DLPX-95497 Update virtulaization-sdk python packages

[SumoSourabh]

Problem

Update python packages along with fixing

• CVE-2024-56201 & CVE-2025-27516 on jinja2-3.1.4-py3-none-any.whl
• CVE-2024-47081 on requests-2.32.3-py3-none-any.whl

Solution

Updated various packages

• Requests has been updated to 2.32.* version to resolve the CVE
• Jinja2 was already updated to 3.1.6 to resolve the CVE

Diff

Testing Done

Automation runs

Type	Test details	URL	Status
Virtualization-sdk	Ubuntu 20 SDK host - Nix direct appdata python plugin	192834	Success
Virtualization-sdk	Ubuntu 20 SDK host - Nix staged appdata python plugin	192823	Success
Virtualization-sdk	Ubuntu 20 SDK host - Windows direct appdata python plugin	192824	Success
Virtualization-sdk	Ubuntu 20 SDK host - Windows staged appdata python plugin	192835	Success
Virtualization-sdk	Windows 10 Pro SDK host - Windows staged appdata python plugin	192826	Success
Appdata Basic	Appdata Python nix_direct_python - RHEL 9.3	192859	Success
Appdata Basic	Appdata Python nix_staged_python - CentOS 7.3	192860	Success
Appdata Basic	Appdata Python win_direct_python - Win 2022	192861	Success
Appdata Basic	Appdata Python win_staged_python - Win 2012	192862	Success

Bonus

Closing below dependent Bot PRs also:

• Update dependency zipp to v3.19.1 - autoclosed #567
• Bump pluggy from 1.0.0 to 1.3.0 in /common #534
• Bump pluggy from 1.0.0 to 1.3.0 in /platform #533
• Bump pluggy from 1.0.0 to 1.3.0 in /dvp #532
• Bump pluggy from 1.0.0 to 1.3.0 in /libs #531
• Bump more-itertools from 9.0.0 to 10.1.0 in /tools #530
• Bump coverage from 6.5.0 to 7.3.0 in /tools #529
• Bump pyparsing from 3.0.9 to 3.1.1 in /libs #525
• Bump zipp from 3.11.0 to 3.16.2 in /libs #524
• Bump mock from 4.0.3 to 5.1.0 in /libs #523
• Bump pyparsing from 3.0.9 to 3.1.1 in /dvp #522
• Bump zipp from 3.11.0 to 3.16.2 in /dvp #521
• Bump pyparsing from 3.0.9 to 3.1.1 in /common #520
• Bump zipp from 3.11.0 to 3.16.2 in /common #519
• Bump mock from 4.0.3 to 5.1.0 in /tools #518
• Bump zipp from 3.11.0 to 3.16.2 in /tools #517
• Bump pyparsing from 3.0.9 to 3.1.1 in /platform #515
• Bump zipp from 3.11.0 to 3.16.2 in /platform #514
• Bump mock from 4.0.3 to 5.1.0 in /platform #513
• Bump pytest from 7.2.0 to 7.4.0 in /common #507
• Bump yapf from 0.32 to 0.40.1 in /tools #504
• Bump pytest from 7.2.0 to 7.4.0 in /tools #503
• Bump pytest from 7.2.0 to 7.4.0 in /dvp #501
• Bump pytest from 7.2.0 to 7.4.0 in /libs #498
• Bump pytest from 7.2.0 to 7.4.0 in /platform #495
• Bump isort from 5.11.1 to 5.12.0 in /tools #489
• Bump pytest-cov from 4.0.0 to 4.1.0 in /tools #488
• Bump packaging from 22.0 to 23.1 in /tools #487
• Bump packaging from 22.0 to 23.1 in /libs #482
• Bump packaging from 22.0 to 23.1 in /platform #480
• Bump packaging from 22.0 to 23.1 in /common #472
• Bump packaging from 22.0 to 23.1 in /dvp #471

[vimleshmishra]

Thank you for taking this up.
When are we bumping up the version of virtulaization-sdk?

[SumoSourabh]

Thank you for taking this up. When are we bumping up the version of virtulaization-sdk?

We will do that once we are sure we want to release a DVP version. For now, it is okay to just merge it as CVE criticality is not that high and our automations can still verify the changes