chore: pin deps

backend/requirements.txt

@@ -6,7 +6,7 @@ itsdangerous==2.2.0
 
 python-socketio==5.16.1
 python-jose==3.5.0
-cryptography
+cryptography==45.0.7
 bcrypt==5.0.0
 argon2-cffi==25.1.0
 PyJWT[crypto]==2.11.0
@@ -14,9 +14,9 @@ authlib==1.6.9
 
 requests==2.32.5
 aiohttp==3.13.2 # do not update to 3.13.3 - broken
-async-timeout
-aiocache
-aiofiles
+async-timeout==5.0.1
+aiocache==0.12.3
+aiofiles==25.1.0
 starlette-compress==1.7.0
 Brotli==1.1.0
 httpx[socks,http2,zstd,cli,brotli]==0.28.1
@@ -29,7 +29,7 @@ peewee==3.19.0
 peewee-migrate==1.14.3
 
 pycrdt==0.12.47
-redis
+redis==7.4.0
 
 APScheduler==3.11.2
 RestrictedPython==8.1
@@ -39,11 +39,11 @@ loguru==0.7.3
 asgiref==3.11.1
 
 # AI libraries
-tiktoken
+tiktoken==0.12.0
 mcp==1.26.0
 
-openai
-anthropic
+openai==2.29.0
+anthropic==0.86.0
 google-genai==1.66.0
 
 langchain==1.2.10
@@ -58,7 +58,7 @@ opensearch-py==3.1.0
 
 transformers==5.3.0
 sentence-transformers==5.2.3
-accelerate
+accelerate==1.12.0
 pyarrow==20.0.0 # fix: pin pyarrow version to 20 for rpi compatibility #15897
 einops==0.8.2 
 
@@ -74,15 +74,15 @@ unstructured==0.18.31
 
 nltk==3.9.3
 Markdown==3.10.2
-beautifulsoup4
+beautifulsoup4==4.14.3
 pypandoc==1.16.2
 pandas==3.0.1
 openpyxl==3.1.5
 pyxlsb==1.0.10
 xlrd==2.0.2
 validators==0.35.0
-psutil
-sentencepiece
+psutil==7.2.2
+sentencepiece==0.2.1
 soundfile==0.13.1
 
 pillow==12.1.1
@@ -97,7 +97,7 @@ black==26.1.0
 youtube-transcript-api==1.2.4
 pytube==15.0.0
 
-pydub
+pydub==0.25.1
 ddgs==9.11.3
 
 azure-ai-documentintelligence==1.0.2
@@ -106,15 +106,15 @@ azure-storage-blob==12.28.0
 azure-search-documents==11.6.0
 
 ## Google Drive
-google-api-python-client
-google-auth-httplib2
-google-auth-oauthlib
+google-api-python-client==2.193.0
+google-auth-httplib2==0.3.0
+google-auth-oauthlib==1.3.0
 
 googleapis-common-protos==1.72.0
 google-cloud-storage==3.9.0
 
 ## Databases
-pymongo
+pymongo==4.16.0
 psycopg2-binary==2.9.11
 pgvector==0.4.2
 

pyproject.toml

@@ -14,7 +14,7 @@ dependencies = [
 
     "python-socketio==5.16.1",
     "python-jose==3.5.0",
-    "cryptography",
+    "cryptography==45.0.7",
     "bcrypt==5.0.0",
     "argon2-cffi==25.1.0",
     "PyJWT[crypto]==2.11.0",
@@ -22,9 +22,9 @@ dependencies = [
 
     "requests==2.32.5",
     "aiohttp==3.13.2", # do not update to 3.13.3 - broken
-    "async-timeout",
-    "aiocache",
-    "aiofiles",
+    "async-timeout==5.0.1",
+    "aiocache==0.12.3",
+    "aiofiles==25.1.0",
     "starlette-compress==1.7.0",
     "Brotli==1.1.0",
     "httpx[socks,http2,zstd,cli,brotli]==0.28.1",
@@ -37,7 +37,7 @@ dependencies = [
     "peewee-migrate==1.14.3",
 
     "pycrdt==0.12.47",
-    "redis",
+    "redis==7.4.0",
 
     "pytz==2026.1.post1",
     "APScheduler==3.11.2",
@@ -46,11 +46,11 @@ dependencies = [
     "loguru==0.7.3",
     "asgiref==3.11.1",
 
-    "tiktoken",
+    "tiktoken==0.12.0",
     "mcp==1.26.0",
 
-    "openai",
-    "anthropic",
+    "openai==2.29.0",
+    "anthropic==0.86.0",
     "google-genai==1.66.0",
 
     "langchain==1.2.10",
@@ -66,7 +66,7 @@ dependencies = [
     
     "transformers==5.3.0",
     "sentence-transformers==5.2.3",
-    "accelerate",
+    "accelerate==1.12.0",
     "pyarrow==20.0.0", # fix: pin pyarrow version to 20 for rpi compatibility #15897
     "einops==0.8.2",
 
@@ -86,8 +86,8 @@ dependencies = [
     "pyxlsb==1.0.10",
     "xlrd==2.0.2",
     "validators==0.35.0",
-    "psutil",
-    "sentencepiece",
+    "psutil==7.2.2",
+    "sentencepiece==0.2.1",
     "soundfile==0.13.1",
     "azure-ai-documentintelligence==1.0.2",
 
@@ -103,12 +103,12 @@ dependencies = [
     "youtube-transcript-api==1.2.4",
     "pytube==15.0.0",
 
-    "pydub",
+    "pydub==0.25.1",
     "ddgs==9.11.3",
 
-    "google-api-python-client",
-    "google-auth-httplib2",
-    "google-auth-oauthlib",
+    "google-api-python-client==2.193.0",
+    "google-auth-httplib2==0.3.0",
+    "google-auth-oauthlib==1.3.0",
 
     "googleapis-common-protos==1.72.0",
     "google-cloud-storage==3.9.0",
@@ -144,7 +144,7 @@ unstructured = [
 ]
 
 all = [
-    "pymongo",
+    "pymongo==4.16.0",
     "psycopg2-binary==2.9.11",
     "pgvector==0.4.2",
     "moto[s3]>=5.0.26",