security: vulnerability remediation

[kernel-internal]

Vulnerability Remediation

This PR was generated by the Socket-centric vulnerability remediation workflow. Review the planned dependency changes and confirmation evidence before merging.

Fixed

CVE/GHSA	Package	Ecosystem	Old Version	New Version	Manifest	Confirmation
GHSA-gc5v-m9x4-r6x2	requests	None	2.32.5	2.33.0		confirmed

Not Included

• Deferred by batch limit: 48 advisories. They will be considered by future runs.
• Other deferred scanner findings: 4.
• Unconfirmed attempted fixes: 0.

Deferred details

CVE/GHSA	Package	Reason
Unavailable from detector	github.com/godbus/dbus/v5	Non-CVE alert is not handled by dependency remediation.
Unavailable from detector	runtime	Non-CVE alert is not handled by dependency remediation.
Unavailable from detector	float	Non-CVE alert is not handled by dependency remediation.
Unavailable from detector	typebox	Non-CVE alert is not handled by dependency remediation.

---

Note

Low Risk
Patch-level dependency bump in a sample template only; no runtime or application logic changes.

Overview
Bumps the requests dependency in the openai-computer-use Python sample template from 2.32.5 to ≥2.33.0 to address GHSA-gc5v-m9x4-r6x2.

Changes are limited to pyproject.toml (minimum version) and uv.lock (resolved 2.33.0 artifacts). No application source files are modified; the template still uses requests for HTTP calls in utils.py as before.

^{Reviewed by Cursor Bugbot for commit 37ea960. Bugbot is set up for automated code reviews on this repo. Configure here.}

[ulziibay-kernel]

Verified: dependency-only change, advisory and patched version confirmed against the GitHub Advisory Database, CI green.