja2==3.1.6
 azure-identity==1.24.0
 python-dotenv==1.1.1
-python-multipart==0.0.22
+python-multipart==0.0.27