security: vulnerability remediation

[kernel-internal]

Vulnerability Remediation

This PR was generated by the Socket-centric vulnerability remediation workflow. Review the planned dependency changes and confirmation evidence before merging.

Fixed

CVE/GHSA	Package	Ecosystem	Old Version	New Version	Manifest	Confirmation
GHSA-gc5v-m9x4-r6x2	requests	None	2.32.5	2.33.0		confirmed

Not Included

• Deferred by batch limit: 46 advisories. They will be considered by future runs.
• Other deferred scanner findings: 635.
• Unconfirmed attempted fixes: 0.

Deferred details

CVE/GHSA	Package	Reason
Unavailable from detector	al.essio.dev/pkg/shellescape	Non-CVE alert is not handled by dependency remediation.
Unavailable from detector	atomicgo.dev/cursor	Non-CVE alert is not handled by dependency remediation.
Unavailable from detector	atomicgo.dev/keyboard	Non-CVE alert is not handled by dependency remediation.
Unavailable from detector	atomicgo.dev/schedule	Non-CVE alert is not handled by dependency remediation.
Unavailable from detector	github.com/Masterminds/semver/v3	Non-CVE alert is not handled by dependency remediation.
Unavailable from detector	github.com/boyter/gocodewalker	Non-CVE alert is not handled by dependency remediation.
Unavailable from detector	github.com/charmbracelet/colorprofile	Non-CVE alert is not handled by dependency remediation.
Unavailable from detector	github.com/charmbracelet/fang	Non-CVE alert is not handled by dependency remediation.
Unavailable from detector	github.com/charmbracelet/lipgloss/v2	Non-CVE alert is not handled by dependency remediation.
Unavailable from detector	github.com/charmbracelet/x/ansi	Non-CVE alert is not handled by dependency remediation.
...	...	625 additional items omitted from PR body. See workflow artifacts for full details.

---

Note

Low Risk
Dependency-only patch bump in a sample template; no logic changes, only a known security fix for HTTP client usage in utils.py.

Overview
Bumps the requests dependency in the openai-computer-use Python sample template from 2.32.5 to 2.33.0 to address GHSA-gc5v-m9x4-r6x2.

pyproject.toml now requires requests>=2.33.0, and uv.lock is refreshed so the locked package and metadata match the new minimum version. No application code changes.

^{Reviewed by Cursor Bugbot for commit d29092c. Bugbot is set up for automated code reviews on this repo. Configure here.}