Fix Dependabot setuptools security update in qa-integration

[cursor]

Why

Dependabot security updates for setuptools in qa-integration/pmm_qa were failing on main with dependency_file_not_supported. The setuptools>=65.0.0,<74 constraint blocked the patched version (83.0.0) required by GHSA security advisories.

How

• Bumped setuptools constraint to >=83.0.0,<84 in qa-integration/pmm_qa/requirements.txt
• Verified pip install -r requirements.txt resolves to setuptools 83.0.0

  

[travagliad]

@cursoragent I guess you didn't checked the pipeline 😞

[cursor]

You're right — the pipeline wasn't checked properly.

The setuptools bump to >=83.0.0,<84 was correct for the Dependabot security fix, but it broke CI. In the E2E workflows, pmm-framework.py failed during provisioning with:

ModuleNotFoundError: No module named 'pkg_resources'

Root cause: setuptools 82+ removed pkg_resources, but ansible-runner==2.3.2 still imports it at startup. pip install -r requirements.txt succeeded, so the earlier verification missed the runtime failure.

Fix pushed: bumped ansible-runner from 2.3.2 to 2.3.8 (the first patch release that works with setuptools 83). Verified in a fresh venv that:

• setuptools resolves to 83.0.0
• pmm-framework.py imports succeed

The branch is rebased on main and pushed. CI should re-run on the updated PR.