[liquidsec]

Consolidates the open Dependabot security PRs into one lockfile update against dev. Dependabot security updates ignore target-branch and open against stable, so most of them couldn't pass as-is.

Package	Before	After	Advisories
anyio	4.12.1	4.15.1	GHSA-82r6-8w77-94w6, GHSA-5p39-cfhj-2xmp
cryptography	48.0.1	50.0.2	GHSA-jwv3-5hgf-82ww, GHSA-m2h6-j472-rp4c, CVE-2026-69247
tornado	6.5.7	6.5.10	GHSA-3hv7-mjh2-fv65, GHSA-chx6-46f5-w4vp, GHSA-c2m8-h5v5-343r
virtualenv	20.36.1	21.14.11	GHSA-p58f-9548-mpm2, GHSA-x78j-v8h9-3j2q, GHSA-94p9-xgh2-xp45, GHSA-9h9j-4vrj-gf7g
pygments	2.19.2	2.21.0	open alert, no Dependabot PR
soupsieve	2.8.4	2.10 / 3.0.3	GHSA-gjv8-xp57-g29c, GHSA-j934-xhv5-fg8f (no Dependabot PR)
ansible-core	2.19.6 / 2.20.2	2.19.14 / 2.21.5	GHSA-w8p5-mx5w-cpqj (no Dependabot PR)

werkzeug 3.1.9, urllib3 2.8.0 and pyjwt 2.15.1 are already on dev, so #3553, #3549 and #3548 are redundant.

Also adds [tool.uv] constraint-dependencies = ["virtualenv>=21.7.13"]: without it, the resolver forked and left Python 3.10 on vulnerable virtualenv 20.36.1. virtualenv is only pulled in by pre-commit (dev group).

Remaining: Python 3.10 stays on ansible-core 2.17.14, which has no patched release (2.18+ requires Python 3.11). The advisory is in ansible-galaxy role install.

Supersedes #3552, #3551, #3550, #3549, #3553, #3548, #3465.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91%. Comparing base (294b8c4) to head (84d0eb3).

Additional details and impacted files

@@          Coverage Diff          @@
##             dev   #3557   +/-   ##
=====================================
+ Coverage     91%     91%   +1%     
=====================================
  Files        465     465           
  Lines      50015   50015           
=====================================
+ Hits       45139   45146    +7     
+ Misses      4876    4869    -7     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[github-actions]

📊 Performance Benchmark Report

Comparing dev (baseline) vs security-dep-updates (current)

📈 Detailed Results (All Benchmarks)

📋 Complete results for all benchmarks - includes both significant and insignificant changes

🧪 Test Name	📏 Base	📏 Current	📈 Change	🎯 Status
Bloom Filter Dns Mutation Tracking Performance	3.97ms	4.08ms	+2.6% ⚪	✅
Bloom Filter Large Scale Dns Brute Force	16.29ms	16.25ms	-0.2% ⚪	✅
Large Closest Match Lookup	328.38ms	330.59ms	+0.7% ⚪	✅
Realistic Closest Match Workload	181.38ms	181.25ms	-0.1% ⚪	✅
Event Memory Medium Scan	1402 B/event	1402 B/event	+0.0% ⚪	✅
Event Memory Large Scan	1527 B/event	1527 B/event	+0.0% ⚪	✅
Event Validation Full Scan Startup Small Batch	410.60ms	411.77ms	+0.3% ⚪	✅
Event Validation Full Scan Startup Large Batch	524.44ms	521.45ms	-0.6% ⚪	✅
Make Event Autodetection Small	21.23ms	21.14ms	-0.4% ⚪	✅
Make Event Autodetection Large	213.93ms	210.87ms	-1.4% ⚪	✅
Make Event Explicit Types	8.68ms	8.67ms	-0.1% ⚪	✅
Excavate Single Thread Small	3.821s	4.131s	+8.1% ⚪	✅
Excavate Single Thread Large	9.707s	10.118s	+4.2% ⚪	✅
Excavate Parallel Tasks Small	4.054s	4.089s	+0.8% ⚪	✅
Excavate Parallel Tasks Large	6.278s	6.546s	+4.3% ⚪	✅
Intercept Throughput Small	886.13ms	885.75ms	-0.0% ⚪	✅
Intercept Throughput Medium	886.93ms	892.14ms	+0.6% ⚪	✅
Dns Throughput Quiet	2.542s	2.559s	+0.7% ⚪	✅
Dns Throughput Loaded	1.767s	1.935s	+9.5% ⚪	✅
Dns Throughput Inherited	2.322s	2.206s	-5.0% ⚪	✅
Is Ip Performance	2.27ms	2.31ms	+2.0% ⚪	✅
Make Ip Type Performance	203.11µs	217.60µs	+7.1% ⚪	✅
Mixed Ip Operations	2.35ms	2.40ms	+2.2% ⚪	✅
Memory Use Web Crawl	1.2 MB	1.2 MB	-0.9% ⚪	✅
Memory Use Subdomain Enum	28.3 MB	28.3 MB	+0.0% ⚪	✅
Memory Use Deep Chain	5.0 MB	5.0 MB	+0.0% ⚪	✅
Memory Use Parallel Chains	12.7 MB	10.5 MB	-17.5% 🟢🟢	🚀
Scan Throughput 100	2.626s	2.600s	-1.0% ⚪	✅
Scan Throughput 1000	18.470s	18.019s	-2.4% ⚪	✅
Typical Queue Shuffle	5.38µs	5.40µs	+0.4% ⚪	✅
Priority Queue Shuffle	26.89µs	26.46µs	-1.6% ⚪	✅

🎯 Performance Summary

+ 1 improvement 🚀
  30 unchanged ✅

🔍 Significant Changes (>10%)

• Memory Use Parallel Chains: 17.5% 🚀 less memory

---

🐍 Python Version 3.11.17