fix: upgrade typer to >=0.13.0, drop click pin and force-reinstall hack

Author: matteius

docker/Dockerfile.source

@@ -56,10 +56,6 @@ RUN pip install --no-cache-dir --upgrade pip \
     && pip install --no-cache-dir /tmp/*.whl \
     && rm /tmp/*.whl
 
-# click 8.3.x broke typer 0.12.5's secondary-flag generation for bool options.
-# Force-reinstall as a separate layer so GHA layer cache can never mask the pin.
-RUN pip install --no-cache-dir --force-reinstall "click==8.1.7"
-
 # Trim build-only system packages
 RUN apt-get purge -y --auto-remove build-essential && rm -rf /var/lib/apt/lists/*
 

pyproject.toml

@@ -247,8 +247,7 @@ dependencies = [
     "sentry-sdk ==2.18.0",
     "sqlalchemy[mypy] ==2.0.36",
     "sqlalchemy-utils ==0.41.2",
-    "click ==8.1.7",
-    "typer ==0.12.5",
+    "typer>=0.13.0",
     "uvicorn[standard]==0.32.0",
     "WTForms==3.2.1",
     "zxcvbn-rs-py==0.1.1",