# Match the existing ODS model-router runtime range.
fastapi==0.141.1
# Security floor includes form limits and URL/Host parsing fixes (2026 audit).
starlette==1.7.0
uvicorn[standard]>=0.27.0,<0.30.0
httpx>=0.27.0,<0.29.0
async-timeout>=4.0.3,<6; python_version < '3.11'

# Remove the compromised emSign CA from the bundled TLS trust store.
certifi>=2026.10.19
