v0.7.3

What's Changed

• fix: bump pillow to >=12.2.0 (CVE-2026-40192) by @mfleader in #6075
• fix: bump python-multipart>=0.0.27 for CVE-2026-42561 by @mfleader in #6259
• fix(ci): pin client checkouts to the matching release branch on release-0.7.x by @cdoern in #6289
• fix: bump pyasn1 for CVE-2026-59885 (backport #6330) by @mergify[bot] in #6334
• fix(deps): bump urllib3 and python-dotenv for CVE-2026-44432, CVE-2026-44431, and CVE-2026-28684 by @cdoern in #6360
• fix(deps): bump pillow, nltk, and langchain-core for multiple CVEs (backport #6272) by @mergify[bot] in #6362
• fix(deps): bump aiohttp and pyjwt constraints for CVE-2026-34993 and CVE-2026-48526 (backport #6183) by @EleanorWho in #6223

Full Changelog: v0.7.2...v0.7.3