Merge pull request #118 from ansible/AAP-55904

To fix reported CVE-2025-7647 against older llama-index package

Author: justjais

docs/openapi.json

@@ -792,6 +792,7 @@
                                             "type": "string"
                                         },
                                         {
+                                            "additionalProperties": true,
                                             "type": "object"
                                         }
                                     ]
@@ -802,10 +803,12 @@
                         "title": "Content"
                     },
                     "additional_kwargs": {
+                        "additionalProperties": true,
                         "type": "object",
                         "title": "Additional Kwargs"
                     },
                     "response_metadata": {
+                        "additionalProperties": true,
                         "type": "object",
                         "title": "Response Metadata"
                     },
@@ -1365,6 +1368,7 @@
                         "title": "Functionality"
                     },
                     "status": {
+                        "additionalProperties": true,
                         "type": "object",
                         "title": "Status"
                     }

pdm.lock

@@ -74,8 +74,9 @@ dependencies = [
     "fastapi>=0.121.0",
     "langchain>=0.3.25",
     "langchain-ibm>=0.3.10",
-    "llama-index>=0.12.28",
-    "llama-index-core>=0.12.28",
+    "llama-index>=0.12.52",
+    "llama-index-core>=0.12.52",
+    "llama-index-workflows>=1.0.1",
     "llama-index-vector-stores-faiss==0.3.0",
     "llama-index-embeddings-huggingface==0.4.0",
     "uvicorn==0.32.1",
@@ -87,8 +88,8 @@ dependencies = [
     "ibm-generative-ai==3.0.0",
     "ibm-cos-sdk==2.13.6",
     "langchain-openai>=0.3.16",
-    "pydantic==2.9.2",
-    "setuptools==78.1.1",
+    "pydantic>=2.11.5",
+    "setuptools>=80.9.0",
     "prometheus-client==0.20.0",
     "kubernetes==30.1.0",
     "psycopg2-binary==2.9.9",
@@ -143,7 +144,7 @@ dev = [
     "pytest==8.3.2",
     "pytest-cov==5.0.0",
     "pytest-asyncio==0.24.0",
-    "pydantic==2.9.2",
+    "pydantic>=2.11.5",
     "rouge-score==0.1.2",
     "ruff>=0.11.7",
     "bandit==1.7.9",