fastapi==0.138.0          # pulls starlette 1.3.x (clears the 0.41.3 CVEs — okengine#95). Keep in sync with okengine-reader.
uvicorn[standard]==0.49.0
markdown==3.10.2          # PYSEC-2026-89 fixed in 3.8.1 (okengine#95). Keep in sync with okengine-reader.
nh3==0.3.5
PyYAML==6.0.2
weasyprint==70.0          # CVE-2026-55073 fixed in 70.0; pandoc --pdf-engine. Keep in sync with okengine-reader.
pydyf==0.12.1             # weasyprint 70 requires pydyf >=0.11; pin prevents incompatible drift
