chore(deps): aggregate envs dependabot updates

[burtenshaw]

Aggregates Dependabot updates that are limited to envs/ dependency files.

Latest automation refresh: 2026-08-07

Included single Dependabot PRs:

• chore(deps): bump nltk from 3.9.4 to 3.10.0 in /envs/textarena_env #1031, chore(deps): bump pyjwt from 2.12.1 to 2.13.0 in /envs/tbench2_env #1032 from earlier runs
• chore(deps): bump aiohttp from 3.13.3 to 3.14.3 in /envs/qed_math_env #1040, chore(deps): bump aiohttp from 3.14.0 to 3.14.3 in /envs/agent_world_model_env #1048-chore(deps): bump aiohttp from 3.14.0 to 3.14.3 in /envs/finrl_env #1050, chore(deps): bump aiohttp from 3.14.0 to 3.14.3 in /envs/openapp_env #1052, chore(deps): bump aiohttp from 3.14.1 to 3.14.3 in /envs/sophistry_bench_sprint_env #1054-chore(deps): bump cryptography from 49.0.0 to 50.0.0 in /envs/pi_env #1067 from the 2026-08-06 run
• chore(deps): bump h2 from 4.3.0 to 4.4.1 in /envs/coding_tools_env #1071: h2 4.3.0 -> 4.4.1 in envs/coding_tools_env

Validation:

• git diff --check origin/main...HEAD passed
• uv lock --check passed in envs/coding_tools_env

Scope check:

• Diff remains limited to envs/ dependency files.

[bot-ci-comment]

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update.

[cursor]

Alignment Review Report

Aggregate dependabot env roll-up (codex/dependabot-envs-2026-07-27). Two bumps, both security-positive. Hashes verified against live PyPI and uv lock --check passes for both envs. Merges cleanly into main (no conflicts).

Automated Checks

• Lint: PASS (N/A for this PR) — the Python-only hook flags ~20 pre-existing envs/** files, but this PR touches only .toml/.lock (not linted). repl_env/runner.py + repl_env/server/repl_environment.py are in that pre-existing list but are not touched here.
• Debug code: CLEAN — all check-debug.sh hits are pre-existing src/openenv/cli/**; zero in repl_env/websearch_env.

What changed (verified)

• repl_env pypdf 6.13.3 → 6.14.2 (direct dep; pyproject floor + lock). Born-clean lock (rev 3, all pypi.org/simple). Clears 4 DoS CVEs in 6.13.3 (CVE-2026-59935/6/7/8); CVE-2026-59935 is fixed in 6.14.2 only, so the exact floor is required. pypdf parses user-uploaded PDFs server-side (server/gradio_ui.py:146), so these are directly relevant.
  • Note: this exact bump is already on main (via #1013) — repl_env is byte-identical between main and this branch, so it is a no-op on merge and only appears in the diff because the branch was cut before #1013 landed. Harmless.
• websearch_env pillow 12.2.0 → 12.3.0 (transitive via gradio; lock-only) — the net-new change here. Clears 25 advisories on 12.2.0 (all fixed_in: 12.3.0), incl. CVE-2026-55798 (command injection). 122 packages otherwise unchanged (0 add/remove).

Open RFCs Context

000/001/002/003/005 In Review, 004 (rubrics, no Status header), 010 Draft. None govern dependency management / PyPI index / packaging → no RFC conflicts.

Tier 1: Fixes Required

• None.

Tier 2: Alignment Discussion

Principle Conflicts

ALIGNMENT FLAG: websearch_env lock index source flipped HF mirror → public PyPI

• Principle at stake: Reproducibility / declared provenance (PRINCIPLES.md "Container isolation…", L15)
• The concern: all 129 source = { registry = "https://pypi.registries.huggingface.tech/" } refs are rewritten to https://pypi.org/simple. Artifact URLs (files.pythonhosted.org) and hashes are unchanged, so resolution is byte-identical/benign — but the declared provenance changes. Consistent with the ongoing fleet migration; flagging so the team confirms public PyPI is intended for this env.
• Suggested reviewer: @Darktex, @burtenshaw

ALIGNMENT FLAG: websearch_env lock revision = 2 → 3

• Principle at stake: Reproducibility (deploy)
• The concern: the deploy path uses uv sync --frozen, so the base image's uv must understand lock rev 3. Low risk — websearch_env/server/Dockerfile installs current uv on the fly (line 36) before syncing. Heads-up only.
• Suggested reviewer: @Darktex, @burtenshaw

RFC Conflicts

• None identified.

Notes

• This is the intended aggregate path (codex/dependabot-envs-*), so the exclude-paths: [envs/**] bypass that affects native dependabot/uv/... PRs does not apply here. Working as designed.

Summary

• 0 mechanical issues to fix
• 2 alignment points for human review (index-flip + revision bump — both benign/low-risk, websearch_env only)
• 0 RFC conflicts

Both bumps are correct and security-positive. No blocking issues.

  

_{Sent by Cursor Automation: Pre-review}

[cursor]

pillow 12.2.0 → 12.3.0 (transitive via gradio) — the net-new change in this PR. Verified vs live PyPI: sdist 3b8182a7…, size 47025035, yanked: false, 0 vulns; the wheel hashes match too. 12.2.0 carries 25 advisories, all fixed_in: 12.3.0 (incl. CVE-2026-55798 command injection). Security-positive; 122 other packages unchanged.

[cursor]

Index source flip (Tier 2, reproducibility): all 129 registries.huggingface.tech (HF mirror) refs are rewritten to pypi.org/simple (public PyPI). Artifact URLs (files.pythonhosted.org) + hashes are unchanged → resolution is byte-identical/benign, but the declared provenance changes. Confirm public PyPI is intended for this env. cc @Darktex @burtenshaw

[cursor]

Lock revision 2 → 3 (Tier 2, deploy): a side effect of the re-lock. The deploy Dockerfile uses uv sync --frozen, so the base image's uv must support rev 3 — low risk here since websearch_env/server/Dockerfile installs current uv on the fly (line 36) before syncing. Heads-up only. cc @Darktex @burtenshaw