fastapi==0.138.0          # pulls starlette 1.3.x (clears the 0.41.3 CVEs — okengine#95)
uvicorn[standard]==0.49.0
markdown==3.10.2          # PYSEC-2026-89 fixed in 3.8.1 (okengine#95)
nh3==0.3.5
PyYAML==6.0.2
weasyprint==70.0          # CVE-2026-55073 fixed in 70.0; used as a pandoc --pdf-engine
pydyf==0.12.1             # weasyprint 70 requires pydyf >=0.11; pin prevents incompatible drift
