fix(deps): bump pypdf, urllib3 override, and dev dependencies for security fixes

- pypdf ~6.7.4 → ~6.7.5 (CVE: inefficient ASCIIHexDecode stream decoding)
- Add urllib3>=2.6.3 override (CVE: decompression-bomb bypass on redirects)
- ruff 0.14.7 → 0.15.1, mypy 1.19.0 → 1.19.1, pre-commit 4.5.0 → 4.5.1
- types-regex 2024.11.6 → 2026.1.15, boto3-stubs 1.40.54 → 1.42.40
- Auto-fixed 13 lint issues from new ruff rules

Co-authored-by: Greyson LaLonde <greyson.r.lalonde@gmail.com>

pyproject.toml

@@ -8,9 +8,9 @@ authors = [
 
 [dependency-groups]
 dev = [
-    "ruff==0.14.7",
-    "mypy==1.19.0",
-    "pre-commit==4.5.0",
+    "ruff==0.15.1",
+    "mypy==1.19.1",
+    "pre-commit==4.5.1",
     "bandit==1.9.2",
     "pytest==8.4.2",
     "pytest-asyncio==1.3.0",
@@ -23,9 +23,9 @@ dev = [
     "pytest-split==0.10.0",
     "types-requests~=2.31.0.6",
     "types-pyyaml==6.0.*",
-    "types-regex==2024.11.6.*",
+    "types-regex==2026.1.15.*",
     "types-appdirs==1.4.*",
-    "boto3-stubs[bedrock-runtime]==1.40.54",
+    "boto3-stubs[bedrock-runtime]==1.42.40",
     "types-psycopg2==2.9.21.20251012",
     "types-pymysql==1.1.0.20250916",
     "types-aiofiles~=25.1.0",
@@ -153,6 +153,7 @@ override-dependencies = [
     "onnxruntime<1.24; python_version < '3.11'",
     "pillow>=12.1.1",
     "langchain-core>=0.3.80,<1",
+    "urllib3>=2.6.3",
 ]
 
 [tool.uv.workspace]