v0.1.29

Summary

Resolves #196 by upgrading the full dependency lockfile to latest resolved versions, addressing Dependabot security alerts across runtime, dev, and transitive packages.

Key runtime upgrades:

• fastapi 0.136.1 → 0.138.0 (starlette 1.0.0 → 1.3.1)
• pyjwt 2.12.1 → 2.13.0
• python-multipart 0.0.29 → 0.0.32

Key dev/tooling upgrades:

• pytest 8.4.2 → 9.1.1 (widened constraint from <9.0.0 to >=8.3.3)
• pytest-jinja-check 1.0.2 → 1.1.0 (Starlette 1.x _IncludedRouter route discovery)
• jupyter-server 2.18.2 → 2.20.0
• tornado 6.5.5 → 6.5.7
• bleach 6.3.0 → 6.4.0

Test plan

• uv run pytest tests — 421 passed
• uv run ty check . — passes
• Confirm Dependabot alerts are cleared after merge (one bleach alert may remain if no upstream patch exists: GHSA-g75f-g53v-794x)

Made with Cursor