fix(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
alembic (changelog)	project.dependencies	pin	>=1.14.0 -> ==1.16.2
asyncpg	project.dependencies	pin	>=0.30.0 -> ==0.30.0
brace-expansion	devDependencies	pin	>=1.1.12 -> 1.1.12
esbuild	devDependencies	pin	>=0.25.0 -> 0.25.9
langfuse	project.dependencies	pin	>=3.3.4 -> ==3.3.4
langgraph	project.dependencies	pin	>=0.6.0 -> ==0.6.7
prismjs	dependencies	pin	>=1.30.0 -> 1.30.0
psycopg2-binary (source, changelog)	project.dependencies	pin	>=2.9.10 -> ==2.9.10
pydantic-settings (changelog)	project.dependencies	pin	>=2.8.1 -> ==2.10.1
pydantic-settings (changelog)	project.dependencies	pin	>=2.10.1 -> ==2.10.1
python (source)	requires-python	pin	>=3.10 -> ==3.14.0
rehype-external-links	dependencies	pin	^3.0.0 -> 3.0.0
requests (source, changelog)	project.dependencies	pin	>=2.32.5 -> ==2.32.5
sqlalchemy (changelog)	project.dependencies	pin	>=2.0.43 -> ==2.0.43
sqlalchemy (changelog)	project.dependencies	pin	>=2.0.41 -> ==2.0.41
truststore	project.dependencies	pin	>=0.10.4 -> ==0.10.4
uvicorn (changelog)	project.dependencies	pin	>=0.35.0 -> ==0.35.0

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: mucgpt-assistant-service-migrations/uv.lock

Command failed: uv lock --upgrade-package alembic --upgrade-package asyncpg --upgrade-package psycopg2-binary --upgrade-package pydantic-settings --upgrade-package python --upgrade-package sqlalchemy
warning: The `tool.uv.dev-dependencies` field (used in `pyproject.toml`) is deprecated and will be removed in a future release; use `dependency-groups.dev` instead
Downloading cpython-3.12.4-linux-x86_64-gnu (download) (21.2MiB)
 Downloading cpython-3.12.4-linux-x86_64-gnu (download)
Using CPython 3.12.4
error: The Python request from `.python-version` resolved to Python 3.12.4, which is incompatible with the project's Python requirement: `==3.14.0` (from `project.requires-python`)
Use `uv python pin` to update the `.python-version` file to a compatible version

File name: mucgpt-assistant-service/uv.lock

Command failed: uv lock --upgrade-package asyncpg --upgrade-package psycopg2-binary --upgrade-package pydantic-settings --upgrade-package python --upgrade-package requests --upgrade-package sqlalchemy --upgrade-package uvicorn
warning: The `tool.uv.dev-dependencies` field (used in `pyproject.toml`) is deprecated and will be removed in a future release; use `dependency-groups.dev` instead
Using CPython 3.12.4
error: The Python request from `.python-version` resolved to Python 3.12.4, which is incompatible with the project's Python requirement: `==3.14.0` (from `project.requires-python`)
Use `uv python pin` to update the `.python-version` file to a compatible version

File name: mucgpt-core-service/uv.lock

Command failed: uv lock --upgrade-package langfuse --upgrade-package langgraph --upgrade-package pydantic-settings --upgrade-package python --upgrade-package truststore
warning: The `tool.uv.dev-dependencies` field (used in `pyproject.toml`) is deprecated and will be removed in a future release; use `dependency-groups.dev` instead
Using CPython 3.12.4
error: The Python request from `.python-version` resolved to Python 3.12.4, which is incompatible with the project's Python requirement: `==3.14.0` (from `project.requires-python`)
Use `uv python pin` to update the `.python-version` file to a compatible version