chore: resolve open dependabot security alerts

[jonathannorris]

Summary

• Resolved 4 open Dependabot security alerts by bumping vulnerable transitive dependencies in uv.lock.
• Bumped aiohttp to 3.14.3 (resolves 3 alerts, ci: add generated protobuf files to sdist and wheel #46-TypeError when using flagd provider #48).
• Bumped cryptography to 50.0.0 (resolves 1 high-severity alert, docs: update OpenTelemetry hook README #49).

Both are transitive dependencies pulled in via the openfeature-provider-aws-ssm provider's async extras/dev group (aiobotocore/moto). Relocked with uv lock --upgrade-package aiohttp --upgrade-package cryptography. Verified uv build, poe mypy, and poe cov pass for the affected package (aws-ssm).

Dependabot Alerts Resolved

Alert	Package	Severity	Fix
#46	aiohttp	medium	Bumped to 3.14.3 (WebSocket client accepts compressed frames without negotiated permessage-deflate)
#47	aiohttp	medium	Bumped to 3.14.3 (HTTP request smuggling via WebSocket upgrade)
#48	aiohttp	high	Bumped to 3.14.3 (out-of-bounds heap read in C HTTP response parser error path)
#49	cryptography	high	Bumped to 50.0.0 (PKCS#7 EnvelopedData decryption Bleichenbacher oracle)

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• uv.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: ed9f8350-2c7f-4c2a-90c3-200ba68815b1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.28%. Comparing base (92c5f49) to head (6eac6b2).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #407      +/-   ##
==========================================
+ Coverage   95.64%   96.28%   +0.63%     
==========================================
  Files          24       47      +23     
  Lines        1057     1778     +721     
==========================================
+ Hits         1011     1712     +701     
- Misses         46       66      +20     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.