fix(deps): bump python-multipart and pytest to clear security alerts

.github/workflows/ci.yml

@@ -13,7 +13,7 @@ jobs:
       fail-fast: false
       matrix:
         os: [ubuntu-latest, macos-latest]
-        python: ["3.9", "3.12"]
+        python: ["3.10", "3.12"]
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@v4

pyproject.toml

@@ -3,14 +3,14 @@ name = "gamgui"
 version = "0.0.1"
 description = "A local, open-source macOS GUI for managing Google Workspace via GAM7 (connector-ready)."
 readme = "README.md"
-requires-python = ">=3.9"
+requires-python = ">=3.10"
 license = { text = "MIT" }
 authors = [{ name = "GamGUI contributors" }]
 dependencies = [
     "fastapi>=0.110",
     "uvicorn>=0.29",
     "jinja2>=3.1",
-    "python-multipart>=0.0.9",
+    "python-multipart>=0.0.31",
     "keyring>=24",
 ]
 
@@ -21,7 +21,7 @@ desktop = [
     "pywebview>=5.1",
 ]
 dev = [
-    "pytest>=8",
+    "pytest>=9.0.3",
     "pytest-asyncio>=0.23",
     "pytest-timeout>=2.3",
     "pytest-cov>=5",

requirements.txt

@@ -1,4 +1,4 @@
-# Pinned, known-good dependency set (macOS / Linux, Python 3.9+).
+# Pinned, known-good dependency set (macOS / Linux, Python 3.10+).
 # Runtime + test tooling. For an exact reproducible install:  pip install -r requirements.txt
 # (pyproject.toml is the flexible source of truth: pip install -e ".[dev]")
 #
@@ -9,10 +9,10 @@
 fastapi==0.128.8
 uvicorn[standard]==0.39.0
 jinja2==3.1.6
-python-multipart==0.0.20
+python-multipart==0.0.32
 keyring==25.7.0
 
 # --- tests ---
-pytest==8.4.2
+pytest==9.0.3
 pytest-asyncio==1.2.0
 httpx==0.28.1