Bump all Python dependencies (#1206)

* Bump aiohttp from 3.9.1 to 3.9.2 in /scripts

Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.9.1 to 3.9.2.
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.9.1...v3.9.2)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* Update Python reqs

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Pamela Fox <[email protected]>

Author: dependabot[bot]

app/backend/requirements.txt

@@ -6,25 +6,25 @@
 #
 aiofiles==23.2.1
     # via quart
-aiohttp==3.9.1
+aiohttp==3.9.3
     # via -r requirements.in
 aiosignal==1.3.1
     # via aiohttp
 annotated-types==0.6.0
     # via pydantic
-anyio==3.7.1
+anyio==4.2.0
     # via
     #   httpx
     #   openai
 asgiref==3.7.2
     # via opentelemetry-instrumentation-asgi
-attrs==23.1.0
+attrs==23.2.0
     # via aiohttp
 azure-common==1.1.28
     # via
     #   azure-keyvault-secrets
     #   azure-search-documents
-azure-core==1.29.5
+azure-core==1.29.7
     # via
     #   azure-core-tracing-opentelemetry
     #   azure-identity
@@ -40,9 +40,9 @@ azure-identity==1.15.0
     # via -r requirements.in
 azure-keyvault-secrets==4.7.0
     # via -r requirements.in
-azure-monitor-opentelemetry==1.1.0
+azure-monitor-opentelemetry==1.2.0
     # via -r requirements.in
-azure-monitor-opentelemetry-exporter==1.0.0b19
+azure-monitor-opentelemetry-exporter==1.0.0b21
     # via azure-monitor-opentelemetry
 azure-search-documents==11.4.0b11
     # via -r requirements.in
@@ -77,15 +77,15 @@ cryptography==42.0.1
     #   python-jose
 deprecated==1.2.14
     # via opentelemetry-api
-distro==1.8.0
+distro==1.9.0
     # via openai
 ecdsa==0.18.0
     # via python-jose
 fixedint==0.1.6
     # via azure-monitor-opentelemetry-exporter
-flask==3.0.0
+flask==3.0.1
     # via quart
-frozenlist==1.4.0
+frozenlist==1.4.1
     # via
     #   aiohttp
     #   aiosignal
@@ -101,9 +101,9 @@ hpack==4.0.0
     # via h2
 httpcore==1.0.2
     # via httpx
-httpx==0.25.2
+httpx==0.26.0
     # via openai
-hypercorn==0.15.0
+hypercorn==0.16.0
     # via quart
 hyperframe==6.0.1
     # via h2
@@ -113,7 +113,7 @@ idna==3.6
     #   httpx
     #   requests
     #   yarl
-importlib-metadata==6.8.0
+importlib-metadata==6.11.0
     # via opentelemetry-api
 isodate==0.6.1
     # via
@@ -129,36 +129,34 @@ jinja2==3.1.3
     # via
     #   flask
     #   quart
-markupsafe==2.1.3
+markupsafe==2.1.4
     # via
     #   jinja2
     #   quart
     #   werkzeug
-msal==1.25.0
+msal==1.26.0
     # via
     #   -r requirements.in
     #   azure-identity
     #   msal-extensions
-msal-extensions==1.0.0
+msal-extensions==1.1.0
     # via azure-identity
 msrest==0.7.1
     # via azure-monitor-opentelemetry-exporter
 multidict==6.0.4
     # via
     #   aiohttp
     #   yarl
-numpy==1.26.2
+numpy==1.26.3
     # via
     #   openai
     #   pandas
     #   pandas-stubs
 oauthlib==3.2.2
     # via requests-oauthlib
-openai[datalib]==1.3.7
-    # via
-    #   -r requirements.in
-    #   openai
-opentelemetry-api==1.21.0
+openai[datalib]==1.10.0
+    # via -r requirements.in
+opentelemetry-api==1.22.0
     # via
     #   azure-core-tracing-opentelemetry
     #   azure-monitor-opentelemetry-exporter
@@ -176,7 +174,7 @@ opentelemetry-api==1.21.0
     #   opentelemetry-instrumentation-urllib3
     #   opentelemetry-instrumentation-wsgi
     #   opentelemetry-sdk
-opentelemetry-instrumentation==0.42b0
+opentelemetry-instrumentation==0.43b0
     # via
     #   opentelemetry-instrumentation-aiohttp-client
     #   opentelemetry-instrumentation-asgi
@@ -190,43 +188,43 @@ opentelemetry-instrumentation==0.42b0
     #   opentelemetry-instrumentation-urllib
     #   opentelemetry-instrumentation-urllib3
     #   opentelemetry-instrumentation-wsgi
-opentelemetry-instrumentation-aiohttp-client==0.42b0
+opentelemetry-instrumentation-aiohttp-client==0.43b0
     # via -r requirements.in
-opentelemetry-instrumentation-asgi==0.42b0
+opentelemetry-instrumentation-asgi==0.43b0
     # via
     #   -r requirements.in
     #   opentelemetry-instrumentation-fastapi
-opentelemetry-instrumentation-dbapi==0.42b0
+opentelemetry-instrumentation-dbapi==0.43b0
     # via opentelemetry-instrumentation-psycopg2
-opentelemetry-instrumentation-django==0.42b0
+opentelemetry-instrumentation-django==0.43b0
     # via azure-monitor-opentelemetry
-opentelemetry-instrumentation-fastapi==0.42b0
+opentelemetry-instrumentation-fastapi==0.43b0
     # via azure-monitor-opentelemetry
-opentelemetry-instrumentation-flask==0.42b0
+opentelemetry-instrumentation-flask==0.43b0
     # via azure-monitor-opentelemetry
-opentelemetry-instrumentation-httpx==0.42b0
+opentelemetry-instrumentation-httpx==0.43b0
     # via -r requirements.in
-opentelemetry-instrumentation-psycopg2==0.42b0
+opentelemetry-instrumentation-psycopg2==0.43b0
     # via azure-monitor-opentelemetry
-opentelemetry-instrumentation-requests==0.42b0
+opentelemetry-instrumentation-requests==0.43b0
     # via
     #   -r requirements.in
     #   azure-monitor-opentelemetry
-opentelemetry-instrumentation-urllib==0.42b0
+opentelemetry-instrumentation-urllib==0.43b0
     # via azure-monitor-opentelemetry
-opentelemetry-instrumentation-urllib3==0.42b0
+opentelemetry-instrumentation-urllib3==0.43b0
     # via azure-monitor-opentelemetry
-opentelemetry-instrumentation-wsgi==0.42b0
+opentelemetry-instrumentation-wsgi==0.43b0
     # via
     #   opentelemetry-instrumentation-django
     #   opentelemetry-instrumentation-flask
-opentelemetry-resource-detector-azure==0.1.0
+opentelemetry-resource-detector-azure==0.1.3
     # via azure-monitor-opentelemetry
-opentelemetry-sdk==1.21.0
+opentelemetry-sdk==1.22.0
     # via
     #   azure-monitor-opentelemetry-exporter
     #   opentelemetry-resource-detector-azure
-opentelemetry-semantic-conventions==0.42b0
+opentelemetry-semantic-conventions==0.43b0
     # via
     #   opentelemetry-instrumentation-aiohttp-client
     #   opentelemetry-instrumentation-asgi
@@ -240,7 +238,7 @@ opentelemetry-semantic-conventions==0.42b0
     #   opentelemetry-instrumentation-urllib3
     #   opentelemetry-instrumentation-wsgi
     #   opentelemetry-sdk
-opentelemetry-util-http==0.42b0
+opentelemetry-util-http==0.43b0
     # via
     #   opentelemetry-instrumentation-aiohttp-client
     #   opentelemetry-instrumentation-asgi
@@ -252,10 +250,12 @@ opentelemetry-util-http==0.42b0
     #   opentelemetry-instrumentation-urllib3
     #   opentelemetry-instrumentation-wsgi
 packaging==23.2
-    # via opentelemetry-instrumentation-flask
-pandas==2.1.3
+    # via
+    #   msal-extensions
+    #   opentelemetry-instrumentation-flask
+pandas==2.2.0
     # via openai
-pandas-stubs==2.1.1.230928
+pandas-stubs==2.1.4.231227
     # via openai
 portalocker==2.8.2
     # via msal-extensions
@@ -267,25 +267,25 @@ pyasn1==0.5.1
     #   rsa
 pycparser==2.21
     # via cffi
-pydantic==2.5.2
+pydantic==2.6.0
     # via openai
-pydantic-core==2.14.5
+pydantic-core==2.16.1
     # via pydantic
 pyjwt[crypto]==2.8.0
     # via msal
 python-dateutil==2.8.2
     # via pandas
 python-jose[cryptography]==3.3.0
     # via -r requirements.in
-pytz==2023.3.post1
+pytz==2023.4
     # via pandas
 quart==0.19.4
     # via
     #   -r requirements.in
     #   quart-cors
 quart-cors==0.7.0
     # via -r requirements.in
-regex==2023.10.3
+regex==2023.12.25
     # via tiktoken
 requests==2.31.0
     # via
@@ -315,9 +315,9 @@ tiktoken==0.5.2
     # via -r requirements.in
 tqdm==4.66.1
     # via openai
-types-pytz==2023.3.1.1
+types-pytz==2023.4.0.20240130
     # via pandas-stubs
-typing-extensions==4.8.0
+typing-extensions==4.9.0
     # via
     #   azure-core
     #   azure-keyvault-secrets
@@ -326,11 +326,11 @@ typing-extensions==4.8.0
     #   opentelemetry-sdk
     #   pydantic
     #   pydantic-core
-tzdata==2023.3
+tzdata==2023.4
     # via pandas
 urllib3==2.1.0
     # via requests
-uvicorn==0.24.0.post1
+uvicorn==0.27.0.post1
     # via -r requirements.in
 werkzeug==3.0.1
     # via
@@ -345,7 +345,10 @@ wrapt==1.16.0
     #   opentelemetry-instrumentation-urllib3
 wsproto==1.2.0
     # via hypercorn
-yarl==1.9.3
+yarl==1.9.4
     # via aiohttp
 zipp==3.17.0
     # via importlib-metadata
+
+# The following packages are considered to be unsafe in a requirements file:
+# setuptools