Update dependencies with security fixes

[vinibrsl]

• Pillow 12.1.1 → 12.3.0 (CVE-2026-55798, CVE-2026-54059, CVE-2026-54060, CVE-2026-55379, CVE-2026-55380, CVE-2026-59197, CVE-2026-59203)
• mcp 1.26.0 → 1.28.1 (CVE-2026-59950)
• couchbase 4.3.5 → 4.6.0

[coderabbitai]

📝 Walkthrough

Walkthrough

Changes

Parser coverage

Layer / File(s)	Summary
Markdown-like action input parsing lib/crewai/tests/agents/test_crew_agent_parser.py	Adds coverage confirming that action inputs beginning with ** preserve the original text and produce the expected AgentAction.

Dependency and vulnerability updates

Layer / File(s)	Summary
Package dependency constraints lib/crewai-files/pyproject.toml, lib/crewai-tools/pyproject.toml, lib/crewai/pyproject.toml, pyproject.toml	Updates Pillow, Couchbase, and MCP version constraints, including an upper bound for the optional MCP dependency.
Vulnerability scan arguments .github/workflows/vulnerability-scan.yml	Runs pip-audit with a Bash argument array and updates the ignored vulnerability identifiers.

Suggested reviewers: lorenzejay, lorenzejay

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title accurately summarizes the dependency security update as the main change.
Description check	✅ Passed	The description is directly related to the dependency upgrades and security fixes in the pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix-vulns

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit de7662e. Configure here.}