0.69.13

Security maintenance

A lockfile-only dependency sync that clears the three open aiohttp
advisories affecting this repo.

• uv.lock refreshed to pull aiohttp 3.14.4 (from 3.14.3), which closes
  Dependabot alerts #408 (low), #409 (high) and #410 (high). yarl moves
  1.24.5 → 1.25.1 as the transitive requirement of that bump. (#1273)

Nothing in pyproject.toml changed, so this does not alter what a pip install langroid resolves — the dependency ranges are untouched. The pin is
deliberately the minimum patched version rather than the newest release, to
keep transitive movement small. No packages were added or removed, and no
major-version changes landed, direct or transitive.

The remaining open alerts are not fixable by a lock refresh: some are capped by
a pyproject.toml range that only a maintainer should widen (transformers,
pytest), some are blocked by a genuine transitive conflict (unstructured,
weasyprint, both reached via marker-pdf's pillow/pre-commit pins), and
the rest have no patched version published upstream yet. #1273 documents the
evidence for each. No alert was dismissed.

Verification

The keyless CI job was replicated locally on Python 3.11 with all 22 extras
(3901 tests collected, 310 no-LLM tests passing), and the full Pytest, Lint and
dependency-graph workflows passed on main before this release.

Full changelog: 0.69.12...0.69.13