fix: suppress smolagents GHSA-54fq-v6x8-244g and GHSA-jxgv-6j54-wwc7 (CVSS 6.3, no stable fix yet)

[JacobPEvans-personal]

Context

smolagents has two CVSS 6.3 advisories with no stable fix version as of 2026-05-07:

• GHSA-54fq-v6x8-244g: last_affected: 1.25.0.dev0 — fix expected in 1.25.0 stable
• GHSA-jxgv-6j54-wwc7: last_affected: 1.24.0 — fix expected after 1.24.0

The CVSS 10.0 vulnerability (GHSA-q9r5-6hrr-9ph7) was resolved by upgrading to 1.24.0.

These two are suppressed in osv-scanner.toml until 2026-08-07.

Action Required

When smolagents 1.25.0 stable is released, close this issue and remove both suppression entries from osv-scanner.toml.

Verification command:

osv-scanner scan --config osv-scanner.toml uv.lock