Fix Dependabot alerts for guardrails (#1977)

Signed-off-by: ZePan110 <ze.pan@intel.com>

Author: ZePan110

comps/guardrails/src/bias_detection/requirements.in

@@ -3,14 +3,19 @@ docarray[full]
 fastapi
 httpx
 huggingface_hub
-langchain-community
+langchain-core>=0.3.81
+langchain-community>=0.3.27
 langchain-huggingface
+langchain-text-splitters>=0.3.9
 opentelemetry-api
 opentelemetry-exporter-otlp
 opentelemetry-sdk
+pillow>=11.3.0
 prometheus-fastapi-instrumentator
 pyyaml
 requests
 shortuuid
+starlette>=0.49.1
 transformers
+urllib3>=2.6.0
 uvicorn

comps/guardrails/src/factuality_alignment/requirements.in

@@ -5,9 +5,11 @@ huggingface_hub
 opentelemetry-api
 opentelemetry-exporter-otlp
 opentelemetry-sdk
-Pillow
+pillow>=11.3.0
 predictionguard
 prometheus-fastapi-instrumentator
 shortuuid
+starlette>=0.49.1
 transformers
+urllib3>=2.6.0
 uvicorn

comps/guardrails/src/factuality_alignment/requirements.txt

@@ -1,209 +1,204 @@
 # This file was autogenerated by uv via the following command:
-#    uv pip compile ./comps/guardrails/src/factuality_alignment/requirements.in --universal -o ./comps/guardrails/src/factuality_alignment/requirements.txt
+#    uv pip compile --python=/usr/local/bin/python3.11 ./comps/guardrails/src/factuality_alignment/requirements.in --universal -o ./comps/guardrails/src/factuality_alignment/requirements.txt
 aiohappyeyeballs==2.6.1
     # via aiohttp
-aiohttp==3.12.13
+aiohttp==3.13.2
     # via -r ./comps/guardrails/src/factuality_alignment/requirements.in
-aiosignal==1.3.2
+aiosignal==1.4.0
     # via aiohttp
+annotated-doc==0.0.4
+    # via fastapi
 annotated-types==0.7.0
     # via pydantic
-anyio==4.9.0
+anyio==4.12.0
     # via starlette
-async-timeout==5.0.1 ; python_full_version < '3.11'
+attrs==25.4.0
     # via aiohttp
-attrs==25.3.0
-    # via aiohttp
-certifi==2025.6.15
+certifi==2025.11.12
     # via requests
-charset-normalizer==3.4.2
+charset-normalizer==3.4.4
     # via requests
-click==8.2.1
+click==8.3.1
     # via uvicorn
 colorama==0.4.6 ; sys_platform == 'win32'
     # via
     #   click
     #   tqdm
 docarray==0.41.0
     # via -r ./comps/guardrails/src/factuality_alignment/requirements.in
-exceptiongroup==1.3.0 ; python_full_version < '3.11'
-    # via anyio
-fastapi==0.115.13
+fastapi==0.127.0
     # via -r ./comps/guardrails/src/factuality_alignment/requirements.in
-filelock==3.18.0
+filelock==3.20.1
     # via
     #   huggingface-hub
     #   transformers
-frozenlist==1.7.0
+frozenlist==1.8.0
     # via
     #   aiohttp
     #   aiosignal
-fsspec==2025.5.1
+fsspec==2025.12.0
     # via huggingface-hub
-googleapis-common-protos==1.70.0
+googleapis-common-protos==1.72.0
     # via
     #   opentelemetry-exporter-otlp-proto-grpc
     #   opentelemetry-exporter-otlp-proto-http
-grpcio==1.73.0
+grpcio==1.76.0
     # via opentelemetry-exporter-otlp-proto-grpc
 h11==0.16.0
     # via uvicorn
-hf-xet==1.1.4 ; platform_machine == 'aarch64' or platform_machine == 'amd64' or platform_machine == 'arm64' or platform_machine == 'x86_64'
+hf-xet==1.2.0 ; platform_machine == 'aarch64' or platform_machine == 'amd64' or platform_machine == 'arm64' or platform_machine == 'x86_64'
     # via huggingface-hub
-huggingface-hub==0.33.0
+huggingface-hub==0.36.0
     # via
     #   -r ./comps/guardrails/src/factuality_alignment/requirements.in
     #   tokenizers
     #   transformers
-idna==3.10
+idna==3.11
     # via
     #   anyio
     #   requests
     #   yarl
-importlib-metadata==8.7.0
+importlib-metadata==8.7.1
     # via opentelemetry-api
-markdown-it-py==3.0.0
+markdown-it-py==4.0.0
     # via rich
 mdurl==0.1.2
     # via markdown-it-py
-multidict==6.5.0
+multidict==6.7.0
     # via
     #   aiohttp
     #   yarl
 mypy-extensions==1.1.0
     # via typing-inspect
-numpy==2.2.6 ; python_full_version < '3.11'
-    # via
-    #   docarray
-    #   transformers
-numpy==2.3.0 ; python_full_version >= '3.11'
+numpy==2.4.0
     # via
     #   docarray
     #   transformers
-opentelemetry-api==1.34.1
+opentelemetry-api==1.39.1
     # via
     #   -r ./comps/guardrails/src/factuality_alignment/requirements.in
     #   opentelemetry-exporter-otlp-proto-grpc
     #   opentelemetry-exporter-otlp-proto-http
     #   opentelemetry-sdk
     #   opentelemetry-semantic-conventions
-opentelemetry-exporter-otlp==1.34.1
+opentelemetry-exporter-otlp==1.39.1
     # via -r ./comps/guardrails/src/factuality_alignment/requirements.in
-opentelemetry-exporter-otlp-proto-common==1.34.1
+opentelemetry-exporter-otlp-proto-common==1.39.1
     # via
     #   opentelemetry-exporter-otlp-proto-grpc
     #   opentelemetry-exporter-otlp-proto-http
-opentelemetry-exporter-otlp-proto-grpc==1.34.1
+opentelemetry-exporter-otlp-proto-grpc==1.39.1
     # via opentelemetry-exporter-otlp
-opentelemetry-exporter-otlp-proto-http==1.34.1
+opentelemetry-exporter-otlp-proto-http==1.39.1
     # via opentelemetry-exporter-otlp
-opentelemetry-proto==1.34.1
+opentelemetry-proto==1.39.1
     # via
     #   opentelemetry-exporter-otlp-proto-common
     #   opentelemetry-exporter-otlp-proto-grpc
     #   opentelemetry-exporter-otlp-proto-http
-opentelemetry-sdk==1.34.1
+opentelemetry-sdk==1.39.1
     # via
     #   -r ./comps/guardrails/src/factuality_alignment/requirements.in
     #   opentelemetry-exporter-otlp-proto-grpc
     #   opentelemetry-exporter-otlp-proto-http
-opentelemetry-semantic-conventions==0.55b1
+opentelemetry-semantic-conventions==0.60b1
     # via opentelemetry-sdk
-orjson==3.10.18
+orjson==3.11.5
     # via docarray
 packaging==25.0
     # via
     #   huggingface-hub
     #   transformers
-pillow==11.2.1
+pillow==12.0.0
     # via -r ./comps/guardrails/src/factuality_alignment/requirements.in
-predictionguard==2.8.2
+predictionguard==2.9.2 ; python_full_version < '3.12'
     # via -r ./comps/guardrails/src/factuality_alignment/requirements.in
-prometheus-client==0.22.1
+predictionguard==2.10.0 ; python_full_version >= '3.12'
+    # via -r ./comps/guardrails/src/factuality_alignment/requirements.in
+prometheus-client==0.23.1
     # via prometheus-fastapi-instrumentator
 prometheus-fastapi-instrumentator==7.1.0
     # via -r ./comps/guardrails/src/factuality_alignment/requirements.in
-propcache==0.3.2
+propcache==0.4.1
     # via
     #   aiohttp
     #   yarl
-protobuf==5.29.5
+protobuf==6.33.2
     # via
     #   googleapis-common-protos
     #   opentelemetry-proto
-pydantic==2.11.7
+pydantic==2.12.5
     # via
     #   docarray
     #   fastapi
-pydantic-core==2.33.2
+pydantic-core==2.41.5
     # via pydantic
-pygments==2.19.1
+pygments==2.19.2
     # via rich
-pyyaml==6.0.2
+pyyaml==6.0.3
     # via
     #   huggingface-hub
     #   transformers
-regex==2024.11.6
+regex==2025.11.3
     # via transformers
-requests==2.32.4
+requests==2.32.5
     # via
     #   huggingface-hub
     #   opentelemetry-exporter-otlp-proto-http
     #   predictionguard
     #   transformers
-rich==14.0.0
+rich==14.2.0
     # via docarray
-safetensors==0.5.3
+safetensors==0.7.0
     # via transformers
 shortuuid==1.0.13
     # via -r ./comps/guardrails/src/factuality_alignment/requirements.in
-sniffio==1.3.1
-    # via anyio
-starlette==0.46.2
+starlette==0.50.0
     # via
+    #   -r ./comps/guardrails/src/factuality_alignment/requirements.in
     #   fastapi
     #   prometheus-fastapi-instrumentator
 tabulate==0.9.0
     # via predictionguard
-tokenizers==0.21.1
+tokenizers==0.22.1
     # via transformers
 tqdm==4.67.1
     # via
     #   huggingface-hub
     #   transformers
-transformers==4.52.4
+transformers==4.57.3
     # via -r ./comps/guardrails/src/factuality_alignment/requirements.in
-types-requests==2.32.4.20250611
+types-requests==2.32.4.20250913
     # via docarray
-typing-extensions==4.14.0
+typing-extensions==4.15.0
     # via
+    #   aiosignal
     #   anyio
-    #   exceptiongroup
     #   fastapi
+    #   grpcio
     #   huggingface-hub
-    #   multidict
     #   opentelemetry-api
     #   opentelemetry-exporter-otlp-proto-grpc
     #   opentelemetry-exporter-otlp-proto-http
     #   opentelemetry-sdk
     #   opentelemetry-semantic-conventions
     #   pydantic
     #   pydantic-core
-    #   rich
+    #   starlette
     #   typing-inspect
     #   typing-inspection
-    #   uvicorn
 typing-inspect==0.9.0
     # via docarray
-typing-inspection==0.4.1
+typing-inspection==0.4.2
     # via pydantic
-urllib3==2.4.0
+urllib3==2.6.2
     # via
+    #   -r ./comps/guardrails/src/factuality_alignment/requirements.in
     #   requests
     #   types-requests
-uvicorn==0.34.3
+uvicorn==0.40.0
     # via -r ./comps/guardrails/src/factuality_alignment/requirements.in
-yarl==1.20.1
+yarl==1.22.0
     # via aiohttp
 zipp==3.23.0
     # via importlib-metadata