Bump requests>=2.33.0 and cryptography>=46.0.6 to fix CVE-2026-25645 and CVE-2026-34073 (DataDog#23223)

* Bump requests>=2.33.0 and cryptography>=46.0.6 across integrations (CVE fixes)

Addresses CVE-2026-25645 (VULN-59770) via requests>=2.33.0 and
CVE-2026-34073 (VULN-59768) via cryptography>=46.0.6.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* Add changelog entries for CVE dependency bumps (PR DataDog#23223)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* Fix dependency pins: use == instead of >= for requests and cryptography

Validator requires exact == pins. Update agent_requirements.in,
all affected pyproject.toml files, and add missing ddev changelog entry.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: Kyle-Neale

agent_requirements.in

@@ -10,7 +10,7 @@ cachetools==7.0.5
 clickhouse-connect==0.14.1
 cm-client==45.0.4
 confluent-kafka==2.13.2
-cryptography==46.0.5
+cryptography==46.0.6
 ddtrace==3.19.5
 dnspython==2.8.0
 fastavro==1.12.1
@@ -56,7 +56,7 @@ requests-ntlm==1.3.0
 requests-oauthlib==2.0.0
 requests-toolbelt==1.0.0
 requests-unixsocket2==1.0.1
-requests==2.32.5
+requests==2.33.0
 rethinkdb==2.4.10.post1
 securesystemslib[crypto,pynacl]==0.28.0
 semver==3.0.4

cisco_aci/changelog.d/23223.fixed

@@ -0,0 +1 @@
+Bump `cryptography` to `>=46.0.6` (CVE-2026-34073 / VULN-59768).

cisco_aci/pyproject.toml

@@ -36,7 +36,7 @@ license = "BSD-3-Clause"
 
 [project.optional-dependencies]
 deps = [
-    "cryptography==46.0.5",
+    "cryptography==46.0.6",
 ]
 
 [project.urls]

datadog_checks_base/changelog.d/23223.fixed

@@ -0,0 +1 @@
+Bump `requests` to `>=2.33.0` (CVE-2026-25645 / VULN-59770) and `cryptography` to `>=46.0.6` (CVE-2026-34073 / VULN-59768).

datadog_checks_base/pyproject.toml

@@ -36,7 +36,7 @@ db = [
 deps = [
     "binary==1.0.2",
     "cachetools==7.0.5",
-    "cryptography==46.0.5",
+    "cryptography==46.0.6",
     "ddtrace==3.19.5",
     "jellyfish==1.2.1",
     "lazy-loader==0.5",
@@ -48,7 +48,7 @@ deps = [
     "pyyaml==6.0.3",
     "requests-toolbelt==1.0.0",
     "requests-unixsocket2==1.0.1",
-    "requests==2.32.5",
+    "requests==2.33.0",
     "simplejson==3.20.2",
     "urllib3==2.6.3",
     "wrapt==2.1.2",

datadog_checks_dev/changelog.d/23223.fixed

@@ -0,0 +1 @@
+Bump `requests` to `>=2.33.0` (CVE-2026-25645 / VULN-59770).

datadog_checks_dev/pyproject.toml

@@ -39,7 +39,7 @@ dependencies = [
     "pytest-memray>=1.4.0; platform_system=='Linux' or platform_system=='Darwin'",
     "pytest-mock",
     "pyyaml>=5.4.1",
-    "requests>=2.22.0",
+    "requests>=2.33.0",
     "tenacity",
 ]
 dynamic = [

ddev/changelog.d/23223.fixed

@@ -0,0 +1 @@
+Bump `requests` to `==2.33.0` (CVE-2026-25645 / VULN-59770).

ddev/pyproject.toml

@@ -41,7 +41,7 @@ dependencies = [
     "tomli-w",
     "tomlkit",
     "tqdm",
-    "requests",
+    "requests==2.33.0",
     "matplotlib",
     "squarify",
     "datadog",

http_check/changelog.d/23223.fixed

@@ -0,0 +1 @@
+Bump `cryptography` to `>=46.0.6` (CVE-2026-34073 / VULN-59768).