Merge pull request #27 from ImagingDataCommons/dependabot/uv/python-865fb8b788

build(deps): Bump the python group with 3 updates

Author: fedorov

pyproject.toml

@@ -12,12 +12,12 @@ dependencies = [
     # Query engine + data
     "idc-index>=0.12.4",
     "duckdb>=1.5.4",
-    "pyarrow>=15",
+    "pyarrow>=25.0.0",
     # Shared models / settings
     "pydantic>=2.7",
     "pydantic-settings>=2.3",
     # REST adapter
-    "fastapi>=0.139.0",
+    "fastapi>=0.139.1",
     "uvicorn[standard]>=0.51.0",
     # MCP adapter (official SDK; bundles FastMCP server API)
     "mcp>=1.28.1",
@@ -28,7 +28,7 @@ dev = [
     "pytest>=9.1.1",
     "httpx>=0.27",          # FastAPI TestClient transport
     "pytest-asyncio>=0.23",
-    "ruff>=0.15.20",
+    "ruff>=0.15.21",
     "bandit>=1.7",          # static security lint (CI)
     "pip-audit>=2.7",       # dependency CVE scan (CI)
 ]