# Core dependencies
pyyaml>=6.0
playwright>=1.40.0
# CVE-2024-30251: body iteration race fixed in 3.11.0; bumped to 3.13.5 for zip-bomb/smuggling/DoS fixes (3.14.0 requires py3.10)
aiohttp>=3.13.5
beautifulsoup4>=4.12.0
# CVE-2026-41066: iterparse/ETCompatXMLParser XXE fixed in 6.1.0
lxml>=6.1.0

# API dependencies (for web UI)
# CVE-2024-24762: multipart DoS fixed in 0.115.0
fastapi>=0.115.0
uvicorn>=0.24.0
pydantic>=2.4.0  # GHSA-mr82-8j83-vxmv ReDoS fixed in 2.4.0

# Firebase (if using)
firebase-admin>=6.9.0

# Other dependencies
python-dotenv>=1.0.0
requests>=2.32.5

# Vector Database (for long-term memory)
qdrant-client>=1.9.0  # GHSA-7m75-x27w-r52r input validation fixed in 1.9.0
sentence-transformers>=2.2.0  # For local embeddings

# ============================================
# Telegram Bot Dependencies
# ============================================
python-telegram-bot>=20.0
openai>=1.109.1          # For /gpt commands

# ============================================
# Optional Third-party Integrations
# ============================================
# Install only the integrations you need:

# AI Integrations (optional)
# anthropic>=0.7.0       # For Anthropic/Claude integration (coming soon)
# google-generativeai    # For Google Gemini integration (coming soon)
