fix: pin vcr record_mode=none + bump gitpython/langchain-core/urllib3 vulns

- test_streaming_properties_from_docs: add record_mode="none" so VCR never
  falls through to the real OpenAI API; cassette already exists.
- gitpython >=3.1.50 (GHSA-mv93-w799-cj2w)
- langchain-core >=1.3.1 (GHSA-pjwx-r37v-7724; resolves to 1.3.3)
- urllib3 >=2.7.0 (GHSA-qccp-gfcp-xxvc, GHSA-mf9v-mfxr-j63j; 2.6.4 was never released)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

pyproject.toml

@@ -185,13 +185,15 @@ exclude-newer = "3 days"
 # onnxruntime 1.24+ dropped Python 3.10 wheels; cap it so qdrant[fastembed] resolves on 3.10.
 # fastembed 0.7.x and docling 2.63 cap pillow<12; the removed APIs don't affect them.
 # langchain-core <1.2.31 has GHSA-926x-3r5x-gfhw and is required by langchain-text-splitters 1.1.2+.
+# langchain-core 1.3.0 has GHSA-pjwx-r37v-7724; force 1.3.1+.
 # langchain-text-splitters <1.1.2 has GHSA-fv5p-p927-qmxr (SSRF bypass in split_text_from_url).
 # transformers 4.57.6 has CVE-2026-1839; force 5.4+ (docling 2.84 allows huggingface-hub>=1).
 # cryptography 46.0.6 has CVE-2026-39892; force 46.0.7+.
 # pypdf <6.10.2 has GHSA-4pxv-j86v-mhcw, GHSA-7gw9-cf7v-778f, GHSA-x284-j5p8-9c5p; force 6.10.2+.
 # uv <0.11.6 has GHSA-pjjw-68hj-v9mw; force 0.11.6+.
 # python-multipart <0.0.27 has GHSA-pp6c-gr5w-3c5g (DoS via unbounded multipart headers).
-# gitpython <3.1.49 has GHSA-v87r-6q3f-2j67 (newline injection -> RCE via core.hooksPath).
+# urllib3 <2.7.0 has GHSA-qccp-gfcp-xxvc and GHSA-mf9v-mfxr-j63j; force 2.7.0+ (2.6.4 was never released).
+# gitpython <3.1.50 has GHSA-mv93-w799-cj2w; <3.1.49 has GHSA-v87r-6q3f-2j67 (newline injection -> RCE via core.hooksPath).
 # langsmith <0.7.31 has GHSA-rr7j-v2q5-chgv (streaming token redaction bypass); force 0.7.31+.
 # authlib <1.6.11 has GHSA-jj8c-mmj3-mmgv (CSRF bypass in cache-based state storage).
 # litellm 1.83.8+ hard-pins openai==2.24.0, missing openai.types.responses used by crewai;
@@ -201,15 +203,15 @@ override-dependencies = [
     "rich>=13.7.1",
     "onnxruntime<1.24; python_version < '3.11'",
     "pillow>=12.1.1",
-    "langchain-core>=1.2.31,<2",
+    "langchain-core>=1.3.1,<2",
     "langchain-text-splitters>=1.1.2,<2",
-    "urllib3>=2.6.3",
+    "urllib3>=2.7.0",
     "transformers>=5.4.0; python_version >= '3.10'",
     "cryptography>=46.0.7",
     "pypdf>=6.10.2,<7",
     "uv>=0.11.6,<1",
     "python-multipart>=0.0.27,<1",
-    "gitpython>=3.1.49,<4",
+    "gitpython>=3.1.50,<4",
     "langsmith>=0.7.33,<0.9",
     "authlib>=1.6.11",
 ]