Bump min versions for security fixes

[aserper]

Bumps minimum version constraints to fix dependabot security alerts:

• GitPython>=3.1.42 (command injection via git options bypass)
• python-multipart>=0.0.20 (DoS via large multipart data)
• pytest>=9.0.3 (tmpdir handling)
• cryptography>=44.0.0 (buffer overflow)