Fix Security issues

[ZePan110]

Description

Fix Security issues

Issues

https://github.com/opea-project/GenAIExamples/security/dependabot/134
https://github.com/opea-project/GenAIExamples/security/dependabot/135

Type of change

List the type of change like below. Please delete options that are not relevant.

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds new functionality)
• Breaking change (fix or feature that would break existing design and interface)
• Others (enhancement, documentation, validation, etc.)

Dependencies

List the newly introduced 3rd party dependency if exists.

Tests

Describe the tests that you ran to verify your changes.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

See the Details below.

License Issues

one_click_deploy/requirements.txt

Package	Version	License	Issue Type
ruamel-yaml-clib	0.2.15	Null	Unknown License

Scanned Files

• one_click_deploy/requirements.txt

[Copilot]

Pull request overview

This PR updates Python dependencies to address security vulnerabilities by upgrading several packages to their latest versions.

Key changes:

• Updated dependency compilation tool from pip-compile to uv
• Upgraded multiple packages including click (8.1.8 → 8.3.1), requests (2.32.4 → 2.32.5), and urllib3 (2.2.3 → 2.6.0)
• Added explicit urllib3 version constraint in requirements.in

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
one_click_deploy/requirements.txt	Updated package versions and regenerated with uv; includes new hash values for upgraded dependencies
one_click_deploy/requirements.in	Added explicit urllib3==2.6.0 constraint to pin the upgraded version

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.