chore(deps): bump the python-dependencies group across 1 directory with 15 updates

pyproject.toml

@@ -29,8 +29,8 @@ dev = [
     # upward and the bump rides invisibly inside an unrelated PR's lockfile — a
     # green-local/red-CI split (#514: mypy 1.13 -> 2.1.0 flagged new no-any-return).
     # Bump these deliberately, in their own chore PR.
-    "ruff==0.16.1",
-    "mypy==2.3.0",
+    "ruff==0.16.8",
+    "mypy==2.3.1",
     "pytest>=9.1.1",
     "pytest-asyncio>=0.24",
     "pytest-timeout>=2.3",

services/core-app/pyproject.toml

@@ -21,7 +21,7 @@ dependencies = [
     "httpx2>=2.9",
     "sqlalchemy[asyncio]>=2.0.51",
     "asyncpg>=0.29",
-    "qdrant-client>=1.18.0,<1.19",
+    "qdrant-client>=1.18.0,<1.20",
     # Confirmed module removal (#127): the core stops/removes a module's own container via
     # the Docker socket through a tightly-scoped controller (ADR-0028).
     "docker>=7.0",

services/knowledge/pyproject.toml

@@ -13,7 +13,7 @@ dependencies = [
     "uvicorn[standard]>=0.52.0",
     "sqlalchemy[asyncio]>=2.0.51",
     "asyncpg>=0.29",
-    "qdrant-client>=1.18.0,<1.19",
+    "qdrant-client>=1.18.0,<1.20",
     "httpx>=0.27",
     # Vault file-watcher for live re-index on external change (#232). Already present
     # transitively via uvicorn[standard]; declared directly because we import it.

services/notes/pyproject.toml

@@ -9,7 +9,7 @@ dependencies = [
     "uvicorn[standard]>=0.52.0",
     "sqlalchemy[asyncio]>=2.0.51",
     "asyncpg>=0.29",
-    "qdrant-client>=1.18.0,<1.19",
+    "qdrant-client>=1.18.0,<1.20",
     "httpx>=0.27",
 ]