From 6ad0d81a1095738ad703ddb1d51801b246423185 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=B4=AA=E7=A3=8A?= <honglei.1@bytedance.com>
Date: Fri, 17 Apr 2026 15:01:00 +0800
Subject: [PATCH] chore(deps): fix dependabot alert

---
 libs/eva/pyproject.toml     |  2 +-
 libs/observe/pyproject.toml |  2 +-
 pyproject.toml              |  4 ++--
 requirements.txt            | 14 +++++++-------
 uv.lock                     | 14 +++++++-------
 5 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/libs/eva/pyproject.toml b/libs/eva/pyproject.toml
index ec1c841..ff43b0f 100644
--- a/libs/eva/pyproject.toml
+++ b/libs/eva/pyproject.toml
@@ -25,5 +25,5 @@ exclude = [
 
 [dependency-groups]
 dev = [
-    "pytest>=8.4.0",
+    "pytest>=9.0.3",
 ]
diff --git a/libs/observe/pyproject.toml b/libs/observe/pyproject.toml
index 6bcc69e..b5f0e08 100644
--- a/libs/observe/pyproject.toml
+++ b/libs/observe/pyproject.toml
@@ -28,5 +28,5 @@ exclude = [
 
 [dependency-groups]
 dev = [
-    "chainlit>=2.2.1",
+    "chainlit>=2.9.4",
 ]
diff --git a/pyproject.toml b/pyproject.toml
index c7aa703..b2fe1c3 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -20,7 +20,7 @@ members = ["libs/api", "libs/components", "libs/eva", "libs/observe"]
 [dependency-groups]
 dev = [
     "langchain>=0.3.25",
-    "pytest>=8.4.0",
+    "pytest>=9.0.3",
     "hiagent-components",
     "hiagent-api",
     "hiagent-eva",
@@ -34,7 +34,7 @@ dev = [
     "orjson>=3.11.6",
     "protobuf>=5.29.6",
     "PyJWT>=2.12.0",
-    "python-multipart>=0.0.22",
+    "python-multipart>=0.0.26",
     "python-socketio>=5.14.0",
     "marshmallow>=3.26.2",
     "pygments>=2.20.0",
diff --git a/requirements.txt b/requirements.txt
index 76fa674..4d075bd 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4,7 +4,7 @@ asyncer==0.0.7
 beautifulsoup4==4.13.4
 bidict==0.23.1
 certifi==2025.4.26
-chainlit==2.2.1
+chainlit>=2.9.4
 charset-normalizer==3.4.2
 chevron==0.14.0
 click==8.2.1
@@ -24,11 +24,11 @@ jsonpatch==1.33
 jsonpointer==3.0.0
 langchain==0.3.25
 langchain-ollama==0.3.3
-langchain-text-splitters==0.3.8
+langchain-text-splitters>=0.3.9
 langsmith==0.3.45
 lazify==0.4.0
 literalai==0.1.103
-marshmallow==3.26.1
+marshmallow>=3.26.2
 mypy-extensions==1.1.0
 nest-asyncio==1.6.0
 ollama==0.5.1
@@ -41,7 +41,7 @@ opentelemetry-instrumentation==0.54b1
 opentelemetry-proto==1.33.1
 opentelemetry-sdk==1.33.1
 opentelemetry-semantic-conventions==0.54b1
-orjson==3.10.18
+orjson>=3.11.6
 packaging==24.2
 protobuf==5.29.6
 py==1.11.0
@@ -51,11 +51,11 @@ pydantic-core==2.33.2
 pyjwt>=2.12.0
 python-dotenv==1.1.0
 python-engineio==4.12.2
-python-multipart>=0.0.22
-python-socketio==5.13.0
+python-multipart>=0.0.26
+python-socketio>=5.14.0
 pytz==2020.5
 pyyaml==6.0.2
-requests==2.32.3
+requests>=2.33.0
 requests-toolbelt==1.0.0
 retry==0.9.2
 simple-websocket==1.1.0
diff --git a/uv.lock b/uv.lock
index 24063b7..927ae9f 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1075,7 +1075,7 @@ requires-dist = [
 [package.metadata.requires-dev]
 dev = [{ name = "langchain-openai", specifier = ">=0.3.25" }]
 integrations = [
-    { name = "langchain-core", specifier = ">=0.3.0" },
+    { name = "langchain-core", specifier = ">=0.3.84" },
     { name = "mcp", specifier = ">=1.9.4" },
 ]
 
@@ -1137,7 +1137,7 @@ requires-dist = [
 ]
 
 [package.metadata.requires-dev]
-dev = [{ name = "chainlit", specifier = ">=2.2.1" }]
+dev = [{ name = "chainlit", specifier = ">=2.9.4" }]
 
 [[package]]
 name = "hiagent-sdk-monorepo"
@@ -1187,8 +1187,8 @@ dev = [
     { name = "protobuf", specifier = ">=5.29.6" },
     { name = "pygments", specifier = ">=2.20.0" },
     { name = "pyjwt", specifier = ">=2.12.0" },
-    { name = "pytest", specifier = ">=8.4.0" },
-    { name = "python-multipart", specifier = ">=0.0.22" },
+    { name = "pytest", specifier = ">=9.0.3" },
+    { name = "python-multipart", specifier = ">=0.0.26" },
     { name = "python-socketio", specifier = ">=5.14.0" },
     { name = "starlette", specifier = ">=0.49.1" },
     { name = "urllib3", specifier = ">=2.6.3" },
@@ -2782,7 +2782,7 @@ wheels = [
 
 [[package]]
 name = "pycryptodome"
-version = "3.9.9"
+version = "3.19.1"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/c4/3a/5bca2cb1648b171afd6b7d29a11c6bca8b305bb75b7e2d78a0f5c61ff95e/pycryptodome-3.9.9.tar.gz", hash = "sha256:910e202a557e1131b1c1b3f17a63914d57aac55cf9fb9b51644962841c3995c4", size = 15488528, upload-time = "2020-11-03T13:15:26.723Z" }
 
@@ -2930,7 +2930,7 @@ crypto = [
 
 [[package]]
 name = "pytest"
-version = "8.4.0"
+version = "9.0.3"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "colorama", marker = "sys_platform == 'win32'" },
@@ -2969,7 +2969,7 @@ wheels = [
 
 [[package]]
 name = "python-multipart"
-version = "0.0.24"
+version = "0.0.26"
 source = { registry = "https://pypi.org/simple" }
 sdist = { url = "https://files.pythonhosted.org/packages/8a/45/e23b5dc14ddb9918ae4a625379506b17b6f8fc56ca1d82db62462f59aea6/python_multipart-0.0.24.tar.gz", hash = "sha256:9574c97e1c026e00bc30340ef7c7d76739512ab4dfd428fec8c330fa6a5cc3c8", size = 37695, upload-time = "2026-04-05T20:49:13.829Z" }
 wheels = [