[rhai-mlflow-agent]

Automated dependency bumps remediating CVEs affecting rhoai-3.3.

Draft PR opened by the mlflow-cve resolve automation for maintainer review; CI and version gates still need a human sign-off before merge.

Fixes

• CVE-2026-71491: bump sqlparse (pip) to 0.6.0
  • requirements/konflux.in
  • requirements/konflux-requirements.txt

[github-actions]

Post-Codefreeze Gatekeeper — FAILED (evaluation)

Advisory only — this check does not block merging. Please review the results before merging.

Target branch: rhoai-3.3
Required Jira version: 3.3 GA RHOAI RELEASE

❌ The following issues were found:

• No Jira issue found in PR description. Expected format: RHOAIENG-1234, RHAIENG-1234, or AIPCC-1234

---

_{After resolving issues, push a commit, re-edit the PR description, or add the run-gatekeeper label to re-trigger this check.}