chore(deps): update deps and harden security (#825)

Signed-off-by: phernandez <paul@basicmachines.co>

src/basic_memory/services/context_service.py

@@ -4,7 +4,7 @@ from __future__ import annotations
 
 from dataclasses import dataclass, field
 from datetime import datetime, timezone
-from typing import List, Optional, Tuple, TYPE_CHECKING
+from typing import Any, List, Optional, Tuple, TYPE_CHECKING
 
 
 from loguru import logger
@@ -307,7 +307,7 @@ class ContextService:
         entity_id_values = ", ".join([str(i) for i in entity_ids])
 
         # Parameters for bindings - include project_id for security filtering
-        params = {
+        params: dict[str, Any] = {
             "max_depth": max_depth,
             "max_results": max_results,
             "project_id": self.search_repository.project_id,
@@ -322,9 +322,9 @@ class ContextService:
                 since_utc = (
                     since.astimezone(timezone.utc) if since.tzinfo else since
                 )  # pragma: no cover
-                params["since_date"] = since_utc.replace(tzinfo=None)  # pyright: ignore  # pragma: no cover
+                params["since_date"] = since_utc.replace(tzinfo=None)  # pragma: no cover
             else:
-                params["since_date"] = since.isoformat()  # pyright: ignore
+                params["since_date"] = since.isoformat()
             date_filter = "AND e.created_at >= :since_date"
             relation_date_filter = "AND e_from.created_at >= :since_date"
             timeframe_condition = "AND eg.relation_date >= :since_date"

src/basic_memory/services/entity_service.py

@@ -1042,9 +1042,9 @@ class EntityService(BaseService[EntityModel]):
             for rel, resolved in zip(markdown.relations, resolved_entities):
                 # Handle exceptions from gather and None results
                 target_entity: Optional[Entity] = None
-                if not isinstance(resolved, Exception):
-                    # Type narrowing: resolved is Optional[Entity] here, not Exception
-                    target_entity = resolved  # pyright: ignore [reportAssignmentType]
+                if not isinstance(resolved, BaseException):
+                    # asyncio.gather(..., return_exceptions=True) can return any BaseException.
+                    target_entity = resolved
 
                 if target_entity is None and not resolve_targets:
                     target_entity = await self._resolve_deferred_self_relation(rel.target, entity)