docs: update dependencies to address security alerts

[dkropachev]

Summary

• Update the docs lock to patched releases for all seven open docs/uv.lock Dependabot alerts: alerts 132, 133, 135, and 137-140.
• Move anyio from 4.13.0 to 4.15.1, soupsieve from 2.8.4 to 2.10, and tornado from 6.5.7 to 6.5.10.
• Move aiohttp from 3.14.1 to 3.14.3 because the docs environment contained the same vulnerable releases covered by the aiohttp advisories on the root lock.
• Refresh the required typing-extensions transitive dependency from 4.15.0 to 4.16.0.

This supersedes #1004.

Impact

This changes only the documentation toolchain lock. It does not change published driver dependencies, driver APIs, or the CQL protocol surface. No live-cluster integration scenario is required.

Testing

• make test from docs/ (Sphinx build with warnings treated as errors)
• uv lock --check
• git diff --check

Pre-review checklist

• I have split my patch into logically separate commits.
• All commit messages clearly explain what they change and why.
• I added relevant tests for new features and bug fixes. (Not applicable: lock-only update.)
• All commits compile, pass static checks and pass test.
• PR description sums up the changes and reasons why they should be introduced.
• I have provided docstrings for the public items that I want to introduce. (Not applicable.)
• I have adjusted the documentation in ./docs/source/. (Not applicable: no documentation content changed.)
• I added appropriate Fixes: annotations to PR description. (Not applicable: no linked issue.)

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• docs/uv.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: QUIET

Plan: Advanced

Run ID: 54ae222c-6995-446c-bd1d-21a967919957

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}