From 36b3f0f6c0a78061a70f5832dde5a903e9a424ee Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 1 Nov 2026 18:40:03 +0000
Subject: [PATCH] build(deps): bump the api group across 1 directory with 13
 updates

Updates the requirements on [fastapi](https://github.com/fastapi/fastapi), [starlette](https://github.com/Kludex/starlette), [pydantic](https://github.com/pydantic/pydantic), [duckdb](https://github.com/duckdb/duckdb-python), [polars](https://github.com/pola-rs/polars), [pandas](https://github.com/pandas-dev/pandas), [pyarrow](https://github.com/apache/arrow), [brotli-asgi](https://github.com/fullonic/brotli-asgi), [upstash-redis](https://github.com/upstash/redis-python), [anyio](https://github.com/agronholm/anyio), [certifi](https://github.com/certifi/python-certifi), [idna](https://github.com/kjd/idna) and [mcp](https://github.com/modelcontextprotocol/python-sdk) to permit the latest version.

Updates `fastapi` from 0.161.1 to 0.162.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](https://github.com/fastapi/fastapi/compare/0.161.1...0.162.0)

Updates `starlette` to 1.10.0
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](https://github.com/Kludex/starlette/compare/1.3.1...1.10.0)

Updates `pydantic` to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.14.2/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/compare/v2.11.0...v2.14.2)

Updates `duckdb` to 2.0.0
- [Release notes](https://github.com/duckdb/duckdb-python/releases)
- [Commits](https://github.com/duckdb/duckdb-python/compare/v1.3.0...v2.0.0)

Updates `polars` to 2.1.0
- [Release notes](https://github.com/pola-rs/polars/releases)
- [Commits](https://github.com/pola-rs/polars/compare/py-1.20.0...py-2.1.0)

Updates `pandas` from 3.0.6 to 3.1.0
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](https://github.com/pandas-dev/pandas/compare/v3.0.6...v3.1.0)

Updates `pyarrow` to 26.0.0
- [Release notes](https://github.com/apache/arrow/releases)
- [Commits](https://github.com/apache/arrow/compare/apache-arrow-18.0.0...apache-arrow-26.0.0)

Updates `brotli-asgi` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/fullonic/brotli-asgi/releases)
- [Commits](https://github.com/fullonic/brotli-asgi/compare/v1.6.0...v1.7.0)

Updates `upstash-redis` to 1.8.0
- [Release notes](https://github.com/upstash/redis-python/releases)
- [Commits](https://github.com/upstash/redis-python/compare/v1.4.0...1.8.0)

Updates `anyio` to 4.15.1
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](https://github.com/agronholm/anyio/compare/4.14.2...4.15.1)

Updates `certifi` to 2026.10.23
- [Commits](https://github.com/certifi/python-certifi/compare/2026.10.19...2026.10.23)

Updates `idna` to 3.20
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](https://github.com/kjd/idna/compare/v3.15...v3.20)

Updates `mcp` to 2.3.0
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](https://github.com/modelcontextprotocol/python-sdk/compare/v1.30.0...v2.3.0)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.162.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: api
- dependency-name: starlette
  dependency-version: 1.10.0
  dependency-type: direct:production
  dependency-group: api
- dependency-name: pydantic
  dependency-version: 2.14.2
  dependency-type: direct:production
  dependency-group: api
- dependency-name: duckdb
  dependency-version: 2.0.0
  dependency-type: direct:production
  dependency-group: api
- dependency-name: polars
  dependency-version: 2.1.0
  dependency-type: direct:production
  dependency-group: api
- dependency-name: pandas
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: api
- dependency-name: pyarrow
  dependency-version: 26.0.0
  dependency-type: direct:production
  dependency-group: api
- dependency-name: brotli-asgi
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: api
- dependency-name: upstash-redis
  dependency-version: 1.8.0
  dependency-type: direct:production
  dependency-group: api
- dependency-name: anyio
  dependency-version: 4.15.1
  dependency-type: direct:production
  dependency-group: api
- dependency-name: certifi
  dependency-version: 2026.10.23
  dependency-type: direct:production
  dependency-group: api
- dependency-name: idna
  dependency-version: '3.20'
  dependency-type: direct:production
  dependency-group: api
- dependency-name: mcp
  dependency-version: 2.3.0
  dependency-type: direct:production
  dependency-group: api
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 apps/api/requirements-mcp.txt |  2 +-
 apps/api/requirements.txt     | 24 ++++++++++++------------
 2 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/apps/api/requirements-mcp.txt b/apps/api/requirements-mcp.txt
index ef952f7..d896eca 100644
--- a/apps/api/requirements-mcp.txt
+++ b/apps/api/requirements-mcp.txt
@@ -1,3 +1,3 @@
 # Servidor MCP local (mcp_server.py); no forma parte del servicio web.
 -r requirements.txt
-mcp>=1.30
+mcp>=2.3.0
diff --git a/apps/api/requirements.txt b/apps/api/requirements.txt
index d1f67d0..e67f05c 100644
--- a/apps/api/requirements.txt
+++ b/apps/api/requirements.txt
@@ -1,27 +1,27 @@
 # API web (Render). Versiones revisadas con OSV-Scanner (oct-2026); el CI instala
 # este archivo y ejecuta apps/api/tests para validar cada actualización.
-fastapi==0.161.1
-starlette>=1.3.1
+fastapi==0.162.0
+starlette>=1.10.0
 uvicorn==0.54.0
 python-multipart==0.0.32
-pydantic>=2.11,<3
+pydantic>=2.14.2,<3
 psycopg2-binary==2.9.13
 sqlalchemy==2.1.6
 python-dotenv==1.2.4
 geopandas==1.2.0
 shapely==2.2.0
 pyogrio==0.13.0
-duckdb>=1.1.0,<2
-polars>=1.20,<2
-pandas==3.0.6
-pyarrow>=18
+duckdb>=2.0.0,<3
+polars>=2.1.0,<3
+pandas==3.1.0
+pyarrow>=26.0.0
 openpyxl==3.1.5
-brotli-asgi==1.6.0
+brotli-asgi==1.7.0
 sentry-sdk[fastapi]==2.73.0
-upstash-redis>=1.4,<2
+upstash-redis>=1.8.0,<2
 httpx==0.28.1
 
 # Mínimos de dependencias transitivas con vulnerabilidades corregidas
-anyio>=4.14.2
-certifi>=2026.10.19
-idna>=3.15
+anyio>=4.15.1
+certifi>=2026.10.23
+idna>=3.20