fix(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
@muenchen/muc-patternlab-vue	dependencies	pin	^7.4.1 → 7.4.1
@​types/dompurify	devDependencies	pin	^3.0.5 → 3.0.5
@vue/eslint-config-typescript	devDependencies	pin	^14.7.0 → 14.7.0
@vue/test-utils	devDependencies	pin	^2.4.0 → 2.4.0
bs4	project.dependencies	pin	>=0.0.2 → ==0.0.2
cryptography (changelog)	project.dependencies	pin	>=46.0.4 → ==46.0.5
dompurify	dependencies	pin	^3.3.1 → 3.3.2
eslint (source)	devDependencies	pin	^10.0.2 → 10.0.2
eslint-plugin-vue (source)	devDependencies	pin	^10.8.0 → 10.8.0
gitpython	project.dependencies	pin	>=3.1.45 → ==3.1.46
httpx (changelog)	project.dependencies	pin	>=0.28.1 → ==0.28.1
ipykernel	dependency-groups	pin	>=7.1.0 → ==7.1.0
langchain (changelog)	dependency-groups	pin	>=0.3.27 → ==1.2.7
langchain-community (changelog)	dependency-groups	pin	>=0.3.28 → ==0.4.1
langchain-docling (changelog)	dependency-groups	pin	>=1.1.0 → ==2.0.0
langchain-openai (changelog)	dependency-groups	pin	>=0.3.32 → ==1.1.7
langchain-openai (changelog)	project.dependencies	pin	>=1.1.7 → ==1.1.7
langchain-postgres	project.optional-dependencies	pin	>=0.0.15 → ==0.0.16
langchain-postgres	project.dependencies	pin	>=0.0.16 → ==0.0.16
langchain-text-splitters (changelog)	project.dependencies	pin	>=1.1.0 → ==1.1.0
legacy-cgi	project.dependencies	pin	>=2.6.4 → ==2.6.4
marked (source)	dependencies	pin	^17.0.1 → 17.0.3
mistralai	project.dependencies	pin	>=1.9.11 → ==1.10.1
pgvector	project.dependencies	pin	<0.4 → ==0.3.6
pre-commit	dependency-groups	pin	>=4.5.1 → ==4.5.1
psycopg (changelog)	project.dependencies	pin	>=3.2.9 → ==3.3.2
pydantic (changelog)	project.dependencies	pin	>=2.11.7 → ==2.12.5
pydantic-settings (changelog)	project.dependencies	pin	>=2.10.1 → ==2.12.0
pypdf (changelog)	dependency-groups	pin	>=6.4.1 → ==6.9.2
pypdf (changelog)	project.dependencies	pin	>=6.6.0 → ==6.9.2
pytest (changelog)	dependency-groups	pin	>=9.0.2 → ==9.0.2
pytest-asyncio (changelog)	project.dependencies	pin	>=1.3.0 → ==1.3.0
python-dotenv	dependency-groups	pin	>=1.2.1 → ==1.2.1
pyyaml (source)	project.dependencies	pin	>=6.0.2 → ==6.0.3
ruff (source, changelog)	dependency-groups	pin	>=0.14.11 → ==0.14.14
sqlalchemy (changelog)	project.dependencies	pin	>=2.0.42 → ==2.0.46
sqlmodel (changelog)	project.dependencies	pin	>=0.0.24 → ==0.0.32
stamina (changelog)	project.dependencies	pin	>=25.1.0 → ==25.2.0
truststore	project.dependencies	pin	>=0.10.4 → ==0.10.4
ty (changelog)	dependency-groups	pin	>=0.0.11 → ==0.0.14
uv_build (source, changelog)	build-system.requires	pin	>=0.9.13,<0.10.0 → ==0.9.30

⚠️ Renovate's pin functionality does not currently wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

Dependency Review

The following issues were found:

• ❌ 1 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 5 package(s) with unknown licenses.
• ⚠️ 26 packages with OpenSSF Scorecard issues.

View full job summary