fix(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
@ai-sdk/openai-compatible (source)	dependencies	pin	^2.0.37 → 2.0.37
@ai-sdk/provider-utils (source)	dependencies	pin	^4.0.6 → 4.0.21
@casl/ability (source)	dependencies	pin	^6.8.0 → 6.8.0
@commitlint/cli (source)	devDependencies	pin	^20.4.1 → 20.5.0
@commitlint/config-conventional (source)	devDependencies	pin	^20.4.1 → 20.5.0
@convex-dev/agent	dependencies	pin	^0.6.0 → 0.6.1
@inquirer/prompts (source)	dependencies	pin	^8.0.0 → 8.3.2
@parcel/watcher-linux-arm64-glibc	optionalDependencies	pin	^2.5.4 → 2.5.6
@parcel/watcher-linux-x64-glibc	optionalDependencies	pin	^2.5.4 → 2.5.6
@rollup/rollup-linux-arm64-gnu (source)	optionalDependencies	pin	^4.55.1 → 4.60.1
@rollup/rollup-linux-x64-gnu (source)	optionalDependencies	pin	^4.55.1 → 4.60.1
@sentry/tanstackstart-react (source)	dependencies	pin	^10.37.0 → 10.47.0
@swc/core-linux-arm64-gnu (source)	optionalDependencies	pin	^1.15.8 → 1.15.21
@swc/core-linux-x64-gnu (source)	optionalDependencies	pin	^1.15.8 → 1.15.21
@tailwindcss/oxide-linux-arm64-gnu (source)	optionalDependencies	pin	^4.1.18 → 4.2.2
@tailwindcss/oxide-linux-x64-gnu (source)	optionalDependencies	pin	^4.1.18 → 4.2.2
@tailwindcss/oxide-linux-x64-gnu (source)	optionalDependencies	pin	^4.2.0 → 4.2.2
@tanstack/router-plugin (source)	devDependencies	pin	^1.158.0 → 1.167.12
@types/bun (source)	devDependencies	pin	^1.3.6 → 1.3.11
@types/bun (source)	devDependencies	pin	^1.3.9 → 1.3.11
@types/swagger-ui-react (source)	devDependencies	pin	^5.18.0 → 5.18.0
@vitest/browser (source)	devDependencies	pin	^4.0.18 → 4.1.2
@vitest/browser-playwright (source)	devDependencies	pin	^4.0.18 → 4.1.2
ai (source)	dependencies	pin	^6.0.35 → 6.0.142
asyncpg	project.dependencies	pin	>=0.30.0 → ==0.31.0
commander	dependencies	pin	^14.0.0 → 14.0.3
commitizen	devDependencies	pin	^4.3.1 → 4.3.1
convex (source)	dependencies	pin	^1.32.0 → 1.34.1
cz-conventional-changelog	devDependencies	pin	^3.3.0 → 3.3.0
fastapi (changelog)	project.dependencies	pin	>=0.100.0 → ==0.135.2
fastapi (changelog)	project.dependencies	pin	>=0.100.0 → ==0.128.0
httpx (changelog)	project.dependencies	pin	>=0.28.0 → ==0.28.1
husky	devDependencies	pin	^9.1.7 → 9.1.7
i18next (source)	dependencies	pin	^26.0.0 → 26.0.3
i18next-icu	dependencies	pin	^2.4.1 → 2.4.3
intl-messageformat	dependencies	pin	^11.1.2 → 11.2.0
json-diff-kit	dependencies	pin	^1.0.35 → 1.0.35
jszip	dependencies	pin	^3.10.1 → 3.10.1
knip (source)	devDependencies	pin	^6.0.0 → 6.1.1
lightningcss-linux-arm64-gnu	optionalDependencies	pin	^1.30.2 → 1.32.0
lightningcss-linux-x64-gnu	optionalDependencies	pin	^1.30.2 → 1.32.0
loguru (changelog)	project.dependencies	pin	>=0.7.0 → ==0.7.3
magic-string	overrides	pin	^0.30.17 → 0.30.21
markdown-it-py	project.dependencies	pin	>=3.0.0 → ==4.0.0
openai	project.dependencies	pin	>=1.0.0 → ==2.15.0
openai	project.dependencies	pin	>=1.0.0 → ==2.24.0
openpyxl (source)	project.dependencies	pin	>=3.1.0 → ==3.1.5
oxfmt (source)	devDependencies	pin	^0.32.0 → 0.32.0
oxlint (source)	devDependencies	pin	^1.43.0 → 1.58.0
oxlint-tsgolint	devDependencies	pin	^0.18.0 → 0.18.1
prom-client	dependencies	pin	^15.1.0 → 15.1.3
prometheus-client	project.dependencies	pin	>=0.21.0,<1.0.0 → ==0.24.1
pydantic (changelog)	project.dependencies	pin	>=2.0.0 → ==2.11.10
pydantic-settings (changelog)	project.dependencies	pin	>=2.0.0 → ==2.13.1
pydantic-settings (changelog)	project.dependencies	pin	>=2.0.0 → ==2.12.0
pymupdf (changelog)	project.dependencies	pin	>=1.27.0 → ==1.27.1
pytest-asyncio (changelog)	project.optional-dependencies	pin	>=0.23.0 → ==1.3.0
python (source)	requires-python	pin	>=3.11 → ==3.14.3
python-docx (changelog)	project.dependencies	pin	>=1.0.0 → ==1.2.0
python-dotenv	project.dependencies	pin	>=1.2.0 → ==1.2.1
python-multipart (changelog)	project.dependencies	pin	>=0.0.20 → ==0.0.20
python-pptx (changelog)	project.dependencies	pin	>=1.0.0 → ==1.0.2
react-i18next	dependencies	pin	^17.0.0 → 17.0.2
react-is (source)	overrides	pin	^19.2.4 → 19.2.4
rehype-sanitize	dependencies	pin	^6.0.0 → 6.0.0
semantic-text-splitter	project.dependencies	pin	>=0.18.0 → ==0.29.0
setuptools (changelog)	build-system.requires	pin	>=61.0 → ==82.0.1
shiki (source)	dependencies	pin	^4.0.0 → 4.0.2
stamina (changelog)	project.dependencies	pin	>=25.0.0 → ==25.2.0
sucrase	dependencies	pin	^3.35.1 → 3.35.1
swagger-ui-react	dependencies	pin	^5.31.0 → 5.32.1
tiktoken (changelog)	project.dependencies	pin	>=0.9.0 → ==0.12.0
typescript (source)	devDependencies	pin	^5.8.3 → 5.9.3
uvicorn (changelog)	project.dependencies	pin	>=0.20.0 → ==0.40.0
vite (source)	dependencies	pin	^8.0.0 → 8.0.3
yaml (source)	dependencies	pin	^2.7.0 → 2.8.3
yaml (source)	devDependencies	pin	^2.8.2 → 2.8.3

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: services/crawler/uv.lock

Command failed: uv lock --upgrade-package asyncpg --upgrade-package markdown-it-py --upgrade-package openai --upgrade-package pytest-asyncio --upgrade-package python --upgrade-package semantic-text-splitter --upgrade-package stamina --upgrade-package tiktoken
Using CPython 3.12.3 interpreter at: /usr/bin/python3.12
error: The Python request from `.python-version` resolved to Python 3.12.3, which is incompatible with the project's Python requirement: `==3.14.3` (from `project.requires-python`)
Use `uv python pin` to update the `.python-version` file to a compatible version

File name: services/rag/uv.lock

Command failed: uv lock --upgrade-package asyncpg --upgrade-package fastapi --upgrade-package httpx --upgrade-package loguru --upgrade-package openai --upgrade-package pydantic --upgrade-package pydantic-settings --upgrade-package pytest-asyncio --upgrade-package python --upgrade-package python-dotenv --upgrade-package python-multipart --upgrade-package stamina --upgrade-package uvicorn
Using CPython 3.12.3 interpreter at: /usr/bin/python3.12
error: The Python request from `.python-version` resolved to Python 3.12.3, which is incompatible with the project's Python requirement: `==3.14.3` (from `project.requires-python`)
Use `uv python pin` to update the `.python-version` file to a compatible version