[aisona-lab]

Summary

• update the five locked packages reported by Dependabot/pip-audit
• keep anthropic pinned at 0.115.0 to avoid an unrelated major upgrade
• retain application code and pyproject.toml unchanged

Security result

• baseline: 27 audit records across anyio, black, certifi, filelock, and virtualenv
• updated lockfile: no known vulnerabilities reported by pip-audit

Verification

• 211 tests passed, 1 deselected
• offline corpus proof passed
• ruff, black, and mypy passed
• uv lock check passed
• independent review found no critical, important, or minor issues