chore(security): bump vulnerable deps and refresh lockfile

Author: honglei24

libs/api/pyproject.toml

@@ -5,7 +5,7 @@ description = "Add your description here"
 readme = "README.md"
 requires-python = ">=3.10"
 dependencies = [
-    "volcengine>=1.0.187",
+    "volcengine>=1.0.219",
     "httpx>=0.28.1",
     "httpx-sse>=0.4.0",
     "aiofiles>=23.1.0",

libs/eva/pyproject.toml

@@ -8,7 +8,7 @@ dependencies = [
     "tenacity>=9.1.2",
     "python-dotenv>=1.1.0",
     "hiagent-api>=2.5.0",
-    "requests>=2.32.3",
+    "requests>=2.33.0",
 ]
 
 [build-system]

libs/observe/pyproject.toml

@@ -11,7 +11,7 @@ dependencies = [
     "pydantic>=2.11.5",
     "python-dotenv>=1.1.0",
     "hiagent-api>=0.1.0",
-    "requests==2.32.3",
+    "requests>=2.33.0",
 ]
 
 [build-system]

pyproject.toml

@@ -25,8 +25,18 @@ dev = [
     "hiagent-api",
     "hiagent-eva",
     "hiagent-observe",
-    "mcp>=1.9.4",
-    "langchain-core>=0.3.0",
-    "chainlit>=2.2.1",
+    "mcp>=1.23.0",
+    "langchain-core>=0.3.84",
+    "chainlit>=2.9.4",
     "langchain-ollama>=0.3.3",
+    "starlette>=0.49.1",
+    "urllib3>=2.6.3",
+    "orjson>=3.11.6",
+    "protobuf>=5.29.6",
+    "PyJWT>=2.12.0",
+    "python-multipart>=0.0.22",
+    "python-socketio>=5.14.0",
+    "marshmallow>=3.26.2",
+    "pygments>=2.20.0",
+    "langchain-text-splitters>=0.3.9",
 ]