Bump pyOpenSSL to >=26.0.0 (CVE-2026-27459, CVE-2026-27448) (DataDog#23225)

* Bump pyOpenSSL to >=26.0.0 to address CVE-2026-27459 and CVE-2026-27448

Updates pyOpenSSL from ==25.3.0 to >=26.0.0 across agent_requirements.in
and datadog_checks_base to address VULN-59209 (Critical 9.8) and
VULN-59208 (Medium 5.3). Also removes the dep-update exclusion for
pyopenssl now that the snowflake-connector-python blocker is resolved.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* Add changelog entry for pyOpenSSL bump (PR DataDog#23225)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* Fix validation: use == pin for pyopenssl

---------

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: Kyle-Neale

agent_requirements.in

@@ -40,7 +40,7 @@ pymongo[srv]==4.8.0; python_version >= '3.9'
 pymqi==1.12.13
 pymysql==1.1.2
 pyodbc==5.3.0
-pyopenssl==25.3.0
+pyopenssl==26.0.0
 pysnmp-mibs==0.1.6
 pysnmp==7.1.22
 pysocks==1.7.1

datadog_checks_base/changelog.d/23225.fixed

@@ -0,0 +1 @@
+Bump pyOpenSSL to >=26.0.0 to address CVE-2026-27459 (VULN-59209, Critical 9.8) and CVE-2026-27448 (VULN-59208, Medium 5.3).

datadog_checks_base/pyproject.toml

@@ -58,7 +58,7 @@ http = [
     "botocore==1.42.72",
     "oauthlib==3.3.1",
     "pyjwt==2.12.1",
-    "pyopenssl==25.3.0",
+    "pyopenssl==26.0.0",
     "pysocks==1.7.1",
     "requests-kerberos==0.15.0",
     "requests-ntlm==1.3.0",