build: update opencv python newer ffmpeg (#457)

With the [latest
release](https://github.com/opencv/opencv-python/releases/tag/90),
OpenCV Python is now using a newer version of ffmpeg without
CVE-2023-6605.

This PR pulls that version in.

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Release 1.1.7** addressing dependency updates and lockfile
generation.
> 
> - Upgrade `opencv-python` to `4.13.0.90` to include ffmpeg fix for
CVE-2023-6605
> - Switch Makefile `pip-compile` steps to `uv pip compile`; regenerate
`requirements/base.txt`, `requirements/test.txt`, and
`requirements/dev.txt` with updated pins
> - Bump package version to `1.1.7` and update `CHANGELOG.md`
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
d66dba2. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Author: qued

CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.1.7
+
+- Update OpenCV-Python to 4.13.0.90 to squash ffmpeg vulnerability CVE-2023-6605
+
 ## 1.1.6
 
 - Use inference_config to set default rendering DPI

Makefile

@@ -39,9 +39,9 @@ install-dev: install-test
 ## pip-compile:             compiles all base/dev/test requirements
 .PHONY: pip-compile
 pip-compile:
-	pip-compile --upgrade requirements/base.in
-	pip-compile --upgrade requirements/test.in
-	pip-compile --upgrade requirements/dev.in
+	uv pip compile --python-version 3.10 requirements/base.in -o requirements/base.txt --no-emit-package pip --no-emit-package setuptools
+	uv pip compile --python-version 3.10 requirements/test.in -o requirements/test.txt --no-emit-package pip --no-emit-package setuptools
+	uv pip compile --python-version 3.10 requirements/dev.in -o requirements/dev.txt --no-emit-package pip --no-emit-package setuptools
 
 #################
 # Test and Lint #

requirements/base.in

@@ -2,7 +2,7 @@
 python-multipart
 huggingface-hub
 numpy
-opencv-python>=4.12
+opencv-python>=4.13.0.90
 onnx
 onnxruntime>=1.18.0
 matplotlib

requirements/base.txt

@@ -1,8 +1,8 @@
 # This file was autogenerated by uv via the following command:
 #    uv pip compile --python-version 3.10 requirements/base.in -o requirements/base.txt --no-emit-package pip --no-emit-package setuptools
-accelerate==1.12.0
+accelerate==1.10.1
     # via -r requirements/base.in
-certifi==2025.11.12
+certifi==2026.1.4
     # via requests
 cffi==2.0.0
     # via cryptography
@@ -12,20 +12,20 @@ charset-normalizer==3.4.4
     #   requests
 coloredlogs==15.0.1
     # via onnxruntime
-contourpy==1.3.2
+contourpy==1.3.0
     # via matplotlib
 cryptography==46.0.3
     # via pdfminer-six
 cycler==0.12.1
     # via matplotlib
-filelock==3.20.0
+filelock==3.19.1
     # via
     #   huggingface-hub
     #   torch
     #   transformers
-flatbuffers==25.9.23
+flatbuffers==25.12.19
     # via onnxruntime
-fonttools==4.61.0
+fonttools==4.60.2
     # via
     #   -c requirements/constraints.in
     #   matplotlib
@@ -48,19 +48,19 @@ idna==3.11
     # via requests
 jinja2==3.1.6
     # via torch
-kiwisolver==1.4.9
+kiwisolver==1.4.7
     # via matplotlib
 markupsafe==3.0.3
     # via jinja2
-matplotlib==3.10.7
+matplotlib==3.9.4
     # via -r requirements/base.in
 ml-dtypes==0.5.4
     # via onnx
 mpmath==1.3.0
     # via sympy
-networkx==3.4.2
+networkx==3.2.1
     # via torch
-numpy==2.2.6
+numpy==2.0.2
     # via
     #   -r requirements/base.in
     #   accelerate
@@ -76,9 +76,9 @@ numpy==2.2.6
     #   transformers
 onnx==1.19.1
     # via -r requirements/base.in
-onnxruntime==1.23.2
+onnxruntime==1.19.2
     # via -r requirements/base.in
-opencv-python==4.12.0.88
+opencv-python==4.13.0.90
     # via -r requirements/base.in
 packaging==25.0
     # via
@@ -91,21 +91,21 @@ pandas==2.3.3
     # via -r requirements/base.in
 pdfminer-six==20251107
     # via -r requirements/base.in
-pillow==12.0.0
+pillow==11.3.0
     # via
     #   matplotlib
     #   torchvision
-protobuf==6.33.1
+protobuf==6.33.4
     # via
     #   onnx
     #   onnxruntime
-psutil==7.1.3
+psutil==7.2.1
     # via accelerate
 pycparser==2.23
     # via cffi
-pyparsing==3.2.5
+pyparsing==3.3.1
     # via matplotlib
-pypdfium2==5.0.0
+pypdfium2==5.3.0
     # via -r requirements/base.in
 python-dateutil==2.9.0.post0
     # via
@@ -121,9 +121,9 @@ pyyaml==6.0.3
     #   huggingface-hub
     #   timm
     #   transformers
-rapidfuzz==3.14.3
+rapidfuzz==3.13.0
     # via -r requirements/base.in
-regex==2025.11.3
+regex==2026.1.15
     # via transformers
 requests==2.32.5
     # via
@@ -134,41 +134,41 @@ safetensors==0.7.0
     #   accelerate
     #   timm
     #   transformers
-scipy==1.15.3
+scipy==1.13.1
     # via -r requirements/base.in
 six==1.17.0
     # via python-dateutil
 sympy==1.14.0
     # via
     #   onnxruntime
     #   torch
-timm==1.0.22
+timm==1.0.24
     # via -r requirements/base.in
-tokenizers==0.22.1
+tokenizers==0.22.2
     # via transformers
-torch==2.9.1
+torch==2.8.0
     # via
     #   -r requirements/base.in
     #   accelerate
     #   timm
     #   torchvision
-torchvision==0.24.1
+torchvision==0.23.0
     # via timm
 tqdm==4.67.1
     # via
     #   huggingface-hub
     #   transformers
-transformers==4.57.1
+transformers==4.57.6
     # via -r requirements/base.in
 typing-extensions==4.15.0
     # via
     #   cryptography
     #   huggingface-hub
     #   onnx
     #   torch
-tzdata==2025.2
+tzdata==2025.3
     # via pandas
-urllib3==2.6.2
+urllib3==2.6.3
     # via
     #   -c requirements/constraints.in
     #   requests