[gh-worker-campaigns-3e9aa4]

Summary: High-severity security update — 2 packages upgraded (MINOR changes included)

Manifests changed:

• pyproject.toml (uv)

---

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.

---

Updates

Package	From	To	Type	Dep Type	Vulnerabilities Fixed
urllib3	2.7.0	2.8.0	minor	Direct	2 HIGH, 1 MEDIUM
black	26.3.1	26.10.1	minor	Direct	1 HIGH

---

Security Details

🚨 Critical & High Severity (3 fixed)

Package	CVE	Severity	Summary	Unsafe Version	Fixed In	Case
black	CVE-2026-114134	HIGH	Black: GitHub Action installs unvalidated required-version from pyproject.toml	26.3.1	26.10.1	-
urllib3	CVE-2026-97687	HIGH	urllib3: HTTPS proxy TLS configuration may be ignored or overridden	2.7.0	2.8.0	-
urllib3	CVE-2026-97689	HIGH	urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory	2.7.0	2.8.0	-

ℹ️ Other Vulnerabilities (1)

Package	CVE	Severity	Summary	Unsafe Version	Fixed In	Case
urllib3	CVE-2026-97688	MEDIUM	urllib3: Chunked Deflate streaming can enter an infinite loop	2.7.0	2.8.0	-

---

Review Checklist

Standard review:

• Review changes for compatibility with your code
• Check for breaking changes in release notes
• Run tests locally or wait for CI
• Approve and merge this PR

---

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System

[datadog-prod-us1-4]

✨ Unblock PR with BitsAI

❌ Errors

Your PR has failed checks. Please review the issues below and take necessary action before merging.

🚦 4 Pipeline jobs failed

PR Checks | run-checks / code-quality — 🔧 Needs a code fix, caused by this PR

View more details · View in GitHub Actions

PR Checks | run-checks / integration-tests (3.12) — 🔧 Needs a code fix, caused by this PR

View more details · View in GitHub Actions

PR Checks | run-checks / unit-tests — 🔧 Needs a code fix, caused by this PR

View more details · View in GitHub Actions

View all 4 failed jobs.

Useful? React with 👍 / 👎

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 7752b57 | Docs | View more details | Give us feedback!}