[BUZZOK-27707] [BUZZOK-27708] [BUZZOK-27709] [BUZZOK-27710] [BUZZOK-27711] [BUZZOK-27712] [BUZZOK-27713] Fix CVEs (#1666)

* Update requirements

* Reconcile dependencies, updated IDs, tags

---------

Co-authored-by: svc-harness-git2 <svc-harness-git2@datarobot.com>

Author: tsdaemon

public_dropin_environments/python311_genai_agents/env_info.json

@@ -4,7 +4,7 @@
   "description": "This template environment can be used to create GenAI-powered agents using CrewAI, LangGraph, or Llama-Index. Similar to other drop-in environments, you can either include a .pth artifact or any other code needed to deserialize your model, and optionally a custom.py file. You can also use this environment in codespaces.",
   "programmingLanguage": "python",
   "label": "",
-  "environmentVersionId": "68c41d6031714f1240b5694c",
+  "environmentVersionId": "68d25b5e0e1e2511e4380df6",
   "environmentVersionDescription": "",
   "isPublic": true,
   "isDownloadable": true,
@@ -15,8 +15,8 @@
   "contextUrl": "https://github.com/datarobot/datarobot-user-models/tree/master/public_dropin_environments/python311_genai_agents",
   "imageRepository": "env-python-genai-agents",
   "tags": [
-    "v11.2.0-68c41d6031714f1240b5694c",
-    "68c41d6031714f1240b5694c",
+    "v11.2.0-68d25b5e0e1e2511e4380df6",
+    "68d25b5e0e1e2511e4380df6",
     "v11.2.0-latest"
   ]
 }

public_dropin_environments/python311_genai_agents/requirements.in

@@ -15,9 +15,13 @@ uwsgi
 flask>=3.1.1
 requests>=2.32.4
 protobuf>=5.29.5,<6.0.0
-starlette>=0.40.0
+starlette>=0.47.2
 pillow>=11.3.0
 urllib3>=2.5.0
+uv>=0.8.6
+aiohttp>=3.12.14
+h2>=4.3.0
+pypdf>=6.0.0
 
 # GenAI Environment
 click>=8.1.8

public_dropin_environments/python311_genai_agents/requirements.txt

@@ -10,11 +10,10 @@ aioboto3==15.1.0
 aiobotocore[boto3]==2.24.0
 aiofiles==24.1.0
 aiohappyeyeballs==2.6.1
-aiohttp==3.11.18
+aiohttp==3.12.15
 aioitertools==0.12.0
-aiosignal==1.3.2
+aiosignal==1.4.0
 aiosqlite==0.21.0
-alembic==1.15.2
 annotated-types==0.7.0
 annoy==1.17.3
 anthropic==0.66.0
@@ -52,8 +51,8 @@ cohere==5.17.0
 colorama==0.4.6
 coloredlogs==15.0.1
 comm==0.2.2
-crewai==0.177.0
-crewai-tools==0.69.0
+crewai==0.193.2
+crewai-tools==0.73.1
 cryptography==44.0.3
 dataclasses-json==0.6.7
 datarobot[auth]==3.8.2
@@ -78,13 +77,12 @@ docstring-parser==0.16
 dotenv==0.9.9
 durationpy==0.9
 ecs-logging==2.2.0
-embedchain==0.1.128
 et-xmlfile==2.0.0
 eval-type-backport==0.2.2
 exceptiongroup==1.3.0
 execnet==2.1.1
 executing==2.2.0
-fastapi==0.115.12
+fastapi==0.117.1
 fastavro==1.10.0
 fastembed==0.6.0
 fastjsonschema==2.21.1
@@ -108,20 +106,19 @@ google-crc32c==1.7.1
 google-genai==1.36.0
 google-resumable-media==2.7.2
 googleapis-common-protos[grpc]==1.70.0
-gptcache==0.1.44
 greenlet==3.2.2
 griffe==1.7.3
 groq==0.31.1
 grpc-google-iam-v1==0.14.2
 grpcio==1.71.0
 grpcio-status==1.71.0
 h11==0.16.0
-h2==4.2.0
+h2==4.3.0
 hf-xet==1.1.9
 hpack==4.1.0
 httpcore==1.0.9
 httptools==0.6.4
-httpx[http2]==0.28.1
+httpx==0.28.1
 httpx-sse==0.4.0
 huggingface-hub[inference]==0.34.4
 humanfriendly==10.0
@@ -162,10 +159,8 @@ jupyterlab-pygments==0.3.0
 kubernetes==32.0.1
 lancedb==0.22.0
 langchain==0.3.27
-langchain-cohere==0.3.5
-langchain-community==0.3.29
-langchain-core==0.3.75
-langchain-experimental==0.3.4
+langchain-community==0.3.27
+langchain-core==0.3.76
 langchain-mcp-adapters==0.1.9
 langchain-nvidia-ai-endpoints==0.3.10
 langchain-openai==0.2.14
@@ -200,14 +195,13 @@ llama-parse==0.6.12
 logfire[httpx]==4.6.0
 logfire-api==4.6.0
 loguru==0.7.3
-mako==1.3.10
+lxml==6.0.2
 markdown-it-py==3.0.0
 markupsafe==3.0.2
 marshmallow==3.26.1
 matplotlib-inline==0.1.7
 mcp==1.14.0
 mdurl==0.1.2
-mem0ai==0.1.98
 memory-profiler==0.61.0
 mistralai==1.9.10
 mistune==3.1.3
@@ -227,7 +221,6 @@ nest-asyncio==1.6.0
 networkx==3.4.2
 nexus-rpc==1.1.0
 nltk==3.9.1
-nodeenv==1.9.1
 numpy==2.2.5
 oauthlib==3.2.2
 ollama==0.5.1
@@ -318,24 +311,23 @@ pydantic-ai-slim[ag-ui,anthropic,bedrock,cli,cohere,evals,google,groq,huggingfac
 pydantic-core==2.33.2
 pydantic-evals==1.0.5
 pydantic-graph==1.0.5
-pydantic-settings==2.10.1
+pydantic-settings==2.9.1
 pyee==13.0.0
 pyfiglet==1.0.3
 pygments==2.19.1
 pyjwt[crypto]==2.10.1
-pypdf==5.4.0
+pypdf==6.1.0
 pypdfium2==4.30.1
 pyperclip==1.9.0
 pypika==0.48.9
 pyproject-hooks==1.2.0
-pyright==1.1.400
-pysbd==0.3.4
 pytest==8.4.0
 pytest-asyncio==1.0.0
 pytest-repeat==0.9.4
 pytest-rerunfailures==12.0
 pytest-xdist==3.7.0
 python-dateutil==2.9.0.post0
+python-docx==1.2.0
 python-dotenv==1.1.0
 python-json-logger==3.3.0
 python-multipart==0.0.20
@@ -344,11 +336,10 @@ pytz==2024.2
 pyvis==0.3.2
 pyyaml==6.0.2
 pyzmq==26.4.0
-qdrant-client==1.14.2
 ragas @ git+https://github.com/explodinggradients/ragas@5d59549ad5ef511f621502c563bc55ac5aeb9188#subdirectory=ragas
 referencing==0.36.2
 regex==2024.11.6
-requests==2.32.5
+requests==2.32.4
 requests-oauthlib==2.0.0
 requests-toolbelt==1.0.0
 rfc3339-validator==0.1.4
@@ -359,7 +350,6 @@ rpds-py==0.24.0
 rsa==4.9.1
 ruamel-yaml==0.17.4
 s3transfer==0.13.1
-schema==0.7.7
 scipy==1.15.3
 send2trash==1.8.3
 sentry-sdk==2.29.1
@@ -373,7 +363,7 @@ sqlalchemy[asyncio]==2.0.40
 sse-starlette==2.4.1
 stack-data==0.6.3
 stagehand==0.5.0
-starlette==0.46.2
+starlette==0.48.0
 strenum==0.4.15
 strictyaml==1.4.2
 striprtf==0.0.26
@@ -404,7 +394,7 @@ typing-inspection==0.4.0
 tzdata==2025.2
 uri-template==1.3.0
 urllib3==2.5.0
-uv==0.7.3
+uv==0.8.19
 uvicorn[standard]==0.35.0
 uvloop==0.21.0
 uwsgi==2.0.29
@@ -420,6 +410,7 @@ wheel==0.45.1
 wrapt==1.17.2
 xxhash==3.5.0
 yarl==1.20.0
+youtube-transcript-api==1.2.2
 zipp==3.21.0
 zstandard==0.23.0