chore: bump json-repair to 0.60.1, drop fixed vuln ignores in scan

.github/workflows/vulnerability-scan.yml

@@ -53,12 +53,9 @@ jobs:
             --skip-editable
             --format json
             --output pip-audit-report.json
-            --ignore-vuln CVE-2026-27448      # pyOpenSSL: fixes require 26.0.0, blocked by snowflake-connector-python 3.x.
-            --ignore-vuln CVE-2026-27459      # pyOpenSSL: same constraint as CVE-2026-27448.
             --ignore-vuln PYSEC-2026-597      # nltk 3.9.4 (CVE-2026-12243): no fix available, transitive through crewai-tools[xml] -> unstructured.
             --ignore-vuln GHSA-rrmf-rvhw-rf47 # torch 2.12.0 (CVE-2025-3000): local-only memory corruption in torch.jit.script; no fix available.
             --ignore-vuln GHSA-f4j7-r4q5-qw2c # chromadb 1.1.1 (CVE-2026-45829): pre-auth RCE in the HTTP server; no fix available.
-            --ignore-vuln GHSA-xf7x-x43h-rpqh # json-repair 0.25.3: the affected schema module is absent, and CrewAI does not pass schemas.
           )
           uv run pip-audit "${pip_audit_args[@]}"
         continue-on-error: true

lib/crewai-tools/pyproject.toml

@@ -107,7 +107,7 @@ stagehand = [
     "stagehand>=0.4.1",
 ]
 github = [
-    "gitpython>=3.1.50,<4",
+    "gitpython>=3.1.51,<4",
     "PyGithub==1.59.1",
 ]
 rag = [

lib/crewai/pyproject.toml

@@ -32,7 +32,7 @@ dependencies = [
     "click>=8.1.7,<9",
     "appdirs~=1.4.4",
     "jsonref~=1.1.0",
-    "json-repair~=0.25.2",
+    "json-repair~=0.60.1",
     "cel-python>=0.5.0,<0.6",
     "tomli-w~=1.1.0",
     "tomli~=2.0.2",

lib/crewai/src/crewai/agents/parser.py

@@ -7,7 +7,7 @@
 
 from dataclasses import dataclass
 
-from json_repair import repair_json  # type: ignore[import-untyped]
+from json_repair import repair_json
 from pydantic import BaseModel
 
 from crewai.agents.constants import (
@@ -173,7 +173,12 @@ def _safe_repair_json(tool_input: str) -> str:
     tool_input = tool_input.replace('"""', '"')
 
     result = repair_json(tool_input)
-    if result in UNABLE_TO_REPAIR_JSON_RESULTS:
+    if not result or result in UNABLE_TO_REPAIR_JSON_RESULTS:
+        return tool_input
+
+    # json-repair >= 0.60 wraps non-JSON input in a single-element list;
+    # treat that as unrepairable and return the original.
+    if result.startswith("[") and not tool_input.lstrip().startswith("["):
         return tool_input
 
     return str(result)

lib/crewai/src/crewai/tools/tool_usage.py

@@ -11,7 +11,7 @@
 
 from crewai_core.printer import PRINTER
 import json5
-from json_repair import repair_json  # type: ignore[import-untyped]
+from json_repair import repair_json
 
 from crewai.events.event_bus import crewai_event_bus
 from crewai.events.types.tool_usage_events import (

pyproject.toml

@@ -187,6 +187,8 @@ exclude-newer-package = { pypdf = "2026-06-18T00:00:00Z", msgpack = "2026-06-20T
 # uv <0.11.15 has GHSA-4gg8-gxpx-9rph (and earlier GHSA-pjjw-68hj-v9mw); force 0.11.15+.
 # python-multipart <0.0.27 has GHSA-pp6c-gr5w-3c5g (DoS via unbounded multipart headers).
 # gitpython <3.1.50 has GHSA-mv93-w799-cj2w (config_writer newline injection bypassing the 3.1.49 patch -> RCE via core.hooksPath).
+# gitpython <3.1.51 has GHSA-2f96-g7mh-g2hx, GHSA-v396-v7q4-x2qj, and GHSA-956x-8gvw-wg5v; force 3.1.51+.
+# pyasn1 <0.6.4 has GHSA-8ppf-4f7h-5ppj and GHSA-hm4w-wwcw-mr6r; force 0.6.4+.
 # urllib3 <2.7.0 has GHSA-qccp-gfcp-xxvc (ProxyManager cross-origin redirect leaks Authorization/Cookie) and GHSA-mf9v-mfxr-j63j (streaming decompression-bomb bypass); force 2.7.0+.
 # langsmith <0.8.18 has GHSA-3644-q5cj-c5c7 (public prompt manifest deserialization, SSRF/secret disclosure)
 # and GHSA-f4xh-w4cj-qxq8; force 0.8.18+.
@@ -214,7 +216,8 @@ override-dependencies = [
     "pypdf>=6.13.3,<7",
     "uv>=0.11.15,<1",
     "python-multipart>=0.0.27,<1",
-    "gitpython>=3.1.50,<4",
+    "gitpython>=3.1.51,<4",
+    "pyasn1>=0.6.4",
     "langsmith>=0.8.18,<1",
     "authlib>=1.6.12",
     "pip>=26.1.2",