chore(deps): bump the minor-and-patch group across 1 directory with 27 updates

---
updated-dependencies:
- dependency-name: agent-client-protocol
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: aiohttp
  dependency-version: 3.14.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: typer
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pillow
  dependency-version: 12.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: certifi
  dependency-version: 2026.6.17
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: click
  dependency-version: 8.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: trafilatura
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: fastmcp
  dependency-version: 3.4.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: tomlkit
  dependency-version: 0.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: pyobjc-framework-cocoa
  dependency-version: 12.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: fastapi
  dependency-version: 0.139.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: websockets
  dependency-version: 16.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: sentry-sdk
  dependency-version: 2.66.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: opentelemetry-api
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: opentelemetry-sdk
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: opentelemetry-exporter-otlp-proto-http
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pyinstaller
  dependency-version: 6.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pyright
  dependency-version: 1.1.411
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ty
  dependency-version: 0.0.61
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pytest-asyncio
  dependency-version: 1.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: anthropic
  dependency-version: 0.117.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: google-genai
  dependency-version: 2.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: openai
  dependency-version: 2.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: typing-extensions
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: mcp
  dependency-version: 1.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: asyncssh
  dependency-version: 2.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

packages/pythinker-host/pyproject.toml

@@ -22,7 +22,7 @@ classifiers = [
 ]
 dependencies = [
     "aiofiles>=24.0,<26.0",
-    "asyncssh==2.23.0",
+    "asyncssh==2.24.0",
 ]
 
 [project.urls]

packages/pythinker-review/pyproject.toml

@@ -20,7 +20,7 @@ classifiers = [
     "Topic :: Security",
 ]
 dependencies = [
-    "typer==0.26.7",
+    "typer==0.27.0",
     "pydantic>=2.12.5",
     "pyyaml==6.0.3",
     "rich==15.0.0",

pyproject.toml

@@ -22,35 +22,35 @@ classifiers = [
     "Topic :: Utilities",
 ]
 dependencies = [
-    "agent-client-protocol==0.10.1",
+    "agent-client-protocol==0.11.0",
     "aiofiles>=24.0,<26.0",
-    "aiohttp==3.14.1",
-    "typer==0.26.7",
+    "aiohttp==3.14.2",
+    "typer==0.27.0",
     "pythinker-core[contrib]==1.2.0",
     # notify-py (via batrachian-toad) caps loguru at <=0.6.0 on 3.14+.
     "loguru>=0.6.0,<0.7",
     "prompt-toolkit==3.0.52",
-    "pillow==12.2.0",
+    "pillow==12.3.0",
     "pyyaml==6.0.3",
     "rich==15.0.0",
     "certifi>=2025.10.5",
     "pyperclip==1.11.0",
     # Pinned: click 8.4.x regresses pyright (`click.Option` typed partially
     # unknown, ~95 errors in `make check`). Unpin once that type regression is
     # fixed upstream. Mirrored as a Dependabot ignore in .github/dependabot.yml.
-    "click==8.3.0",
+    "click==8.3.3",
     "streamingjson==0.0.5",
-    "trafilatura==2.0.0",
+    "trafilatura==2.1.0",
     # lxml is used by trafilatura/htmldate/justext; keep pinned for binary wheels.
     "lxml==6.1.1",
     "tenacity==9.1.4",
-    "fastmcp==3.2.0",
+    "fastmcp==3.4.4",
     "pydantic==2.13.4",
     "httpx[socks]==0.28.1",
     "pythinker-host==1.0.0",
     "pythinker-review==0.1.0",
     "batrachian-toad==0.5.23; python_version >= \"3.14\"",
-    "tomlkit==0.15.0",
+    "tomlkit==0.15.1",
     "jinja2==3.1.6",
     "pyobjc-framework-cocoa>=12.1 ; sys_platform == 'darwin'",
     "fastapi>=0.115.0",
@@ -69,7 +69,7 @@ dependencies = [
 
 [dependency-groups]
 dev = [
-    "pyinstaller==6.18.0",
+    "pyinstaller==6.21.0",
     "inline-snapshot[black]>=0.31.1",
     "pyright>=1.1.409",
     "ty>=0.0.9",