[Vidit-Ostwal]

Summary

• require Authlib 1.9.0+ to address GHSA-6v38-4h7w-rj9h
• require MessagePack 1.2.3+ to address GHSA-j586-36cw-2gc2 and allow its release through the package cutoff
• regenerate uv.lock with Authlib 1.9.1 and MessagePack 1.2.3

Commits

• 3b6d2453d updates the security floors and lockfile for the two pip-audit findings.

Verification

• uv lock --check
• git diff --check
• uv sync --all-groups --all-extras --no-install-project
• pip-audit confirms Authlib 1.9.1 and MessagePack 1.2.3 have zero vulnerabilities for the reported advisories

Note

A fresh pip-audit database also reports unrelated pymongo==4.18.2 advisory GHSA-98qm-wvgf-w4cf, which is intentionally outside this focused remediation.

---

Note

Medium Risk
Large LiteLLM jump and async streaming tool-call handling affect the LLM client path; dependency overrides change Mongo/DNS resolution on 3.11+.

Overview
This PR tightens dependency security floors across the workspace and refreshes uv.lock, while adapting CrewAI to a newer LiteLLM line.

Supply-chain / versions: Root and package pyproject.toml files raise minimums for Authlib (≥1.9.0), msgpack (≥1.2.3, with an updated exclude-newer-package cutoff), and LiteLLM (≥1.100.4 in crewai[litellm]). pymongo is split by Python: ≥4.18.3 on 3.11+ (and dnspython ≥2.9.0 on 3.11+ via overrides), while 3.10 stays on 4.18.2–<4.18.3 for MongoDB extras. Comments document the addressed GHSA/CVE IDs.

Runtime: In llm.py, async LiteLLM streaming now tolerates varied tool-call delta shapes by typing tool calls as list[Any] and skipping chunks without a function attribute before accumulating names/arguments.

Tests: New tests/conftest.py sets LITELLM_LOCAL_MODEL_COST_MAP and, on Python 3.10, auto-skips LiteLLM import paths; several LiteLLM-focused tests are marked 3.11+ only.

^{Reviewed by Cursor Bugbot for commit 2f67d7e. Bugbot is set up for automated code reviews on this repo. Configure here.}

[strix-security]

Strix Security Review

Warning

This pull request has 9 commits after the last Strix review (3b6d245). Strix has not reviewed these changes.
Automatic review on push is off for this repository. To review the latest changes, tag @strix-security in a comment, or turn on re-review on push.

✅ No open security findings.

PR summary: This PR raises the minimum supported versions of Authlib (to 1.9.0+) and MessagePack (to 1.2.3+) in pyproject.toml, extends MessagePack's supply-chain cutoff date, and regenerates uv.lock so the two patched releases (Authlib 1.9.1, MessagePack 1.2.3) are pinned. It remediates the GHSA-6v38-4h7w-rj9h and GHSA-j586-36cw-2gc2 advisories, and involves no product code changes.

Review summary

The diff is limited to dependency metadata: pyproject.toml raises the authlib floor from 1.6.12 to 1.9.0 and the msgpack floor from 1.2.1 to 1.2.3, moves msgpack's exclude-newer-package cutoff so the fixed release can resolve, and uv.lock is regenerated with authlib 1.9.1 and msgpack 1.2.3. Every version movement is an upgrade, only one lock entry exists per package, no pin or constraint was removed, and the remaining lock diff consists of semantically equivalent marker rewrites, reordered keys, and wheel hashes. No application code, auth logic, or runtime configuration changed, so there is no new attack surface and no security issue to report.

_{Review 1 on this PR · 3b6d245 · requested Oct 27 15:50 UTC when the PR was opened}

---

Reviewed by Strix
_{Re-run review · Configure security review settings}

[cursor]

Stale Bugbot comment from a previous run.

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 63c987f. Configure here.}