fix(deps): bump filelock, litellm, msgpack, oauthlib, virtualenv for new CVEs

.github/workflows/pr-checks.yml

@@ -123,7 +123,7 @@ jobs:
 
       # PHASE 3: Security scanning
       - name: Security - Dependency vulnerabilities (pip-audit)
-        run: .venv/bin/pip-audit --desc --skip-editable --ignore-vuln CVE-2026-4539 --ignore-vuln CVE-2026-3219 --ignore-vuln CVE-2026-49265 --ignore-vuln CVE-2026-49264 # pygments 2.19.2 ReDoS + pip 26.0.1 tar/ZIP ambiguity; no fixes available on PyPI yet — revisit quarterly. oauthlib 3.3.1 PKCE timing side channel + RevocationEndpoint JSONP callback injection: both server-side OAuth endpoints, unused here (transitive via azure-monitor exporter -> msrest); fix 4.0.0 is a major bump still inside the safe-chain minimum package age — revisit next month
+        run: .venv/bin/pip-audit --desc --skip-editable
 
       - name: Security - OSV vulnerability scan (osv-scanner)
         # Complements pip-audit: pip-audit queries the PyPI advisory DB;

osv-scanner.toml

@@ -5,11 +5,3 @@
 # accepts ignores as CLI flags; osv-scanner only reads them from this TOML.
 # When an advisory is fixed upstream, drop the entry here AND remove the
 # matching pip-audit flag in the same PR.
-
-[[IgnoredVulns]]
-id = "CVE-2026-49265"
-reason = "oauthlib 3.3.1 PKCE timing side channel in the server-side code_challenge check, which coder-eval never runs (oauthlib is transitive via azure-monitor-opentelemetry-exporter -> msrest -> requests-oauthlib). The fix, 4.0.0, is a major bump still inside the safe-chain minimum package age; revisit next month."
-
-[[IgnoredVulns]]
-id = "GHSA-hj66-6f7g-4r5v"
-reason = "CVE-2026-49264: oauthlib 3.3.1 RevocationEndpoint JSONP callback injection (only with enable_jsonp=True), a server-side OAuth endpoint coder-eval never runs (oauthlib is transitive via azure-monitor-opentelemetry-exporter -> msrest -> requests-oauthlib). The fix, 4.0.0, is a major bump still inside the safe-chain minimum package age; revisit next month."

pyproject.toml

@@ -105,7 +105,7 @@ uipath = [
 # the litellm-route judge path fails at dispatch with a clear hint pointing
 # back here.
 litellm = [
-    "litellm>=1.95.0,<2.0.0",
+    "litellm>=1.103.1,<2.0.0",
 ]
 # Optional extra that enables Codex agent support:
 #   - CodexAgent implementation using official openai-codex SDK
@@ -224,14 +224,18 @@ override-dependencies = ["openai-codex-cli-bin==0.156.1"]
 constraint-dependencies = [
     # Fix known CVEs in transitive dependencies
     "cryptography>=48.0.1",
+    "filelock>=4.2.1",
     "langgraph>=1.0.10",
     "langsmith>=0.6.3",
+    "msgpack>=1.2.3",
+    "oauthlib>=4.0.0",
     "orjson>=3.11.6",
     "pyjwt>=2.14.0",
     "python-multipart>=0.0.31",
     "requests>=2.33.0",
     "starlette>=1.3.1",
     "urllib3>=2.6.3",
+    "virtualenv>=21.14.13",
 ]
 
 [tool.ruff]