build: dependabot deps bump

.github/workflows/codeql.yml

@@ -18,7 +18,14 @@ jobs:
       security-events: write
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+<<<<<<< dev
+      - uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v3
+        with:
+          languages: python
+      - uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v3
+=======
       - uses: github/codeql-action/init@9e907b5e64f6b83e7804b09294d44122997950d6 # v3
         with:
           languages: python
       - uses: github/codeql-action/analyze@9e907b5e64f6b83e7804b09294d44122997950d6 # v3
+>>>>>>> main

.github/workflows/run_tests.yml

@@ -60,6 +60,10 @@ jobs:
           output: 'trivy-results.sarif'
           severity: 'CRITICAL,HIGH'
       - name: Upload Trivy scan results
+<<<<<<< dev
+        uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v3
+=======
         uses: github/codeql-action/upload-sarif@9e907b5e64f6b83e7804b09294d44122997950d6 # v3
+>>>>>>> main
         with:
           sarif_file: 'trivy-results.sarif'

pyproject.toml

@@ -14,12 +14,12 @@ dependencies = [
     "uvicorn==0.40.0",                                   # Server
     "opencv-python==4.13.0.92",                          # Frame extraction
     "requests==2.32.5",                                  # Model download
-    "onnxruntime==1.23.2; sys_platform == 'darwin' or (sys_platform == 'linux' and platform_machine == 'aarch64')",
-    "onnxruntime-gpu==1.24.1; sys_platform == 'win32' or (sys_platform == 'linux' and platform_machine == 'x86_64')",
+    "onnxruntime==1.24.2; sys_platform == 'darwin' or (sys_platform == 'linux' and platform_machine == 'aarch64')",
+    "onnxruntime-gpu==1.24.2; sys_platform == 'win32' or (sys_platform == 'linux' and platform_machine == 'x86_64')",
     "numpy==2.4.1",                                      # Image batch processing
     # Security overrides for transitive dependencies
     "h11==0.16.0",                                       # CVE fix (uvicorn dep)
-    "starlette==0.50.0",                                 # CVE fix (fastapi dep)
+    "starlette==0.52.1",                                 # CVE fix (fastapi dep)
     "urllib3==2.6.3",                                    # CVE fix (requests dep)
     "protobuf==6.33.5",                                  # CVE fix (onnxruntime dep)
 ]