[services] Update python deps, November 2025 edition (#15198)

## Change Description

Monthly update of pip dependencies

## Security Assessment

- This change potentially impacts the Hail Batch instance as deployed by
Broad Institute in GCP

### Impact Rating

- This change has a low security impact

### Impact Description

Low immediate impact, but good to keep dependencies up to date

### Appsec Review

- [x] Required: The impact has been assessed and approved by appsec

Author: cjllanwarne

ci/pinned-requirements.txt

@@ -1,6 +1,6 @@
 # This file was autogenerated by uv via the following command:
 #    uv pip compile --python-version 3.10 --python-platform linux ci/requirements.txt --output-file=ci/pinned-requirements.txt
-certifi==2025.10.5
+certifi==2025.11.12
     # via
     #   -c ci/../gear/pinned-requirements.txt
     #   -c ci/../hail/python/dev/pinned-requirements.txt
@@ -17,7 +17,7 @@ charset-normalizer==3.4.4
     #   -c ci/../hail/python/dev/pinned-requirements.txt
     #   -c ci/../hail/python/pinned-requirements.txt
     #   requests
-click==8.3.0
+click==8.3.1
     # via
     #   -c ci/../hail/python/dev/pinned-requirements.txt
     #   -c ci/../hail/python/pinned-requirements.txt

gear/pinned-requirements.txt

@@ -35,12 +35,12 @@ attrs==25.4.0
     #   -c gear/../hail/python/hailtop/pinned-requirements.txt
     #   -c gear/../hail/python/pinned-requirements.txt
     #   aiohttp
-cachetools==6.2.1
+cachetools==6.2.2
     # via
     #   -c gear/../hail/python/hailtop/pinned-requirements.txt
     #   -c gear/../hail/python/pinned-requirements.txt
     #   google-auth
-certifi==2025.10.5
+certifi==2025.11.12
     # via
     #   -c gear/../hail/python/dev/pinned-requirements.txt
     #   -c gear/../hail/python/hailtop/pinned-requirements.txt
@@ -62,9 +62,9 @@ frozenlist==1.8.0
     #   aiosignal
 google-api-core==2.28.1
     # via google-api-python-client
-google-api-python-client==2.186.0
+google-api-python-client==2.187.0
     # via google-cloud-profiler
-google-auth==2.42.1
+google-auth==2.43.0
     # via
     #   -c gear/../hail/python/hailtop/pinned-requirements.txt
     #   -c gear/../hail/python/pinned-requirements.txt
@@ -78,7 +78,7 @@ google-auth-httplib2==0.2.1
     #   google-cloud-profiler
 google-cloud-profiler==4.1.0
     # via -r gear/requirements.txt
-googleapis-common-protos==1.71.0
+googleapis-common-protos==1.72.0
     # via google-api-core
 httplib2==0.31.0
     # via
@@ -121,7 +121,7 @@ propcache==0.4.1
     #   yarl
 proto-plus==1.26.1
     # via google-api-core
-protobuf==6.33.0
+protobuf==6.33.1
     # via
     #   google-api-core
     #   google-cloud-profiler

hail/python/dev/pinned-requirements.txt

@@ -58,7 +58,7 @@ bleach==6.3.0
     # via nbconvert
 build==1.1.1
     # via -r hail/python/dev/requirements.txt
-certifi==2025.10.5
+certifi==2025.11.12
     # via
     #   -c hail/python/dev/../pinned-requirements.txt
     #   httpcore
@@ -68,13 +68,13 @@ cffi==2.0.0
     # via
     #   -c hail/python/dev/../pinned-requirements.txt
     #   argon2-cffi-bindings
-cfgv==3.4.0
+cfgv==3.5.0
     # via pre-commit
 charset-normalizer==3.4.4
     # via
     #   -c hail/python/dev/../pinned-requirements.txt
     #   requests
-click==8.3.0
+click==8.3.1
     # via
     #   -c hail/python/dev/../pinned-requirements.txt
     #   -r hail/python/dev/requirements.txt
@@ -120,7 +120,7 @@ exceptiongroup==1.3.0
     #   anyio
     #   ipython
     #   pytest
-execnet==2.1.1
+execnet==2.1.2
     # via pytest-xdist
 executing==2.2.1
     # via
@@ -242,7 +242,7 @@ jupyter-server==2.17.0
     #   notebook-shim
 jupyter-server-terminals==0.5.3
     # via jupyter-server
-jupyterlab==4.4.10
+jupyterlab==4.5.0
     # via jupyter
 jupyterlab-pygments==0.3.0
     # via nbconvert
@@ -307,7 +307,7 @@ nodeenv==1.9.1
     # via
     #   pre-commit
     #   pyright
-nodejs-wheel-binaries==22.20.0
+nodejs-wheel-binaries==24.11.1
     # via pyright
 notebook==6.5.7
     # via
@@ -476,7 +476,7 @@ rfc3986-validator==0.1.1
     #   jupyter-events
 rfc3987-syntax==1.1.0
     # via jsonschema
-rpds-py==0.28.0
+rpds-py==0.29.0
     # via
     #   jsonschema
     #   referencing
@@ -535,7 +535,7 @@ terminado==0.18.1
     #   jupyter-server
     #   jupyter-server-terminals
     #   notebook
-tinycss2==1.4.0
+tinycss2==1.5.0
     # via nbconvert
 toml==0.10.2
     # via curlylint
@@ -581,7 +581,7 @@ types-deprecated==1.3.1.20251101
     # via -r hail/python/dev/requirements.txt
 types-pymysql==1.1.0.20250916
     # via -r hail/python/dev/requirements.txt
-types-python-dateutil==2.9.0.20251008
+types-python-dateutil==2.9.0.20251115
     # via -r hail/python/dev/requirements.txt
 types-pyyaml==6.0.12.20250915
     # via -r hail/python/dev/requirements.txt
@@ -622,9 +622,9 @@ urllib3==2.5.0
     # via
     #   -c hail/python/dev/../pinned-requirements.txt
     #   requests
-uv==0.9.7
+uv==0.9.10
     # via -r hail/python/dev/requirements.txt
-uv-build==0.9.7
+uv-build==0.9.10
     # via -r hail/python/dev/requirements.txt
 virtualenv==20.35.4
     # via pre-commit

hail/python/hailtop/pinned-requirements.txt

@@ -28,16 +28,16 @@ azure-mgmt-storage==20.1.0
     # via -r hail/python/hailtop/requirements.txt
 azure-storage-blob==12.27.1
     # via -r hail/python/hailtop/requirements.txt
-boto3==1.40.64
+boto3==1.41.0
     # via -r hail/python/hailtop/requirements.txt
-botocore==1.40.64
+botocore==1.41.0
     # via
     #   -r hail/python/hailtop/requirements.txt
     #   boto3
     #   s3transfer
-cachetools==6.2.1
+cachetools==6.2.2
     # via google-auth
-certifi==2025.10.5
+certifi==2025.11.12
     # via
     #   msrest
     #   requests
@@ -47,7 +47,7 @@ cffi==2.0.0
     #   pycares
 charset-normalizer==3.4.4
     # via requests
-click==8.3.0
+click==8.3.1
     # via typer
 commonmark==0.9.1
     # via rich
@@ -64,7 +64,7 @@ frozenlist==1.8.0
     #   -r hail/python/hailtop/requirements.txt
     #   aiohttp
     #   aiosignal
-google-auth==2.42.1
+google-auth==2.43.0
     # via
     #   -r hail/python/hailtop/requirements.txt
     #   google-auth-oauthlib

hail/python/pinned-requirements.txt

@@ -55,21 +55,21 @@ azure-storage-blob==12.27.1
     #   -r hail/python/hailtop/requirements.txt
 bokeh==3.4.3
     # via -r hail/python/requirements.txt
-boto3==1.40.64
+boto3==1.41.0
     # via
     #   -c hail/python/hailtop/pinned-requirements.txt
     #   -r hail/python/hailtop/requirements.txt
-botocore==1.40.64
+botocore==1.41.0
     # via
     #   -c hail/python/hailtop/pinned-requirements.txt
     #   -r hail/python/hailtop/requirements.txt
     #   boto3
     #   s3transfer
-cachetools==6.2.1
+cachetools==6.2.2
     # via
     #   -c hail/python/hailtop/pinned-requirements.txt
     #   google-auth
-certifi==2025.10.5
+certifi==2025.11.12
     # via
     #   -c hail/python/hailtop/pinned-requirements.txt
     #   msrest
@@ -83,7 +83,7 @@ charset-normalizer==3.4.4
     # via
     #   -c hail/python/hailtop/pinned-requirements.txt
     #   requests
-click==8.3.0
+click==8.3.1
     # via
     #   -c hail/python/hailtop/pinned-requirements.txt
     #   typer
@@ -114,7 +114,7 @@ frozenlist==1.8.0
     #   -r hail/python/hailtop/requirements.txt
     #   aiohttp
     #   aiosignal
-google-auth==2.42.1
+google-auth==2.43.0
     # via
     #   -c hail/python/hailtop/pinned-requirements.txt
     #   -r hail/python/hailtop/requirements.txt
@@ -199,7 +199,7 @@ pandas==2.3.3
     # via
     #   -r hail/python/requirements.txt
     #   bokeh
-parsimonious==0.10.0
+parsimonious==0.11.0
     # via -r hail/python/requirements.txt
 pillow==12.0.0
     # via bokeh