fix(deps): bump pypdf, urllib3 override, and dev dependencies for security fixes

- pypdf ~6.7.4 → ~6.7.5 (CVE: inefficient ASCIIHexDecode stream decoding)
- Add urllib3>=2.6.3 override (CVE: decompression-bomb bypass on redirects)
- ruff 0.14.7 → 0.15.1, mypy 1.19.0 → 1.19.1, pre-commit 4.5.0 → 4.5.1
- types-regex 2024.11.6 → 2026.1.15, boto3-stubs 1.40.54 → 1.42.40
- Auto-fixed 13 lint issues from new ruff rules

Co-authored-by: Greyson LaLonde <greyson.r.lalonde@gmail.com>

lib/crewai-files/pyproject.toml

@@ -9,7 +9,7 @@ authors = [
 requires-python = ">=3.10, <3.14"
 dependencies = [
     "Pillow~=12.1.1",
-    "pypdf~=6.7.4",
+    "pypdf~=6.7.5",
     "python-magic>=0.4.27",
     "aiocache~=0.12.3",
     "aiofiles~=24.1.0",

lib/crewai-tools/src/crewai_tools/tools/brave_search_tool/brave_search_tool.py

@@ -10,6 +10,7 @@ from pydantic import BaseModel, Field
 from pydantic.types import StringConstraints
 import requests
 
+
 load_dotenv()
 
 

lib/crewai-tools/src/crewai_tools/tools/multion_tool/example.py

@@ -1,7 +1,7 @@
 import os
 
 from crewai import Agent, Crew, Task
-from multion_tool import MultiOnTool # type: ignore[import-not-found]
+from multion_tool import MultiOnTool  # type: ignore[import-not-found]
 
 
 os.environ["OPENAI_API_KEY"] = "Your Key"

lib/crewai-tools/src/crewai_tools/tools/stagehand_tool/example.py

@@ -17,11 +17,11 @@ Usage:
 
 import os
 
+from crewai import Agent, Crew, Process, Task
 from crewai.utilities.printer import Printer
 from dotenv import load_dotenv
 from stagehand.schemas import AvailableModel  # type: ignore[import-untyped]
 
-from crewai import Agent, Crew, Process, Task
 from crewai_tools import StagehandTool
 
 

lib/crewai/src/crewai/agents/cache/__init__.py

@@ -1,5 +1,4 @@
 from crewai.agents.cache.cache_handler import CacheHandler
 
 
-
 __all__ = ["CacheHandler"]

lib/crewai/src/crewai/cli/authentication/__init__.py

@@ -1,5 +1,4 @@
 from crewai.cli.authentication.main import AuthenticationCommand
 
 
-
 __all__ = ["AuthenticationCommand"]

lib/crewai/src/crewai/cli/create_crew.py

@@ -143,7 +143,7 @@ def create_folder_structure(
         (folder_path / "src" / folder_name).mkdir(parents=True)
         (folder_path / "src" / folder_name / "tools").mkdir(parents=True)
         (folder_path / "src" / folder_name / "config").mkdir(parents=True)
-        
+
         # Copy AGENTS.md to project root (top-level projects only)
         package_dir = Path(__file__).parent
         agents_md_src = package_dir / "templates" / "AGENTS.md"

lib/crewai/src/crewai/cli/create_flow.py

@@ -1,5 +1,5 @@
-import shutil
 from pathlib import Path
+import shutil
 
 import click
 

lib/crewai/src/crewai/crews/__init__.py

@@ -1,5 +1,4 @@
 from crewai.crews.crew_output import CrewOutput
 
 
-
 __all__ = ["CrewOutput"]

lib/crewai/src/crewai/events/base_event_listener.py

@@ -23,4 +23,3 @@ class BaseEventListener(ABC):
         Args:
             crewai_event_bus: The event bus to register listeners on.
         """
-        pass

lib/crewai/src/crewai/memory/__init__.py

@@ -19,6 +19,7 @@ from crewai.memory.types import (
     embed_texts,
 )
 
+
 _LAZY_IMPORTS: dict[str, tuple[str, str]] = {
     "Memory": ("crewai.memory.unified_memory", "Memory"),
     "EncodingFlow": ("crewai.memory.encoding_flow", "EncodingFlow"),

lib/crewai/src/crewai/telemetry/__init__.py

@@ -1,5 +1,4 @@
 from crewai.telemetry.telemetry import Telemetry
 
 
-
 __all__ = ["Telemetry"]

lib/crewai/src/crewai/tools/__init__.py

@@ -1,7 +1,6 @@
 from crewai.tools.base_tool import BaseTool, EnvVar, tool
 
 
-
 __all__ = [
     "BaseTool",
     "EnvVar",