build(deps): bump the minor-updates group across 1 directory with 27 updates

Bumps the minor-updates group with 27 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.42.85` | `1.43.6` |
| [mcp](https://github.com/modelcontextprotocol/python-sdk) | `1.27.0` | `1.27.1` |
| [strands-agents](https://github.com/strands-agents/sdk-python) | `1.35.0` | `1.39.0` |
| [compliance-trestle](https://github.com/oscal-compass/compliance-trestle) | `4.0.1` | `4.0.2` |
| [botocore](https://github.com/boto/botocore) | `1.42.85` | `1.43.6` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.2.25` | `2026.4.22` |
| [click](https://github.com/pallets/click) | `8.3.2` | `8.3.3` |
| [cryptography](https://github.com/pyca/cryptography) | `46.0.5` | `46.0.7` |
| [docstring-parser](https://github.com/rr-/docstring_parser) | `0.17.0` | `0.18.0` |
| [idna](https://github.com/kjd/idna) | `3.11` | `3.13` |
| [importlib-metadata](https://github.com/python/importlib_metadata) | `8.7.1` | `8.9.0` |
| [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python) | `1.40.0` | `1.41.1` |
| [opentelemetry-instrumentation](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.61b0` | `0.62b1` |
| [opentelemetry-instrumentation-threading](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.61b0` | `0.62b1` |
| [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python) | `1.40.0` | `1.41.1` |
| [opentelemetry-semantic-conventions](https://github.com/open-telemetry/opentelemetry-python) | `0.61b0` | `0.62b1` |
| [orjson](https://github.com/ijl/orjson) | `3.11.8` | `3.11.9` |
| [packaging](https://github.com/pypa/packaging) | `26.0` | `26.2` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.12.5` | `2.13.4` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.41.5` | `2.46.4` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.13.1` | `2.14.1` |
| [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.24` | `0.0.27` |
| [s3transfer](https://github.com/boto/s3transfer) | `0.16.0` | `0.17.0` |
| [sse-starlette](https://github.com/sysid/sse-starlette) | `3.3.4` | `3.4.2` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.6.3` | `2.7.0` |
| [uvicorn](https://github.com/Kludex/uvicorn) | `0.44.0` | `0.46.0` |
| [zipp](https://github.com/jaraco/zipp) | `3.23.0` | `3.23.1` |



Updates `boto3` from 1.42.85 to 1.43.6
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.85...1.43.6)

Updates `mcp` from 1.27.0 to 1.27.1
- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/main/RELEASE.md)
- [Commits](modelcontextprotocol/python-sdk@v1.27.0...v1.27.1)

Updates `strands-agents` from 1.35.0 to 1.39.0
- [Release notes](https://github.com/strands-agents/sdk-python/releases)
- [Commits](strands-agents/sdk-python@v1.35.0...v1.39.0)

Updates `compliance-trestle` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/oscal-compass/compliance-trestle/releases)
- [Changelog](https://github.com/oscal-compass/compliance-trestle/blob/develop/CHANGELOG.md)
- [Commits](oscal-compass/compliance-trestle@v4.0.1...v4.0.2)

Updates `botocore` from 1.42.85 to 1.43.6
- [Commits](boto/botocore@1.42.85...1.43.6)

Updates `certifi` from 2026.2.25 to 2026.4.22
- [Commits](certifi/python-certifi@2026.02.25...2026.04.22)

Updates `click` from 8.3.2 to 8.3.3
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](pallets/click@8.3.2...8.3.3)

Updates `cryptography` from 46.0.5 to 46.0.7
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@46.0.5...46.0.7)

Updates `docstring-parser` from 0.17.0 to 0.18.0
- [Changelog](https://github.com/rr-/docstring_parser/blob/master/CHANGELOG.md)
- [Commits](rr-/docstring_parser@0.17.0...0.18.0)

Updates `idna` from 3.11 to 3.13
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.11...v3.13)

Updates `importlib-metadata` from 8.7.1 to 8.9.0
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](python/importlib_metadata@v8.7.1...v8.9.0)

Updates `opentelemetry-api` from 1.40.0 to 1.41.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.41.1/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.1)

Updates `opentelemetry-instrumentation` from 0.61b0 to 0.62b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-threading` from 0.61b0 to 0.62b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-sdk` from 1.40.0 to 1.41.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.41.1/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.1)

Updates `opentelemetry-semantic-conventions` from 0.61b0 to 0.62b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python/commits)

Updates `orjson` from 3.11.8 to 3.11.9
- [Release notes](https://github.com/ijl/orjson/releases)
- [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md)
- [Commits](ijl/orjson@3.11.8...3.11.9)

Updates `packaging` from 26.0 to 26.2
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@26.0...26.2)

Updates `pydantic` from 2.12.5 to 2.13.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.4/HISTORY.md)
- [Commits](pydantic/pydantic@v2.12.5...v2.13.4)

Updates `pydantic-core` from 2.41.5 to 2.46.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/commits/core-v2.46.4)

Updates `pydantic-settings` from 2.13.1 to 2.14.1
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.13.1...v2.14.1)

Updates `python-multipart` from 0.0.24 to 0.0.27
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.24...0.0.27)

Updates `s3transfer` from 0.16.0 to 0.17.0
- [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst)
- [Commits](boto/s3transfer@0.16.0...0.17.0)

Updates `sse-starlette` from 3.3.4 to 3.4.2
- [Release notes](https://github.com/sysid/sse-starlette/releases)
- [Commits](sysid/sse-starlette@v3.3.4...v3.4.2)

Updates `urllib3` from 2.6.3 to 2.7.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.6.3...2.7.0)

Updates `uvicorn` from 0.44.0 to 0.46.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.44.0...0.46.0)

Updates `zipp` from 3.23.0 to 3.23.1
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst)
- [Commits](jaraco/zipp@v3.23.0...v3.23.1)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: mcp
  dependency-version: 1.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: strands-agents
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: compliance-trestle
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: botocore
  dependency-version: 1.43.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: certifi
  dependency-version: 2026.4.22
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: click
  dependency-version: 8.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: cryptography
  dependency-version: 46.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: docstring-parser
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: idna
  dependency-version: '3.13'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: importlib-metadata
  dependency-version: 8.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: opentelemetry-api
  dependency-version: 1.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: opentelemetry-instrumentation
  dependency-version: 0.62b1
  dependency-type: direct:production
  dependency-group: minor-updates
- dependency-name: opentelemetry-instrumentation-threading
  dependency-version: 0.62b1
  dependency-type: direct:production
  dependency-group: minor-updates
- dependency-name: opentelemetry-sdk
  dependency-version: 1.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: opentelemetry-semantic-conventions
  dependency-version: 0.62b1
  dependency-type: direct:production
  dependency-group: minor-updates
- dependency-name: orjson
  dependency-version: 3.11.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: packaging
  dependency-version: '26.2'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: pydantic
  dependency-version: 2.13.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: pydantic-core
  dependency-version: 2.46.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: pydantic-settings
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: python-multipart
  dependency-version: 0.0.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: s3transfer
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: sse-starlette
  dependency-version: 3.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: urllib3
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: uvicorn
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: zipp
  dependency-version: 3.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

requirements.txt

@@ -15,16 +15,16 @@ attrs==26.1.0
     #   referencing
 bcrypt==5.0.0
     # via paramiko
-boto3==1.42.85
+boto3==1.43.6
     # via
     #   mcp-server-for-oscal (pyproject.toml)
     #   strands-agents
-botocore==1.42.85
+botocore==1.43.6
     # via
     #   boto3
     #   s3transfer
     #   strands-agents
-certifi==2026.2.25
+certifi==2026.4.22
     # via
     #   httpcore
     #   httpx
@@ -36,13 +36,13 @@ cffi==2.0.0
     #   pynacl
 charset-normalizer==3.4.7
     # via requests
-click==8.3.2
+click==8.3.3
     # via uvicorn
 cmarkgfm==2025.10.22
     # via compliance-trestle
-compliance-trestle==4.0.1
+compliance-trestle==4.0.2
     # via mcp-server-for-oscal (pyproject.toml)
-cryptography==46.0.5
+cryptography==46.0.7
     # via
     #   compliance-trestle
     #   paramiko
@@ -51,7 +51,7 @@ defusedxml==0.7.1
     # via compliance-trestle
 dnspython==2.8.0
     # via email-validator
-docstring-parser==0.17.0
+docstring-parser==0.18.0
     # via strands-agents
 email-validator==2.3.0
     # via pydantic
@@ -69,15 +69,15 @@ httpx==0.28.1
     # via mcp
 httpx-sse==0.4.3
     # via mcp
-idna==3.11
+idna==3.13
     # via
     #   anyio
     #   email-validator
     #   httpx
     #   requests
 ilcli==0.3.2
     # via compliance-trestle
-importlib-metadata==8.7.1
+importlib-metadata==8.9.0
     # via opentelemetry-api
 importlib-resources==6.5.2
     # via compliance-trestle
@@ -97,48 +97,48 @@ jsonschema-specifications==2025.9.1
     # via jsonschema
 markupsafe==3.0.3
     # via jinja2
-mcp==1.27.0
+mcp==1.27.1
     # via
     #   mcp-server-for-oscal (pyproject.toml)
     #   strands-agents
 openpyxl==3.1.5
     # via compliance-trestle
-opentelemetry-api==1.40.0
+opentelemetry-api==1.41.1
     # via
     #   opentelemetry-instrumentation
     #   opentelemetry-instrumentation-threading
     #   opentelemetry-sdk
     #   opentelemetry-semantic-conventions
     #   strands-agents
-opentelemetry-instrumentation==0.61b0
+opentelemetry-instrumentation==0.62b1
     # via opentelemetry-instrumentation-threading
-opentelemetry-instrumentation-threading==0.61b0
+opentelemetry-instrumentation-threading==0.62b1
     # via strands-agents
-opentelemetry-sdk==1.40.0
+opentelemetry-sdk==1.41.1
     # via strands-agents
-opentelemetry-semantic-conventions==0.61b0
+opentelemetry-semantic-conventions==0.62b1
     # via
     #   opentelemetry-instrumentation
     #   opentelemetry-sdk
 orderedmultidict==1.0.2
     # via furl
-orjson==3.11.8
+orjson==3.11.9
     # via compliance-trestle
-packaging==26.0
+packaging==26.2
     # via opentelemetry-instrumentation
 paramiko==4.0.0
     # via compliance-trestle
 pycparser==3.0
     # via cffi
-pydantic==2.12.5
+pydantic==2.13.4
     # via
     #   compliance-trestle
     #   mcp
     #   pydantic-settings
     #   strands-agents
-pydantic-core==2.41.5
+pydantic-core==2.46.4
     # via pydantic
-pydantic-settings==2.13.1
+pydantic-settings==2.14.1
     # via mcp
 pyjwt==2.12.1
     # via mcp
@@ -152,7 +152,7 @@ python-dotenv==1.2.2
     #   pydantic-settings
 python-frontmatter==1.1.0
     # via compliance-trestle
-python-multipart==0.0.24
+python-multipart==0.0.27
     # via mcp
 pyyaml==6.0.3
     # via
@@ -172,20 +172,20 @@ rpds-py==0.30.0
     #   referencing
 ruamel-yaml==0.19.1
     # via compliance-trestle
-s3transfer==0.16.0
+s3transfer==0.17.0
     # via boto3
 six==1.17.0
     # via
     #   furl
     #   orderedmultidict
     #   python-dateutil
-sse-starlette==3.3.4
+sse-starlette==3.4.2
     # via mcp
 starlette==1.0.0
     # via
     #   mcp
     #   sse-starlette
-strands-agents==1.35.0
+strands-agents==1.39.0
     # via mcp-server-for-oscal (pyproject.toml)
 typing-extensions==4.15.0
     # via
@@ -205,17 +205,17 @@ typing-inspection==0.4.2
     #   mcp
     #   pydantic
     #   pydantic-settings
-urllib3==2.6.3
+urllib3==2.7.0
     # via
     #   botocore
     #   requests
-uvicorn==0.44.0
+uvicorn==0.46.0
     # via mcp
 watchdog==6.0.0
     # via strands-agents
 wrapt==1.17.3
     # via
     #   opentelemetry-instrumentation
     #   opentelemetry-instrumentation-threading
-zipp==3.23.0
+zipp==3.23.1
     # via importlib-metadata