cp: ci: Update cve for python-multipart (1450) into r1.1.0

[thomasdhc]

beep boop [🤖]: Hi @thomasdhc 👋,

we've cherry picked #1450 into  for you! 🚀

Please review and approve this cherry pick by your convenience!

[thomasdhc]

/ok to test 2098394

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[greptile-apps]

Greptile Overview

Greptile Summary

This PR cherry-picks a security fix from PR #1450 into the r1.1.0 release branch, addressing CVE GHSA-wp53-j4wj-2cfg in python-multipart.

• Added constraint python-multipart>=0.0.22 to pyproject.toml
• Updated uv.lock with python-multipart 0.0.22 (from 0.0.21) including new package hashes
• Fixed minor spacing inconsistency in comments for urllib3 and wheel constraints
• All changes are security-focused and properly applied to the release branch

Confidence Score: 5/5

• This PR is safe to merge with no risk
• Clean cherry-pick of a security fix with minimal changes limited to dependency constraints and lock file updates, no logic changes, and consistent with established CVE remediation patterns
• No files require special attention

Important Files Changed

Filename	Overview
pyproject.toml	Added python-multipart>=0.0.22 constraint to address CVE GHSA-wp53-j4wj-2cfg and fixed spacing consistency
uv.lock	Updated python-multipart from 0.0.21 to 0.0.22 with new hashes and added constraint entry

Sequence Diagram

sequenceDiagram
    participant Dev as Developer
    participant CP as Cherry-Pick Bot
    participant PR as PR #1450 (main)
    participant Deps as Dependency System
    participant Lock as uv.lock
    
    Dev->>PR: Create CVE fix for python-multipart
    PR->>Deps: Add constraint python-multipart>=0.0.22
    PR->>Deps: Fix spacing in urllib3/wheel comments
    Dev->>PR: Run uv lock update
    PR->>Lock: Update python-multipart 0.0.21→0.0.22
    Lock->>Lock: Update package hashes
    Lock->>Lock: Add constraint entry
    PR->>CP: Merge to main branch
    CP->>Dev: Auto cherry-pick to r1.1.0
    Dev->>CP: Review cherry-pick PR #1456

Loading

[greptile-apps]

_{2 files reviewed, no comments}

_{Edit Code Review Agent Settings | Greptile}