Fix MVS-2023-gwm8-m3c2: bump langchain-core, langchain-openai, langsmith (4 CVEs)

pyproject.toml

@@ -57,15 +57,27 @@ dev-dependencies = [
     "agent-framework",
     "azure-identity",
     "openai-agents",
-    "langchain-openai",
+    # langchain-openai >=1.1.14 - security remediation. Fixes CVE-2026-41488
+    # (SSRF / DNS-rebinding TOCTOU in _url_to_size()'s validate-then-fetch
+    # pattern for image token counting). Also requires langchain-core
+    # >=1.2.31, already satisfied by the >=1.3.3 constraint below.
+    "langchain-openai >= 1.1.14",
 ]
 
 # azure-ai-projects is capped at <2.0.0 because:
 # 1. semantic-kernel>=1.39.3 requires azure-ai-projects~=1.0.0b12 (<2.0.0)
 # 2. tooling-extensions-azureaifoundry uses the 1.x Agents API (project_client.agents.update_agent)
 #    which was removed in azure-ai-projects 2.x
+#
+# langsmith is not a direct dependency of any workspace package - it's pulled
+# in transitively by langchain-core/langchain-openai - so it's pinned here via
+# override rather than constraint-dependencies. >=0.8.18 fixes two advisories:
+# CVE-2026-45134 (prompt-pull deserialization trust-boundary bypass; fixed in
+# 0.8.0) and GHSA-f4xh-w4cj-qxq8 (TracingMiddleware arbitrary file read via
+# unvalidated trace-propagation header; fixed in 0.8.18, which supersedes 0.8.0).
 override-dependencies = [
     "azure-ai-projects>=1.0.0b12,<2.0.0",
+    "langsmith >= 0.8.18",
 ]
 
 # Centralized version constraints for all external dependencies
@@ -89,7 +101,13 @@ constraint-dependencies = [
     # --- AI Frameworks ---
     "agent-framework >= 1.0.0",
     "agent-framework-core >= 1.0.0",
-    "langchain-core >= 0.1.0",
+    # langchain-core >=1.3.3 - security remediation. Fixes GHSA-pjwx-r37v-7724
+    # / CVE-2026-44843 (unsafe deserialization of attacker-controlled objects
+    # through overly broad load() allowlists in RunnableWithMessageHistory,
+    # astream_log(), and astream_events(v1)). The vulnerable range is
+    # >=1.0.0,<=1.3.2; 1.3.3 is the first patched 1.x release. No upper bound,
+    # matching the other unbounded AI-framework constraints in this block.
+    "langchain-core >= 1.3.3",
     "openai-agents >= 0.2.6",
     "semantic-kernel >= 1.39.3",
     # google-adk >=1.28.1,<2.0.0 - security remediation. Fixes CVE-2026-4810