From b3a44bd1b2d46f2fd5f53a49107a6c1105901169 Mon Sep 17 00:00:00 2001
From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Date: Thu, 9 Jul 2026 17:03:28 +0000
Subject: [PATCH] fix(deps): constrain soupsieve>=2.8.4 to patch two
 high-severity CVEs

---
 pyproject.toml | 1 +
 uv.lock        | 9 +++++----
 2 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 3f5458c5494f..d0ea2b9da4b7 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -259,6 +259,7 @@ constraint-dependencies = [
     "tornado>=6.5.6",
     "aiohttp>=3.14.1,<4.0",
     "packaging>=24.0",
+    "soupsieve>=2.8.4",
 ]
 override-dependencies = [
     # a2a-sdk 1.x requires packaging>=24.0; lunary 1.4.x still caps at <24.0.
diff --git a/uv.lock b/uv.lock
index e36da7222610..313fd682ccf3 100644
--- a/uv.lock
+++ b/uv.lock
@@ -9,7 +9,7 @@ resolution-markers = [
 ]
 
 [options]
-exclude-newer = "2026-07-04T17:13:14.93495Z"
+exclude-newer = "2026-07-06T17:03:18.138046444Z"
 exclude-newer-span = "P3D"
 
 [manifest]
@@ -21,6 +21,7 @@ members = [
 constraints = [
     { name = "aiohttp", specifier = ">=3.14.1,<4.0" },
     { name = "packaging", specifier = ">=24.0" },
+    { name = "soupsieve", specifier = ">=2.8.4" },
     { name = "tornado", specifier = ">=6.5.6" },
 ]
 overrides = [{ name = "packaging", specifier = ">=24.0" }]
@@ -7076,11 +7077,11 @@ wheels = [
 
 [[package]]
 name = "soupsieve"
-version = "2.8.3"
+version = "2.8.4"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/7b/ae/2d9c981590ed9999a0d91755b47fc74f74de286b0f5cee14c9269041e6c4/soupsieve-2.8.3.tar.gz", hash = "sha256:3267f1eeea4251fb42728b6dfb746edc9acaffc4a45b27e19450b676586e8349", size = 118627, upload-time = "2026-01-20T04:27:02.457Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/47/2c/0a5f6f8ee0d5589e48c7640213ed5175d52cf540a06725b628cc1a45d6ce/soupsieve-2.8.4.tar.gz", hash = "sha256:e121fd02e975c695e4e9e8774a5ee35d74714b59307868dcc5319ad2d9e3328e", size = 121110, upload-time = "2026-05-24T13:55:57.154Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/46/2c/1462b1d0a634697ae9e55b3cecdcb64788e8b7d63f54d923fcd0bb140aed/soupsieve-2.8.3-py3-none-any.whl", hash = "sha256:ed64f2ba4eebeab06cc4962affce381647455978ffc1e36bb79a545b91f45a95", size = 37016, upload-time = "2026-01-20T04:27:01.012Z" },
+    { url = "https://files.pythonhosted.org/packages/5e/f5/0c41cb68dcae6b7de4fac4188a3a9589e21fb31df21ea3a2e888db95e6c9/soupsieve-2.8.4-py3-none-any.whl", hash = "sha256:e7e6b0769c8f51ed59acab6e994b00621096cfb1c640a7509295987388fbaf65", size = 37304, upload-time = "2026-05-24T13:55:55.406Z" },
 ]
 
 [[package]]