From 97f1743220dc1f477cfd720365a0b06d4dab275d Mon Sep 17 00:00:00 2001
From: Andriy Lysyuk <andriy@tinyfish.io>
Date: Wed, 1 Apr 2026 13:56:43 +0200
Subject: [PATCH] =?UTF-8?q?fix(security):=20bump=20requests=202.32.5?=
 =?UTF-8?q?=E2=86=922.33.1=20in=20examples/python=20(ENG-13360)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

requests CVE-2026-25645 — add floor pin >=2.33.0 and surgical lock update to 2.33.1

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 examples/python/poetry.lock    | 6 +++---
 examples/python/pyproject.toml | 1 +
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/examples/python/poetry.lock b/examples/python/poetry.lock
index 06710435..8938376e 100644
--- a/examples/python/poetry.lock
+++ b/examples/python/poetry.lock
@@ -1357,14 +1357,14 @@ dev = ["black", "build", "mypy", "pytest", "pytest-cov", "setuptools", "tox", "t
 
 [[package]]
 name = "requests"
-version = "2.32.5"
+version = "2.33.1"
 description = "Python HTTP for Humans."
 optional = false
 python-versions = ">=3.9"
 groups = ["main"]
 files = [
-    {file = "requests-2.32.5-py3-none-any.whl", hash = "sha256:2462f94637a34fd532264295e186976db0f5d453d1cdd31473c85a6a161affb6"},
-    {file = "requests-2.32.5.tar.gz", hash = "sha256:dbba0bac56e100853db0ea71b82b4dfd5fe2bf6d3754a8893c3af500cec7d7cf"},
+    {file = "requests-2.33.1-py3-none-any.whl", hash = "sha256:4e6d1ef462f3626a1f0a0a9c42dd93c63bad33f9f1c1937509b8c5c8718ab56a"},
+    {file = "requests-2.33.1.tar.gz", hash = "sha256:18817f8c57c6263968bc123d237e3b8b08ac046f5456bd1e307ee8f4250d3517"},
 ]
 
 [package.dependencies]
diff --git a/examples/python/pyproject.toml b/examples/python/pyproject.toml
index 33c8bd58..fac2f292 100644
--- a/examples/python/pyproject.toml
+++ b/examples/python/pyproject.toml
@@ -11,6 +11,7 @@ package-mode = false
 python = "^3.9"
 agentql = "*"
 openai = "^1.13.3"
+requests = ">=2.33.0"
 playwright-dompath = "^0.0.1"
 httpx = "*"