Dependabot: Update package versions

[sscargal]

Purpose of the change

This PR addresses the package security issues GitHub Dependabot identified, including dependencies with CVE reports.

Description

As above. This PR resolves the current Dependabot list.

Fixes/Closes

N/A

Type of change

• Project Maintenance (updates to build scripts, CI, etc., that do not affect the main project)
• Security (improves security without changing functionality)

How Has This Been Tested?

Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration.

• Manual verification (list step-by-step instructions)

Test Results: [Attach logs, screenshots, or relevant output]

Syncing the uv.lock file

$ uv lock
Resolved 203 packages in 1.26s
Updated aiohttp v3.13.2 -> v3.13.3
Updated authlib v1.6.5 -> v1.6.6
Added cloudpickle v3.1.2
Added fakeredis v2.33.0
Updated fastmcp v2.13.2 -> v2.14.3
Updated filelock v3.20.0 -> v3.20.3
Added importlib-metadata v8.7.1
Added jaraco-classes v3.4.0
Added jaraco-context v6.1.0
Added jaraco-functools v4.4.0
Added jeepney v0.9.0
Added keyring v25.7.0
Added lupa v2.6
Updated mcp v1.23.1 -> v1.25.0
Added more-itertools v10.8.0
Added opentelemetry-api v1.39.1
Added opentelemetry-exporter-prometheus v0.60b1
Added opentelemetry-instrumentation v0.60b1
Added opentelemetry-sdk v1.39.1
Added opentelemetry-semantic-conventions v0.60b1
Added pydocket v0.16.6
Added python-json-logger v4.0.0
Added pywin32-ctypes v0.2.3
Added redis v7.1.0
Added secretstorage v3.5.0
Added sortedcontainers v2.4.0
Updated urllib3 v2.5.0 -> v2.6.3
Updated virtualenv v20.35.4 -> v20.36.1
Updated wrapt v2.0.1 -> v1.17.3
Added zipp v3.23.0

Checklist

• I have signed the commit(s) within this pull request
• My code follows the style guidelines of this project (See STYLE_GUIDE.md)
• I have performed a self-review of my own code
• I have commented my code
• My changes generate no new warnings
• New and existing unit tests pass locally with my changes
• I have checked my code and corrected any misspellings

Maintainer Checklist

• Confirmed all checks passed
• Contributor has signed the commit(s)
• Reviewed the code
• Run, Tested, and Verified the change(s) work as expected

Screenshots/Gifs

N/A

Further comments

None

[Copilot]

Pull request overview

This PR updates package dependencies to address security vulnerabilities identified by Dependabot, including CVEs in various packages.

Changes:

• Updated fastmcp from >=2.12.0 to >=2.14.0 across root and server packages
• Updated urllib3 from >=2.0.0 to >=2.6.3 in the client package
• Additional transitive dependency updates reflected in the lock file

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated no comments.

File	Description
pyproject.toml	Updated fastmcp minimum version to address security vulnerabilities
packages/server/pyproject.toml	Updated fastmcp minimum version to address security vulnerabilities
packages/client/pyproject.toml	Updated urllib3 minimum version to address security vulnerabilities

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.