diff --git a/api/providers/trace/trace-arize-phoenix/pyproject.toml b/api/providers/trace/trace-arize-phoenix/pyproject.toml
index 9e756944c9..b9a10e8388 100644
--- a/api/providers/trace/trace-arize-phoenix/pyproject.toml
+++ b/api/providers/trace/trace-arize-phoenix/pyproject.toml
@@ -2,7 +2,7 @@
 name = "dify-trace-arize-phoenix"
 version = "0.0.1"
 dependencies = [
-    "arize-phoenix-otel~=0.15.0",
+    "arize-phoenix-otel==0.15.0",
 ]
 description = "Dify ops tracing provider (Arize / Phoenix)."
 
diff --git a/api/providers/trace/trace-langsmith/pyproject.toml b/api/providers/trace/trace-langsmith/pyproject.toml
index 2ca7ff49c5..80eb9ae323 100644
--- a/api/providers/trace/trace-langsmith/pyproject.toml
+++ b/api/providers/trace/trace-langsmith/pyproject.toml
@@ -2,7 +2,7 @@
 name = "dify-trace-langsmith"
 version = "0.0.1"
 dependencies = [
-    "langsmith>=0.8.0",
+    "langsmith==0.8.5",
 ]
 description = "Dify ops tracing provider (LangSmith)."
 
diff --git a/api/providers/trace/trace-mlflow/pyproject.toml b/api/providers/trace/trace-mlflow/pyproject.toml
index fad6002944..a72507d877 100644
--- a/api/providers/trace/trace-mlflow/pyproject.toml
+++ b/api/providers/trace/trace-mlflow/pyproject.toml
@@ -2,7 +2,7 @@
 name = "dify-trace-mlflow"
 version = "0.0.1"
 dependencies = [
-    "mlflow-skinny>=3.11.1",
+    "mlflow-skinny>=3.11.1,<4.0.0",
 ]
 description = "Dify ops tracing provider (MLflow / Databricks)."
 
diff --git a/api/providers/trace/trace-weave/pyproject.toml b/api/providers/trace/trace-weave/pyproject.toml
index ba449f2a93..8225cdbf56 100644
--- a/api/providers/trace/trace-weave/pyproject.toml
+++ b/api/providers/trace/trace-weave/pyproject.toml
@@ -2,7 +2,7 @@
 name = "dify-trace-weave"
 version = "0.0.1"
 dependencies = [
-    "weave>=0.52.36",
+    "weave==0.52.36",
 ]
 description = "Dify ops tracing provider (Weave)."
 
diff --git a/api/providers/vdb/vdb-alibabacloud-mysql/pyproject.toml b/api/providers/vdb/vdb-alibabacloud-mysql/pyproject.toml
index bbc0e06ffa..9103f3e4f1 100644
--- a/api/providers/vdb/vdb-alibabacloud-mysql/pyproject.toml
+++ b/api/providers/vdb/vdb-alibabacloud-mysql/pyproject.toml
@@ -2,7 +2,7 @@
 name = "dify-vdb-alibabacloud-mysql"
 version = "0.0.1"
 dependencies = [
-    "mysql-connector-python>=9.3.0",
+    "mysql-connector-python>=9.3.0,<10.0.0",
 ]
 description = "Dify vector store backend (dify-vdb-alibabacloud-mysql)."
 
diff --git a/api/providers/vdb/vdb-analyticdb/pyproject.toml b/api/providers/vdb/vdb-analyticdb/pyproject.toml
index af5def3061..f22e3e8e12 100644
--- a/api/providers/vdb/vdb-analyticdb/pyproject.toml
+++ b/api/providers/vdb/vdb-analyticdb/pyproject.toml
@@ -3,8 +3,8 @@ name = "dify-vdb-analyticdb"
 version = "0.0.1"
 dependencies = [
     "alibabacloud_gpdb20160503~=5.2.0",
-    "alibabacloud_tea_openapi~=0.4.3",
-    "clickhouse-connect~=0.15.0",
+    "alibabacloud_tea_openapi==0.4.4",
+    "clickhouse-connect==0.15.1",
 ]
 description = "Dify vector store backend (dify-vdb-analyticdb)."
 
diff --git a/api/providers/vdb/vdb-clickzetta/pyproject.toml b/api/providers/vdb/vdb-clickzetta/pyproject.toml
index aea94fdb2a..fd82088cb4 100644
--- a/api/providers/vdb/vdb-clickzetta/pyproject.toml
+++ b/api/providers/vdb/vdb-clickzetta/pyproject.toml
@@ -3,7 +3,7 @@ name = "dify-vdb-clickzetta"
 version = "0.0.1"
 
 dependencies = [
-    "clickzetta-connector-python>=0.8.102",
+    "clickzetta-connector-python==0.8.104",
 ]
 description = "Dify vector store backend (dify-vdb-clickzetta)."
 
diff --git a/api/providers/vdb/vdb-hologres/pyproject.toml b/api/providers/vdb/vdb-hologres/pyproject.toml
index 88044bf6d6..bc6cfed04e 100644
--- a/api/providers/vdb/vdb-hologres/pyproject.toml
+++ b/api/providers/vdb/vdb-hologres/pyproject.toml
@@ -3,7 +3,7 @@ name = "dify-vdb-hologres"
 version = "0.0.1"
 
 dependencies = [
-    "holo-search-sdk>=0.4.2",
+    "holo-search-sdk==0.4.2",
 ]
 description = "Dify vector store backend (dify-vdb-hologres)."
 
diff --git a/api/providers/vdb/vdb-iris/pyproject.toml b/api/providers/vdb/vdb-iris/pyproject.toml
index 6dd7a8e073..c4da985032 100644
--- a/api/providers/vdb/vdb-iris/pyproject.toml
+++ b/api/providers/vdb/vdb-iris/pyproject.toml
@@ -3,7 +3,7 @@ name = "dify-vdb-iris"
 version = "0.0.1"
 
 dependencies = [
-    "intersystems-irispython>=5.1.0",
+    "intersystems-irispython>=5.1.0,<6.0.0",
 ]
 description = "Dify vector store backend (dify-vdb-iris)."
 
diff --git a/api/providers/vdb/vdb-lindorm/pyproject.toml b/api/providers/vdb/vdb-lindorm/pyproject.toml
index 0cffc67491..33268cc981 100644
--- a/api/providers/vdb/vdb-lindorm/pyproject.toml
+++ b/api/providers/vdb/vdb-lindorm/pyproject.toml
@@ -4,7 +4,7 @@ version = "0.0.1"
 
 dependencies = [
     "opensearch-py==3.1.0",
-    "tenacity>=8.0.0",
+    "tenacity>=8.0.0,<9.0.0",
 ]
 description = "Dify vector store backend (dify-vdb-lindorm)."
 
diff --git a/api/providers/vdb/vdb-matrixone/pyproject.toml b/api/providers/vdb/vdb-matrixone/pyproject.toml
index 53363ed7d9..e87b9f2ec2 100644
--- a/api/providers/vdb/vdb-matrixone/pyproject.toml
+++ b/api/providers/vdb/vdb-matrixone/pyproject.toml
@@ -3,7 +3,7 @@ name = "dify-vdb-matrixone"
 version = "0.0.1"
 
 dependencies = [
-    "mo-vector~=0.1.13",
+    "mo-vector==0.1.13",
 ]
 description = "Dify vector store backend (dify-vdb-matrixone)."
 
diff --git a/api/providers/vdb/vdb-myscale/pyproject.toml b/api/providers/vdb/vdb-myscale/pyproject.toml
index 13e0f35d23..895d498ba7 100644
--- a/api/providers/vdb/vdb-myscale/pyproject.toml
+++ b/api/providers/vdb/vdb-myscale/pyproject.toml
@@ -3,7 +3,7 @@ name = "dify-vdb-myscale"
 version = "0.0.1"
 
 dependencies = [
-    "clickhouse-connect~=0.15.0",
+    "clickhouse-connect==0.15.1",
 ]
 description = "Dify vector store backend (dify-vdb-myscale)."
 
diff --git a/api/providers/vdb/vdb-oceanbase/pyproject.toml b/api/providers/vdb/vdb-oceanbase/pyproject.toml
index 887869a41c..7888c89724 100644
--- a/api/providers/vdb/vdb-oceanbase/pyproject.toml
+++ b/api/providers/vdb/vdb-oceanbase/pyproject.toml
@@ -3,8 +3,8 @@ name = "dify-vdb-oceanbase"
 version = "0.0.1"
 
 dependencies = [
-    "pyobvector~=0.2.17",
-    "mysql-connector-python>=9.3.0",
+    "pyobvector==0.2.25",
+    "mysql-connector-python>=9.3.0,<10.0.0",
 ]
 description = "Dify vector store backend (dify-vdb-oceanbase)."
 
diff --git a/api/providers/vdb/vdb-pgvecto-rs/pyproject.toml b/api/providers/vdb/vdb-pgvecto-rs/pyproject.toml
index 9a25442e9e..d1e25a31ca 100644
--- a/api/providers/vdb/vdb-pgvecto-rs/pyproject.toml
+++ b/api/providers/vdb/vdb-pgvecto-rs/pyproject.toml
@@ -3,7 +3,7 @@ name = "dify-vdb-pgvecto-rs"
 version = "0.0.1"
 
 dependencies = [
-    "pgvecto-rs[sqlalchemy]~=0.2.2",
+    "pgvecto-rs[sqlalchemy]==0.2.2",
 ]
 description = "Dify vector store backend (dify-vdb-pgvecto-rs)."
 
diff --git a/api/providers/vdb/vdb-vastbase/pyproject.toml b/api/providers/vdb/vdb-vastbase/pyproject.toml
index 287eb147dc..8fccc3b423 100644
--- a/api/providers/vdb/vdb-vastbase/pyproject.toml
+++ b/api/providers/vdb/vdb-vastbase/pyproject.toml
@@ -3,7 +3,7 @@ name = "dify-vdb-vastbase"
 version = "0.0.1"
 
 dependencies = [
-    "pyobvector~=0.2.17",
+    "pyobvector==0.2.25",
 ]
 description = "Dify vector store backend (dify-vdb-vastbase)."
 
diff --git a/api/pyproject.toml b/api/pyproject.toml
index aa1af71b4c..1920a9f4de 100644
--- a/api/pyproject.toml
+++ b/api/pyproject.toml
@@ -5,48 +5,48 @@ requires-python = "~=3.12.0"
 
 dependencies = [
     # Legacy: mature and widely deployed
-    "bleach>=6.3.0",
-    "boto3>=1.43.10",
-    "celery>=5.6.3",
-    "croniter>=6.2.2",
+    "bleach>=6.3.0,<7.0.0",
+    "boto3>=1.43.10,<2.0.0",
+    "celery>=5.6.3,<6.0.0",
+    "croniter>=6.2.2,<7.0.0",
     "dify-agent",
     "flask>=3.1.3,<4.0.0",
-    "flask-cors>=6.0.2",
-    "gevent>=26.4.0",
-    "gevent-websocket>=0.10.1",
-    "gmpy2>=2.3.0",
-    "google-api-python-client>=2.196.0",
-    "gunicorn>=26.0.0",
-    "psycogreen>=1.0.2",
-    "psycopg2-binary>=2.9.12",
-    "python-socketio>=5.13.0",
-    "redis[hiredis]>=7.4.0",
-    "sendgrid>=6.12.5",
-    "sseclient-py>=1.8.0",
+    "flask-cors>=6.0.2,<7.0.0",
+    "gevent>=26.4.0,<26.5.0",
+    "gevent-websocket==0.10.1",
+    "gmpy2>=2.3.0,<3.0.0",
+    "google-api-python-client>=2.196.0,<3.0.0",
+    "gunicorn>=26.0.0,<27.0.0",
+    "psycogreen>=1.0.2,<2.0.0",
+    "psycopg2-binary>=2.9.12,<3.0.0",
+    "python-socketio>=5.13.0,<6.0.0",
+    "redis[hiredis]>=7.4.0,<8.0.0",
+    "sendgrid>=6.12.5,<7.0.0",
+    "sseclient-py>=1.8.0,<2.0.0",
     # Stable: production-proven, cap below the next major
-    "aliyun-log-python-sdk>=0.9.44,<1.0.0",
+    "aliyun-log-python-sdk==0.9.44",
     "azure-identity>=1.25.3,<2.0.0",
     "flask-compress>=1.24,<2.0.0",
-    "flask-login>=0.6.3,<1.0.0",
+    "flask-login==0.6.3",
     "flask-migrate>=4.1.0,<5.0.0",
     "flask-orjson>=2.0.0,<3.0.0",
     "flask-restx>=1.3.2,<2.0.0",
     "google-cloud-aiplatform>=1.151.0,<2.0.0",
-    "httpx[socks]>=0.28.1,<1.0.0",
-    "opentelemetry-distro>=0.62b1,<1.0.0",
-    "opentelemetry-instrumentation-celery>=0.62b0,<1.0.0",
-    "opentelemetry-instrumentation-flask>=0.62b0,<1.0.0",
-    "opentelemetry-instrumentation-httpx>=0.62b0,<1.0.0",
-    "opentelemetry-instrumentation-redis>=0.62b0,<1.0.0",
-    "opentelemetry-instrumentation-sqlalchemy>=0.62b0,<1.0.0",
+    "httpx[socks]==0.28.1",
+    "opentelemetry-distro==0.62b1",
+    "opentelemetry-instrumentation-celery==0.62b1",
+    "opentelemetry-instrumentation-flask==0.62b1",
+    "opentelemetry-instrumentation-httpx==0.62b1",
+    "opentelemetry-instrumentation-redis==0.62b1",
+    "opentelemetry-instrumentation-sqlalchemy==0.62b1",
     "opentelemetry-propagator-b3>=1.41.1,<2.0.0",
-    "readabilipy>=0.3.0,<1.0.0",
+    "readabilipy==0.3.0",
     "resend>=2.27.0,<3.0.0",
     # Emerging: newer and fast-moving, use compatible pins
-    "fastopenapi[flask]~=0.7.0",
-    "graphon~=0.4.0",
-    "httpx-sse~=0.4.0",
-    "json-repair~=0.59.4",
+    "fastopenapi[flask]==0.7.0",
+    "graphon==0.4.0",
+    "httpx-sse==0.4.3",
+    "json-repair==0.59.4",
 ]
 # Before adding new dependency, consider place it in
 # alphabet order (a-z) and suitable group.
@@ -103,8 +103,8 @@ dify-trace-weave = { workspace = true }
 default-groups = ["storage", "tools", "vdb-all", "trace-all"]
 package = false
 override-dependencies = [
-    "litellm>=1.83.10",
-    "pyarrow>=18.0.0",
+    "litellm>=1.83.10,<2.0.0",
+    "pyarrow>=23.0.1,<24.0.0",
 ]
 
 [dependency-groups]
@@ -183,21 +183,21 @@ dev = [
 # Required for storage clients
 ############################################################
 storage = [
-    "azure-storage-blob>=12.29.0",
-    "bce-python-sdk>=0.9.71",
-    "cos-python-sdk-v5>=1.9.43",
-    "esdk-obs-python>=3.22.2",
-    "google-cloud-storage>=3.10.1",
-    "opendal>=0.46.0",
-    "oss2>=2.19.1",
-    "supabase>=2.30.0",
-    "tos>=2.9.0",
+    "azure-storage-blob>=12.29.0,<13.0.0",
+    "bce-python-sdk==0.9.71",
+    "cos-python-sdk-v5>=1.9.43,<2.0.0",
+    "esdk-obs-python>=3.22.2,<4.0.0",
+    "google-cloud-storage>=3.10.1,<4.0.0",
+    "opendal==0.46.0",
+    "oss2>=2.19.1,<3.0.0",
+    "supabase>=2.30.0,<3.0.0",
+    "tos>=2.9.0,<3.0.0",
 ]
 
 ############################################################
 # [ Tools ] dependency group
 ############################################################
-tools = ["cloudscraper>=1.2.71", "nltk>=3.9.1"]
+tools = ["cloudscraper>=1.2.71,<2.0.0", "nltk>=3.9.1,<4.0.0"]
 
 ############################################################
 # [ VDB ] workspace plugins — hollow packages under providers/vdb/*
@@ -267,7 +267,7 @@ vdb-vastbase = ["dify-vdb-vastbase"]
 vdb-vikingdb = ["dify-vdb-vikingdb"]
 vdb-weaviate = ["dify-vdb-weaviate"]
 # Optional client used by some tests / integrations (not a vector backend plugin)
-vdb-xinference = ["xinference-client>=2.7.0"]
+vdb-xinference = ["xinference-client>=2.7.0,<3.0.0"]
 
 trace-all = [
     "dify-trace-aliyun",
diff --git a/api/uv.lock b/api/uv.lock
index b6231698d2..5e8792207e 100644
--- a/api/uv.lock
+++ b/api/uv.lock
@@ -51,8 +51,8 @@ members = [
     "dify-vdb-weaviate",
 ]
 overrides = [
-    { name = "litellm", specifier = ">=1.83.10" },
-    { name = "pyarrow", specifier = ">=18.0.0" },
+    { name = "litellm", specifier = ">=1.83.10,<2.0.0" },
+    { name = "pyarrow", specifier = ">=23.0.1,<24.0.0" },
 ]
 
 [[package]]
@@ -1291,17 +1291,17 @@ dependencies = [
 
 [package.metadata]
 requires-dist = [
-    { name = "fastapi", marker = "extra == 'server'", specifier = ">=0.136.0" },
-    { name = "graphon", marker = "extra == 'server'", specifier = "~=0.2.2" },
-    { name = "httpx", specifier = ">=0.28.1" },
-    { name = "jsonschema", marker = "extra == 'server'", specifier = ">=4.23.0" },
+    { name = "fastapi", marker = "extra == 'server'", specifier = "==0.136.0" },
+    { name = "graphon", marker = "extra == 'server'", specifier = "==0.2.2" },
+    { name = "httpx", specifier = "==0.28.1" },
+    { name = "jsonschema", marker = "extra == 'server'", specifier = ">=4.23.0,<5.0.0" },
     { name = "pydantic", specifier = ">=2.12.5,<2.13" },
-    { name = "pydantic-ai-slim", specifier = ">=1.85.1" },
-    { name = "pydantic-ai-slim", extras = ["anthropic", "google", "openai"], marker = "extra == 'server'", specifier = ">=1.85.1" },
-    { name = "pydantic-settings", marker = "extra == 'server'", specifier = ">=2.12.0" },
-    { name = "redis", marker = "extra == 'server'", specifier = ">=5" },
-    { name = "typing-extensions", specifier = ">=4.12.2" },
-    { name = "uvicorn", extras = ["standard"], marker = "extra == 'server'", specifier = ">=0.38.0" },
+    { name = "pydantic-ai-slim", specifier = ">=1.85.1,<2.0.0" },
+    { name = "pydantic-ai-slim", extras = ["anthropic", "google", "openai"], marker = "extra == 'server'", specifier = ">=1.85.1,<2.0.0" },
+    { name = "pydantic-settings", marker = "extra == 'server'", specifier = ">=2.12.0,<3.0.0" },
+    { name = "redis", marker = "extra == 'server'", specifier = ">=7.4.0,<8.0.0" },
+    { name = "typing-extensions", specifier = ">=4.12.2,<5.0.0" },
+    { name = "uvicorn", extras = ["standard"], marker = "extra == 'server'", specifier = "==0.46.0" },
 ]
 provides-extras = ["server"]
 
@@ -1609,46 +1609,46 @@ vdb-xinference = [
 
 [package.metadata]
 requires-dist = [
-    { name = "aliyun-log-python-sdk", specifier = ">=0.9.44,<1.0.0" },
+    { name = "aliyun-log-python-sdk", specifier = "==0.9.44" },
     { name = "azure-identity", specifier = ">=1.25.3,<2.0.0" },
-    { name = "bleach", specifier = ">=6.3.0" },
-    { name = "boto3", specifier = ">=1.43.10" },
-    { name = "celery", specifier = ">=5.6.3" },
-    { name = "croniter", specifier = ">=6.2.2" },
+    { name = "bleach", specifier = ">=6.3.0,<7.0.0" },
+    { name = "boto3", specifier = ">=1.43.10,<2.0.0" },
+    { name = "celery", specifier = ">=5.6.3,<6.0.0" },
+    { name = "croniter", specifier = ">=6.2.2,<7.0.0" },
     { name = "dify-agent", directory = "../dify-agent" },
-    { name = "fastopenapi", extras = ["flask"], specifier = "~=0.7.0" },
+    { name = "fastopenapi", extras = ["flask"], specifier = "==0.7.0" },
     { name = "flask", specifier = ">=3.1.3,<4.0.0" },
     { name = "flask-compress", specifier = ">=1.24,<2.0.0" },
-    { name = "flask-cors", specifier = ">=6.0.2" },
-    { name = "flask-login", specifier = ">=0.6.3,<1.0.0" },
+    { name = "flask-cors", specifier = ">=6.0.2,<7.0.0" },
+    { name = "flask-login", specifier = "==0.6.3" },
     { name = "flask-migrate", specifier = ">=4.1.0,<5.0.0" },
     { name = "flask-orjson", specifier = ">=2.0.0,<3.0.0" },
     { name = "flask-restx", specifier = ">=1.3.2,<2.0.0" },
-    { name = "gevent", specifier = ">=26.4.0" },
-    { name = "gevent-websocket", specifier = ">=0.10.1" },
-    { name = "gmpy2", specifier = ">=2.3.0" },
-    { name = "google-api-python-client", specifier = ">=2.196.0" },
+    { name = "gevent", specifier = ">=26.4.0,<26.5.0" },
+    { name = "gevent-websocket", specifier = "==0.10.1" },
+    { name = "gmpy2", specifier = ">=2.3.0,<3.0.0" },
+    { name = "google-api-python-client", specifier = ">=2.196.0,<3.0.0" },
     { name = "google-cloud-aiplatform", specifier = ">=1.151.0,<2.0.0" },
-    { name = "graphon", specifier = "~=0.4.0" },
-    { name = "gunicorn", specifier = ">=26.0.0" },
-    { name = "httpx", extras = ["socks"], specifier = ">=0.28.1,<1.0.0" },
-    { name = "httpx-sse", specifier = "~=0.4.0" },
-    { name = "json-repair", specifier = "~=0.59.4" },
-    { name = "opentelemetry-distro", specifier = ">=0.62b1,<1.0.0" },
-    { name = "opentelemetry-instrumentation-celery", specifier = ">=0.62b0,<1.0.0" },
-    { name = "opentelemetry-instrumentation-flask", specifier = ">=0.62b0,<1.0.0" },
-    { name = "opentelemetry-instrumentation-httpx", specifier = ">=0.62b0,<1.0.0" },
-    { name = "opentelemetry-instrumentation-redis", specifier = ">=0.62b0,<1.0.0" },
-    { name = "opentelemetry-instrumentation-sqlalchemy", specifier = ">=0.62b0,<1.0.0" },
+    { name = "graphon", specifier = "==0.4.0" },
+    { name = "gunicorn", specifier = ">=26.0.0,<27.0.0" },
+    { name = "httpx", extras = ["socks"], specifier = "==0.28.1" },
+    { name = "httpx-sse", specifier = "==0.4.3" },
+    { name = "json-repair", specifier = "==0.59.4" },
+    { name = "opentelemetry-distro", specifier = "==0.62b1" },
+    { name = "opentelemetry-instrumentation-celery", specifier = "==0.62b1" },
+    { name = "opentelemetry-instrumentation-flask", specifier = "==0.62b1" },
+    { name = "opentelemetry-instrumentation-httpx", specifier = "==0.62b1" },
+    { name = "opentelemetry-instrumentation-redis", specifier = "==0.62b1" },
+    { name = "opentelemetry-instrumentation-sqlalchemy", specifier = "==0.62b1" },
     { name = "opentelemetry-propagator-b3", specifier = ">=1.41.1,<2.0.0" },
-    { name = "psycogreen", specifier = ">=1.0.2" },
-    { name = "psycopg2-binary", specifier = ">=2.9.12" },
-    { name = "python-socketio", specifier = ">=5.13.0" },
-    { name = "readabilipy", specifier = ">=0.3.0,<1.0.0" },
-    { name = "redis", extras = ["hiredis"], specifier = ">=7.4.0" },
+    { name = "psycogreen", specifier = ">=1.0.2,<2.0.0" },
+    { name = "psycopg2-binary", specifier = ">=2.9.12,<3.0.0" },
+    { name = "python-socketio", specifier = ">=5.13.0,<6.0.0" },
+    { name = "readabilipy", specifier = "==0.3.0" },
+    { name = "redis", extras = ["hiredis"], specifier = ">=7.4.0,<8.0.0" },
     { name = "resend", specifier = ">=2.27.0,<3.0.0" },
-    { name = "sendgrid", specifier = ">=6.12.5" },
-    { name = "sseclient-py", specifier = ">=1.8.0" },
+    { name = "sendgrid", specifier = ">=6.12.5,<7.0.0" },
+    { name = "sseclient-py", specifier = ">=1.8.0,<2.0.0" },
 ]
 
 [package.metadata.requires-dev]
@@ -1716,19 +1716,19 @@ dev = [
     { name = "xinference-client", specifier = ">=2.7.0" },
 ]
 storage = [
-    { name = "azure-storage-blob", specifier = ">=12.29.0" },
-    { name = "bce-python-sdk", specifier = ">=0.9.71" },
-    { name = "cos-python-sdk-v5", specifier = ">=1.9.43" },
-    { name = "esdk-obs-python", specifier = ">=3.22.2" },
-    { name = "google-cloud-storage", specifier = ">=3.10.1" },
-    { name = "opendal", specifier = ">=0.46.0" },
-    { name = "oss2", specifier = ">=2.19.1" },
-    { name = "supabase", specifier = ">=2.30.0" },
-    { name = "tos", specifier = ">=2.9.0" },
+    { name = "azure-storage-blob", specifier = ">=12.29.0,<13.0.0" },
+    { name = "bce-python-sdk", specifier = "==0.9.71" },
+    { name = "cos-python-sdk-v5", specifier = ">=1.9.43,<2.0.0" },
+    { name = "esdk-obs-python", specifier = ">=3.22.2,<4.0.0" },
+    { name = "google-cloud-storage", specifier = ">=3.10.1,<4.0.0" },
+    { name = "opendal", specifier = "==0.46.0" },
+    { name = "oss2", specifier = ">=2.19.1,<3.0.0" },
+    { name = "supabase", specifier = ">=2.30.0,<3.0.0" },
+    { name = "tos", specifier = ">=2.9.0,<3.0.0" },
 ]
 tools = [
-    { name = "cloudscraper", specifier = ">=1.2.71" },
-    { name = "nltk", specifier = ">=3.9.1" },
+    { name = "cloudscraper", specifier = ">=1.2.71,<2.0.0" },
+    { name = "nltk", specifier = ">=3.9.1,<4.0.0" },
 ]
 trace-aliyun = [{ name = "dify-trace-aliyun", editable = "providers/trace/trace-aliyun" }]
 trace-all = [
@@ -1810,7 +1810,7 @@ vdb-upstash = [{ name = "dify-vdb-upstash", editable = "providers/vdb/vdb-upstas
 vdb-vastbase = [{ name = "dify-vdb-vastbase", editable = "providers/vdb/vdb-vastbase" }]
 vdb-vikingdb = [{ name = "dify-vdb-vikingdb", editable = "providers/vdb/vdb-vikingdb" }]
 vdb-weaviate = [{ name = "dify-vdb-weaviate", editable = "providers/vdb/vdb-weaviate" }]
-vdb-xinference = [{ name = "xinference-client", specifier = ">=2.7.0" }]
+vdb-xinference = [{ name = "xinference-client", specifier = ">=2.7.0,<3.0.0" }]
 
 [[package]]
 name = "dify-trace-aliyun"
@@ -1840,7 +1840,7 @@ dependencies = [
 ]
 
 [package.metadata]
-requires-dist = [{ name = "arize-phoenix-otel", specifier = "~=0.15.0" }]
+requires-dist = [{ name = "arize-phoenix-otel", specifier = "==0.15.0" }]
 
 [[package]]
 name = "dify-trace-langfuse"
@@ -1862,7 +1862,7 @@ dependencies = [
 ]
 
 [package.metadata]
-requires-dist = [{ name = "langsmith", specifier = ">=0.8.0" }]
+requires-dist = [{ name = "langsmith", specifier = "==0.8.5" }]
 
 [[package]]
 name = "dify-trace-mlflow"
@@ -1873,7 +1873,7 @@ dependencies = [
 ]
 
 [package.metadata]
-requires-dist = [{ name = "mlflow-skinny", specifier = ">=3.11.1" }]
+requires-dist = [{ name = "mlflow-skinny", specifier = ">=3.11.1,<4.0.0" }]
 
 [[package]]
 name = "dify-trace-opik"
@@ -1914,7 +1914,7 @@ dependencies = [
 ]
 
 [package.metadata]
-requires-dist = [{ name = "weave", specifier = ">=0.52.36" }]
+requires-dist = [{ name = "weave", specifier = "==0.52.36" }]
 
 [[package]]
 name = "dify-vdb-alibabacloud-mysql"
@@ -1925,7 +1925,7 @@ dependencies = [
 ]
 
 [package.metadata]
-requires-dist = [{ name = "mysql-connector-python", specifier = ">=9.3.0" }]
+requires-dist = [{ name = "mysql-connector-python", specifier = ">=9.3.0,<10.0.0" }]
 
 [[package]]
 name = "dify-vdb-analyticdb"
@@ -1940,8 +1940,8 @@ dependencies = [
 [package.metadata]
 requires-dist = [
     { name = "alibabacloud-gpdb20160503", specifier = "~=5.2.0" },
-    { name = "alibabacloud-tea-openapi", specifier = "~=0.4.3" },
-    { name = "clickhouse-connect", specifier = "~=0.15.0" },
+    { name = "alibabacloud-tea-openapi", specifier = "==0.4.4" },
+    { name = "clickhouse-connect", specifier = "==0.15.1" },
 ]
 
 [[package]]
@@ -1975,7 +1975,7 @@ dependencies = [
 ]
 
 [package.metadata]
-requires-dist = [{ name = "clickzetta-connector-python", specifier = ">=0.8.102" }]
+requires-dist = [{ name = "clickzetta-connector-python", specifier = "==0.8.104" }]
 
 [[package]]
 name = "dify-vdb-couchbase"
@@ -2008,7 +2008,7 @@ dependencies = [
 ]
 
 [package.metadata]
-requires-dist = [{ name = "holo-search-sdk", specifier = ">=0.4.2" }]
+requires-dist = [{ name = "holo-search-sdk", specifier = "==0.4.2" }]
 
 [[package]]
 name = "dify-vdb-huawei-cloud"
@@ -2030,7 +2030,7 @@ dependencies = [
 ]
 
 [package.metadata]
-requires-dist = [{ name = "intersystems-irispython", specifier = ">=5.1.0" }]
+requires-dist = [{ name = "intersystems-irispython", specifier = ">=5.1.0,<6.0.0" }]
 
 [[package]]
 name = "dify-vdb-lindorm"
@@ -2044,7 +2044,7 @@ dependencies = [
 [package.metadata]
 requires-dist = [
     { name = "opensearch-py", specifier = "==3.1.0" },
-    { name = "tenacity", specifier = ">=8.0.0" },
+    { name = "tenacity", specifier = ">=8.0.0,<9.0.0" },
 ]
 
 [[package]]
@@ -2056,7 +2056,7 @@ dependencies = [
 ]
 
 [package.metadata]
-requires-dist = [{ name = "mo-vector", specifier = "~=0.1.13" }]
+requires-dist = [{ name = "mo-vector", specifier = "==0.1.13" }]
 
 [[package]]
 name = "dify-vdb-milvus"
@@ -2078,7 +2078,7 @@ dependencies = [
 ]
 
 [package.metadata]
-requires-dist = [{ name = "clickhouse-connect", specifier = "~=0.15.0" }]
+requires-dist = [{ name = "clickhouse-connect", specifier = "==0.15.1" }]
 
 [[package]]
 name = "dify-vdb-oceanbase"
@@ -2091,8 +2091,8 @@ dependencies = [
 
 [package.metadata]
 requires-dist = [
-    { name = "mysql-connector-python", specifier = ">=9.3.0" },
-    { name = "pyobvector", specifier = "~=0.2.17" },
+    { name = "mysql-connector-python", specifier = ">=9.3.0,<10.0.0" },
+    { name = "pyobvector", specifier = "==0.2.25" },
 ]
 
 [[package]]
@@ -2131,7 +2131,7 @@ dependencies = [
 ]
 
 [package.metadata]
-requires-dist = [{ name = "pgvecto-rs", extras = ["sqlalchemy"], specifier = "~=0.2.2" }]
+requires-dist = [{ name = "pgvecto-rs", extras = ["sqlalchemy"], specifier = "==0.2.2" }]
 
 [[package]]
 name = "dify-vdb-pgvector"
@@ -2224,7 +2224,7 @@ dependencies = [
 ]
 
 [package.metadata]
-requires-dist = [{ name = "pyobvector", specifier = "~=0.2.17" }]
+requires-dist = [{ name = "pyobvector", specifier = "==0.2.25" }]
 
 [[package]]
 name = "dify-vdb-vikingdb"
@@ -6443,11 +6443,11 @@ wheels = [
 
 [[package]]
 name = "tenacity"
-version = "9.1.2"
+version = "8.5.0"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/0a/d4/2b0cd0fe285e14b36db076e78c93766ff1d529d70408bd1d2a5a84f1d929/tenacity-9.1.2.tar.gz", hash = "sha256:1169d376c297e7de388d18b4481760d478b0e99a777cad3a9c86e556f4b697cb", size = 48036, upload-time = "2025-04-02T08:25:09.966Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/a3/4d/6a19536c50b849338fcbe9290d562b52cbdcf30d8963d3588a68a4107df1/tenacity-8.5.0.tar.gz", hash = "sha256:8bc6c0c8a09b31e6cad13c47afbed1a567518250a9a171418582ed8d9c20ca78", size = 47309, upload-time = "2024-07-05T07:25:31.836Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/e5/30/643397144bfbfec6f6ef821f36f33e57d35946c44a2352d3c9f0ae847619/tenacity-9.1.2-py3-none-any.whl", hash = "sha256:f77bf36710d8b73a50b2dd155c97b870017ad21afe6ab300326b0371b3b05138", size = 28248, upload-time = "2025-04-02T08:25:07.678Z" },
+    { url = "https://files.pythonhosted.org/packages/d2/3f/8ba87d9e287b9d385a02a7114ddcef61b26f86411e121c9003eb509a1773/tenacity-8.5.0-py3-none-any.whl", hash = "sha256:b594c2a5945830c267ce6b79a166228323ed52718f30302c1359836112346687", size = 28165, upload-time = "2024-07-05T07:25:29.591Z" },
 ]
 
 [[package]]
diff --git a/dify-agent/pyproject.toml b/dify-agent/pyproject.toml
index d9b2796570..7975b042d4 100644
--- a/dify-agent/pyproject.toml
+++ b/dify-agent/pyproject.toml
@@ -3,23 +3,23 @@ name = "dify-agent"
 version = "0.1.0"
 description = "Add your description here"
 readme = "README.md"
-requires-python = ">=3.12"
+requires-python = ">=3.12,<4.0"
 dependencies = [
-    "httpx>=0.28.1",
+    "httpx==0.28.1",
     "pydantic>=2.12.5,<2.13",
-    "pydantic-ai-slim>=1.85.1",
-    "typing-extensions>=4.12.2",
+    "pydantic-ai-slim>=1.85.1,<2.0.0",
+    "typing-extensions>=4.12.2,<5.0.0",
 ]
 
 [project.optional-dependencies]
 server = [
-    "fastapi>=0.136.0",
-    "graphon~=0.2.2",
-    "jsonschema>=4.23.0",
-    "pydantic-ai-slim[anthropic,google,openai]>=1.85.1",
-    "pydantic-settings>=2.12.0",
-    "redis>=5",
-    "uvicorn[standard]>=0.38.0",
+    "fastapi==0.136.0",
+    "graphon==0.2.2",
+    "jsonschema>=4.23.0,<5.0.0",
+    "pydantic-ai-slim[anthropic,google,openai]>=1.85.1,<2.0.0",
+    "pydantic-settings>=2.12.0,<3.0.0",
+    "redis>=7.4.0,<8.0.0",
+    "uvicorn[standard]==0.46.0",
 ]
 
 [tool.setuptools.packages.find]
diff --git a/dify-agent/uv.lock b/dify-agent/uv.lock
index d3b4b09ba0..f18d4e3e4a 100644
--- a/dify-agent/uv.lock
+++ b/dify-agent/uv.lock
@@ -1,6 +1,6 @@
 version = 1
 revision = 3
-requires-python = ">=3.12"
+requires-python = ">=3.12, <4.0"
 resolution-markers = [
     "python_full_version >= '3.14' and sys_platform == 'win32'",
     "python_full_version >= '3.14' and sys_platform == 'emscripten'",
@@ -610,17 +610,17 @@ docs = [
 
 [package.metadata]
 requires-dist = [
-    { name = "fastapi", marker = "extra == 'server'", specifier = ">=0.136.0" },
-    { name = "graphon", marker = "extra == 'server'", specifier = "~=0.2.2" },
-    { name = "httpx", specifier = ">=0.28.1" },
-    { name = "jsonschema", marker = "extra == 'server'", specifier = ">=4.23.0" },
+    { name = "fastapi", marker = "extra == 'server'", specifier = "==0.136.0" },
+    { name = "graphon", marker = "extra == 'server'", specifier = "==0.2.2" },
+    { name = "httpx", specifier = "==0.28.1" },
+    { name = "jsonschema", marker = "extra == 'server'", specifier = ">=4.23.0,<5.0.0" },
     { name = "pydantic", specifier = ">=2.12.5,<2.13" },
-    { name = "pydantic-ai-slim", specifier = ">=1.85.1" },
-    { name = "pydantic-ai-slim", extras = ["anthropic", "google", "openai"], marker = "extra == 'server'", specifier = ">=1.85.1" },
-    { name = "pydantic-settings", marker = "extra == 'server'", specifier = ">=2.12.0" },
-    { name = "redis", marker = "extra == 'server'", specifier = ">=5" },
-    { name = "typing-extensions", specifier = ">=4.12.2" },
-    { name = "uvicorn", extras = ["standard"], marker = "extra == 'server'", specifier = ">=0.38.0" },
+    { name = "pydantic-ai-slim", specifier = ">=1.85.1,<2.0.0" },
+    { name = "pydantic-ai-slim", extras = ["anthropic", "google", "openai"], marker = "extra == 'server'", specifier = ">=1.85.1,<2.0.0" },
+    { name = "pydantic-settings", marker = "extra == 'server'", specifier = ">=2.12.0,<3.0.0" },
+    { name = "redis", marker = "extra == 'server'", specifier = ">=7.4.0,<8.0.0" },
+    { name = "typing-extensions", specifier = ">=4.12.2,<5.0.0" },
+    { name = "uvicorn", extras = ["standard"], marker = "extra == 'server'", specifier = "==0.46.0" },
 ]
 provides-extras = ["server"]