chore: dependency updates and security fixes (#3116)

## Summary

- Update dependencies across Rust, Python, Node.js, Java, Docker, and
docs
- Pin unpinned dependency lower bounds to prevent silent downgrades
- Bump CI actions to current major versions

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

docs/requirements.txt

@@ -1,9 +1,9 @@
 mkdocs==1.5.3
 mkdocs-jupyter==0.24.1
 mkdocs-material==9.5.3
-mkdocs-autorefs<=1.0
+mkdocs-autorefs>=0.5,<=1.0
 mkdocstrings[python]==0.25.2
-griffe
-mkdocs-render-swagger-plugin
-pydantic
-mkdocs-redirects
+griffe>=0.40,<1.0
+mkdocs-render-swagger-plugin>=0.1.0
+pydantic>=2.0,<3.0
+mkdocs-redirects>=1.2.0