chore: dependency updates and security fixes (#3116)

## Summary

- Update dependencies across Rust, Python, Node.js, Java, Docker, and
docs
- Pin unpinned dependency lower bounds to prevent silent downgrades
- Bump CI actions to current major versions

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

python/pyproject.toml

@@ -3,10 +3,10 @@ name = "lancedb"
 # version in Cargo.toml
 dynamic = ["version"]
 dependencies = [
-    "deprecation",
-    "numpy",
+    "deprecation>=2.1.0",
+    "numpy>=1.24.0",
     "overrides>=0.7; python_version<'3.12'",
-    "packaging",
+    "packaging>=23.0",
     "pyarrow>=16",
     "pydantic>=1.10",
     "tqdm>=4.27.0",
@@ -48,48 +48,48 @@ pylance = [
     "pylance>=4.0.0b7",
 ]
 tests = [
-    "aiohttp",
-    "boto3",
+    "aiohttp>=3.9.0",
+    "boto3>=1.28.57",
     "pandas>=1.4",
-    "pytest",
-    "pytest-mock",
-    "pytest-asyncio",
-    "duckdb",
-    "pytz",
+    "pytest>=7.0",
+    "pytest-mock>=3.10",
+    "pytest-asyncio>=0.21",
+    "duckdb>=0.9.0",
+    "pytz>=2023.3",
     "polars>=0.19, <=1.3.0",
-    "tantivy",
-    "pyarrow-stubs",
+    "tantivy>=0.20.0",
+    "pyarrow-stubs>=16.0",
     "pylance>=4.0.0b7",
-    "requests",
+    "requests>=2.31.0",
     "datafusion>=52,<53",
 ]
 dev = [
-    "ruff",
-    "pre-commit",
-    "pyright",
+    "ruff>=0.3.0",
+    "pre-commit>=3.5.0",
+    "pyright>=1.1.350",
     'typing-extensions>=4.0.0; python_version < "3.11"',
 ]
 docs = ["mkdocs", "mkdocs-jupyter", "mkdocs-material", "mkdocstrings-python"]
-clip = ["torch", "pillow", "open-clip-torch"]
-siglip = ["torch", "pillow", "transformers>=4.41.0","sentencepiece"]
+clip = ["torch", "pillow>=12.1.1", "open-clip-torch"]
+siglip = ["torch", "pillow>=12.1.1", "transformers>=4.41.0","sentencepiece"]
 embeddings = [
     "requests>=2.31.0",
     "openai>=1.6.1",
-    "sentence-transformers",
-    "torch",
-    "pillow",
-    "open-clip-torch",
-    "cohere",
+    "sentence-transformers>=2.2.0",
+    "torch>=2.0.0",
+    "pillow>=12.1.1",
+    "open-clip-torch>=2.20.0",
+    "cohere>=4.0",
     "colpali-engine>=0.3.10",
-    "huggingface_hub",
-    "InstructorEmbedding",
-    "google.generativeai",
+    "huggingface_hub>=0.19.0",
+    "InstructorEmbedding>=1.0.1",
+    "google.generativeai>=0.3.0",
     "boto3>=1.28.57",
-    "awscli>=1.29.57",
+    "awscli>=1.44.38",
     "botocore>=1.31.57",
     'ibm-watsonx-ai>=1.1.2; python_version >= "3.10"',
     "ollama>=0.3.0",
-    "sentencepiece"
+    "sentencepiece>=0.1.99"
 ]
 azure = ["adlfs>=2024.2.0"]