[raahulrahl]

Clears the last remaining high-severity Dependabot alert with a real fix path.

What

agno 2.6.5 → 2.9.0 (lock-only bump; constraint is already agno>=2.5.2).

Why

• GHSA-82m5-3pcp-hccq / CVE-2026-10105 — SQL injection in agno, vulnerable range <= 2.6.5. We were pinned at exactly 2.6.5.
• Dependabot showed first_patched: null, but since the vulnerable range ends at 2.6.5, any newer release is unaffected. PyPI has 2.9.0 stable (avoided the 3.0.0a alphas).
• agno is an optional dependency (bindu[agents], used only by examples) and is not imported by core bindu/, so the core supply chain was never exposed. This closes the alert for opt-in users.

Testing

• uv lock --check clean (243 packages resolved, only uv.lock changed; adds agnoctl transitively)
• pre-commit + unit smoke green; core has no agno import so the suite is unaffected

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• uv.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 6a792ff8-129a-4a4d-9ee9-006c9ddd1ef5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}