Fix Dependabot alerts for third_parties (#1978)

* Fix Dependabot alerts for third_parties

Signed-off-by: ZePan110 <ze.pan@intel.com>

* Fix embedding-bridge

Signed-off-by: ZePan110 <ze.pan@intel.com>

* Fix clip

Signed-off-by: ZePan110 <ze.pan@intel.com>

* Fix clip cont.

Signed-off-by: ZePan110 <ze.pan@intel.com>

* Revert "Fix clip cont."

This reverts commit 628d8d9.

* Fix cont.

Signed-off-by: ZePan110 <ze.pan@intel.com>

* Restore clip and pathway

Signed-off-by: ZePan110 <ze.pan@intel.com>

* [pre-commit.ci] auto fixes from pre-commit.com hooks

for more information, see https://pre-commit.ci

---------

Signed-off-by: ZePan110 <ze.pan@intel.com>
Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

Author: ZePan110

comps/third_parties/bridgetower/src/requirements-cpu.txt

@@ -2,14 +2,19 @@ aiohttp
 docarray[full]
 fastapi
 huggingface_hub
-langchain
+langchain<1.0.0
+langchain-core>=0.3.81
+langchain-text-splitters>=0.3.9
 opentelemetry-api
 opentelemetry-exporter-otlp
 opentelemetry-sdk
+pillow>=11.3.0
 prometheus-fastapi-instrumentator
 pydantic==2.8.2
 shortuuid
+starlette>=0.49.1
 torch
 torchvision
 transformers
+urllib3>=2.6.0
 uvicorn

comps/third_parties/bridgetower/src/requirements-gpu.txt

@@ -19,4 +19,3 @@ starlette>=0.49.1
 transformers>=4.52.4
 urllib3>=2.6.0
 uvicorn
-