fix(deps): pin Werkzeug >=3.1.7 to prevent vulnerable transitive resolution (#44868)

Co-authored-by: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

api/pyproject.toml

@@ -42,6 +42,7 @@ dependencies = [
     "opentelemetry-propagator-b3>=1.45.0,<2.0.0",
     "readabilipy==0.3.0",
     "resend>=2.27.0,<3.0.0",
+    "werkzeug>=3.1.7,<4.0.0",
     "zstandard==0.25.0",
     # Emerging: newer and fast-moving, use compatible pins
     "fastopenapi[flask]==0.7.0",

api/uv.lock

@@ -1440,6 +1440,7 @@ dependencies = [
     { name = "resend" },
     { name = "sendgrid" },
     { name = "sseclient-py" },
+    { name = "werkzeug" },
     { name = "zstandard" },
 ]
 
@@ -1730,6 +1731,7 @@ requires-dist = [
     { name = "resend", specifier = ">=2.27.0,<3.0.0" },
     { name = "sendgrid", specifier = ">=6.12.5,<7.0.0" },
     { name = "sseclient-py", specifier = ">=1.8.0,<2.0.0" },
+    { name = "werkzeug", specifier = ">=3.1.7,<4.0.0" },
     { name = "zstandard", specifier = "==0.25.0" },
 ]