From 00ef1feafcf9b20243c524596692491ff3cd6cfe Mon Sep 17 00:00:00 2001
From: lgcorzo <lgcorzo@gmail.com>
Date: Sun, 25 Oct 2026 11:10:23 +0100
Subject: [PATCH] fix(deps): remediate opentelemetry vulnerabilities and
 synchronize manifests

---
 poetry.lock      | 266 ++++++++++++++++++++++++++---------------------
 pyproject.toml   |   8 +-
 python_env.yaml  |  48 +++++----
 requirements.txt |  45 ++++----
 4 files changed, 202 insertions(+), 165 deletions(-)

diff --git a/poetry.lock b/poetry.lock
index fbd3fde..4d63b08 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -1,4 +1,4 @@
-# This file is automatically @generated by Poetry 2.5.1 and should not be changed by hand.
+# This file is automatically @generated by Poetry 2.3.2 and should not be changed by hand.
 
 [[package]]
 name = "aiobotocore"
@@ -633,7 +633,7 @@ files = [
 [package.dependencies]
 jmespath = ">=0.7.1,<2.0.0"
 python-dateutil = ">=2.1,<3.0.0"
-urllib3 = ">=1.25.4,!=2.2.0,<3"
+urllib3 = ">=1.25.4,<2.2.0 || >2.2.0,<3"
 
 [package.extras]
 crt = ["awscrt (==0.36.0)"]
@@ -1654,7 +1654,7 @@ files = [
 
 [package.dependencies]
 google-auth = ">=2.0,<3.0"
-protobuf = ">=4.25.8,<5.26 || >=5.29.dev0,!=5.29.0,!=5.29.1,!=5.29.2,!=5.29.3,!=5.29.4,!=6.30.0,!=6.30.1,!=6.31.0,<7.0"
+protobuf = ">=4.25.8,<5.26.dev0 || >5.29.0,<5.29.1 || >5.29.1,<5.29.2 || >5.29.2,<5.29.3 || >5.29.3,<5.29.4 || >5.29.4,<6.30.0 || >6.30.0,<6.30.1 || >6.30.1,<6.31.0 || >6.31.0,<7.0"
 requests = ">=2.28.1,<3"
 urllib3 = ">=1.26,<3"
 
@@ -1739,24 +1739,6 @@ files = [
     {file = "defusedxml-0.7.1.tar.gz", hash = "sha256:1bb3032db185915b62d7c6209c5a8792be6a32ab2fedacc84e01b52c51aa3e69"},
 ]
 
-[[package]]
-name = "deprecated"
-version = "1.3.1"
-description = "Python @deprecated decorator to deprecate old python classes, functions or methods."
-optional = false
-python-versions = "!=3.0.*,!=3.1.*,!=3.2.*,!=3.3.*,>=2.7"
-groups = ["main"]
-files = [
-    {file = "deprecated-1.3.1-py2.py3-none-any.whl", hash = "sha256:597bfef186b6f60181535a29fbe44865ce137a5079f295b479886c82729d5f3f"},
-    {file = "deprecated-1.3.1.tar.gz", hash = "sha256:b1b50e0ff0c1fddaa5708a2c6b0a6588bb09b892825ab2b214ac9ea9d92a5223"},
-]
-
-[package.dependencies]
-wrapt = ">=1.10,<3"
-
-[package.extras]
-dev = ["PyTest", "PyTest-Cov", "bump2version (<1)", "setuptools ; python_version >= \"3.12\"", "tox"]
-
 [[package]]
 name = "dictdiffer"
 version = "0.10.0"
@@ -2201,7 +2183,7 @@ files = [
 
 [package.dependencies]
 annotated-doc = ">=0.0.2"
-pydantic = ">=1.7.4,!=1.8,!=1.8.1,!=2.0.0,!=2.0.1,!=2.1.0,<3.0.0"
+pydantic = ">=1.7.4,<1.8 || >1.8,<1.8.1 || >1.8.1,<2.0.0 || >2.0.0,<2.0.1 || >2.0.1,<2.1.0 || >2.1.0,<3.0.0"
 starlette = ">=0.40.0,<0.51.0"
 typing-extensions = ">=4.8.0"
 
@@ -2531,7 +2513,7 @@ files = [
 ]
 
 [package.dependencies]
-aiohttp = {version = "!=4.0.0a0,!=4.0.0a1", optional = true, markers = "extra == \"http\""}
+aiohttp = {version = "<4.0.0a0 || >4.0.0a0,<4.0.0a1 || >4.0.0a1", optional = true, markers = "extra == \"http\""}
 tqdm = {version = "*", optional = true, markers = "extra == \"tqdm\""}
 
 [package.extras]
@@ -3238,7 +3220,7 @@ comm = ">=0.1.1"
 debugpy = ">=1.6.5"
 ipython = ">=7.23.1"
 jupyter-client = ">=8.0.0"
-jupyter-core = ">=4.12,<5.0 || >=5.1.dev0"
+jupyter-core = ">=4.12,<5.0.dev0 || >=5.1.dev0"
 matplotlib-inline = ">=0.1"
 nest-asyncio = ">=1.4"
 packaging = ">=22"
@@ -4125,7 +4107,7 @@ files = [
 
 [package.dependencies]
 aiohttp = ">=3.7.0,<4"
-alembic = "!=1.10.0,<2"
+alembic = "<1.10.0 || >1.10.0,<2"
 cryptography = ">=43.0.0,<51"
 docker = ">=4.0.0,<8"
 Flask = "<4"
@@ -4173,14 +4155,14 @@ files = [
 ]
 
 [package.dependencies]
-anyio = ">=3.6.2,!=4.15.0,<5"
+anyio = ">=3.6.2,<4.15.0 || >4.15.0,<5"
 cachetools = ">=5.0.0,<8"
 click = ">=7.0,<9"
 cloudpickle = "<4"
 databricks-sdk = ">=0.20.0,<1"
 fastapi = "<1"
 gitpython = ">=3.1.9,<4"
-importlib_metadata = ">=3.7.0,!=4.7.0,<10"
+importlib_metadata = ">=3.7.0,<4.7.0 || >4.7.0,<10"
 opentelemetry-api = ">=1.9.0,<3"
 opentelemetry-proto = ">=1.9.0,<3"
 opentelemetry-sdk = ">=1.9.0,<3"
@@ -4248,7 +4230,7 @@ files = [
 aiofiles = "*"
 aiokafka = "*"
 click = "*"
-fastapi = ">=0.88.0,!=0.89.0,<0.125.0"
+fastapi = ">=0.88.0,<0.89.0 || >0.89.0,<0.125.0"
 gevent = "*"
 geventhttpclient = "*"
 grpcio = ">=1.67.1"
@@ -4677,7 +4659,7 @@ files = [
 [package.dependencies]
 fastjsonschema = ">=2.15"
 jsonschema = ">=2.6"
-jupyter-core = ">=4.12,<5.0 || >=5.1.dev0"
+jupyter-core = ">=4.12,<5.0.dev0 || >=5.1.dev0"
 traitlets = ">=5.1"
 
 [package.extras]
@@ -4834,234 +4816,284 @@ PyYAML = ">=5.1.0"
 
 [[package]]
 name = "opentelemetry-api"
-version = "1.30.0"
+version = "1.45.1"
 description = "OpenTelemetry Python API"
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.10"
+groups = ["main"]
+files = [
+    {file = "opentelemetry_api-1.45.1-py3-none-any.whl", hash = "sha256:b31553efa588ae44bc306f863c785c5333a9ecc091248c6ee68b4b6c87fdedfb"},
+    {file = "opentelemetry_api-1.45.1.tar.gz", hash = "sha256:aa38ed19bcc084ba42782a73255b3582283eced7ad6dddbd6695189e69adfb75"},
+]
+
+[package.dependencies]
+typing-extensions = ">=4.5.0"
+
+[[package]]
+name = "opentelemetry-exporter-http-transport"
+version = "0.66b1"
+description = "OpenTelemetry Exporters HTTP transport"
+optional = false
+python-versions = ">=3.10"
 groups = ["main"]
 files = [
-    {file = "opentelemetry_api-1.30.0-py3-none-any.whl", hash = "sha256:d5f5284890d73fdf47f843dda3210edf37a38d66f44f2b5aedc1e89ed455dc09"},
-    {file = "opentelemetry_api-1.30.0.tar.gz", hash = "sha256:375893400c1435bf623f7dfb3bcd44825fe6b56c34d0667c542ea8257b1a1240"},
+    {file = "opentelemetry_exporter_http_transport-0.66b1-py3-none-any.whl", hash = "sha256:2f95404bdee7f9d2d529c7de56c7bd86d014d774d8fbf137810e0167f8a492bf"},
+    {file = "opentelemetry_exporter_http_transport-0.66b1.tar.gz", hash = "sha256:443080203bf52586ce0b2ad901e8951c61833eab1aa539ae6f1f16fe9e8e7952"},
 ]
 
 [package.dependencies]
-deprecated = ">=1.2.6"
-importlib-metadata = ">=6.0,<=8.5.0"
+opentelemetry-api = ">=1.15,<2.0"
+requests = {version = ">=2.25,<3.0", optional = true, markers = "extra == \"requests\""}
+
+[package.extras]
+requests = ["requests (>=2.25,<3.0)"]
+urllib3 = ["urllib3 (>=1.26)"]
 
 [[package]]
 name = "opentelemetry-exporter-otlp"
-version = "1.30.0"
+version = "1.45.1"
 description = "OpenTelemetry Collector Exporters"
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.10"
+groups = ["main"]
+files = [
+    {file = "opentelemetry_exporter_otlp-1.45.1-py3-none-any.whl", hash = "sha256:ef3910d32b36ccbaf62390189759bd43a8109885e2d50b738ed9c9b255bf5cb5"},
+    {file = "opentelemetry_exporter_otlp-1.45.1.tar.gz", hash = "sha256:d0ac35592e77663a9fabf2740b4818c57196b1b764e0c8449d0d7bb2c7b2bc67"},
+]
+
+[package.dependencies]
+opentelemetry-exporter-otlp-proto-grpc = "1.45.1"
+opentelemetry-exporter-otlp-proto-http = "1.45.1"
+
+[[package]]
+name = "opentelemetry-exporter-otlp-common"
+version = "0.66b1"
+description = "OpenTelemetry OTLP HTTP export utilities"
+optional = false
+python-versions = ">=3.10"
 groups = ["main"]
 files = [
-    {file = "opentelemetry_exporter_otlp-1.30.0-py3-none-any.whl", hash = "sha256:44e11054ec571ccfed73a83c6429dee5d334d061d0e0572e3160d6de97156dbc"},
-    {file = "opentelemetry_exporter_otlp-1.30.0.tar.gz", hash = "sha256:da7769f95cd5be5b09dd4188ac153a33709eda652217f2d10aed6518c8e60f0d"},
+    {file = "opentelemetry_exporter_otlp_common-0.66b1-py3-none-any.whl", hash = "sha256:00ff8592c3a7cb729ff3fdc7ffa12372c243bdf2163e80c180994d0c7bd83ee9"},
+    {file = "opentelemetry_exporter_otlp_common-0.66b1.tar.gz", hash = "sha256:6b1403487a2185ac1feb45fd5546fdf8630ce71c36bcefaadf51e2130e9e23f9"},
 ]
 
 [package.dependencies]
-opentelemetry-exporter-otlp-proto-grpc = "1.30.0"
-opentelemetry-exporter-otlp-proto-http = "1.30.0"
+opentelemetry-sdk = ">=1.45.1,<1.46.0"
+
+[package.extras]
+http = ["opentelemetry-exporter-http-transport (==0.66b1)"]
 
 [[package]]
 name = "opentelemetry-exporter-otlp-proto-common"
-version = "1.30.0"
+version = "1.45.1"
 description = "OpenTelemetry Protobuf encoding"
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.10"
 groups = ["main"]
 files = [
-    {file = "opentelemetry_exporter_otlp_proto_common-1.30.0-py3-none-any.whl", hash = "sha256:5468007c81aa9c44dc961ab2cf368a29d3475977df83b4e30aeed42aa7bc3b38"},
-    {file = "opentelemetry_exporter_otlp_proto_common-1.30.0.tar.gz", hash = "sha256:ddbfbf797e518411857d0ca062c957080279320d6235a279f7b64ced73c13897"},
+    {file = "opentelemetry_exporter_otlp_proto_common-1.45.1-py3-none-any.whl", hash = "sha256:2f446183ae7047b036226f1d846c41a834b0e8755ad13b51a51dd38952eb466c"},
+    {file = "opentelemetry_exporter_otlp_proto_common-1.45.1.tar.gz", hash = "sha256:2e4adcc3a67bcf57804fc49514f0ef64974ca7590aa3491da389852b4a0628f6"},
 ]
 
 [package.dependencies]
-opentelemetry-proto = "1.30.0"
+opentelemetry-proto = "1.45.1"
 
 [[package]]
 name = "opentelemetry-exporter-otlp-proto-grpc"
-version = "1.30.0"
+version = "1.45.1"
 description = "OpenTelemetry Collector Protobuf over gRPC Exporter"
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.10"
 groups = ["main"]
 files = [
-    {file = "opentelemetry_exporter_otlp_proto_grpc-1.30.0-py3-none-any.whl", hash = "sha256:2906bcae3d80acc54fd1ffcb9e44d324e8631058b502ebe4643ca71d1ff30830"},
-    {file = "opentelemetry_exporter_otlp_proto_grpc-1.30.0.tar.gz", hash = "sha256:d0f10f0b9b9a383b7d04a144d01cb280e70362cccc613987e234183fd1f01177"},
+    {file = "opentelemetry_exporter_otlp_proto_grpc-1.45.1-py3-none-any.whl", hash = "sha256:e42ecb789d2fc5d8145e3dadc3e2991c9f18cd166d7c7514e234702540274b76"},
+    {file = "opentelemetry_exporter_otlp_proto_grpc-1.45.1.tar.gz", hash = "sha256:3b3dcfbfdcb4e35149fcf309972282054b45228f5c10547d0095d6578510a9a0"},
 ]
 
 [package.dependencies]
-deprecated = ">=1.2.6"
-googleapis-common-protos = ">=1.52,<2.0"
-grpcio = ">=1.63.2,<2.0.0"
+googleapis-common-protos = ">=1.57,<2.0"
+grpcio = {version = ">=1.63.2,<2.0.0", markers = "python_version < \"3.13\""}
 opentelemetry-api = ">=1.15,<2.0"
-opentelemetry-exporter-otlp-proto-common = "1.30.0"
-opentelemetry-proto = "1.30.0"
-opentelemetry-sdk = ">=1.30.0,<1.31.0"
+opentelemetry-exporter-otlp-common = "0.66b1"
+opentelemetry-exporter-otlp-proto-common = "1.45.1"
+opentelemetry-proto = "1.45.1"
+opentelemetry-sdk = ">=1.45.1,<1.46.0"
+typing-extensions = ">=4.6.0"
+
+[package.extras]
+gcp-auth = ["opentelemetry-exporter-credential-provider-gcp (>=0.59b0)"]
 
 [[package]]
 name = "opentelemetry-exporter-otlp-proto-http"
-version = "1.30.0"
+version = "1.45.1"
 description = "OpenTelemetry Collector Protobuf over HTTP Exporter"
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.10"
 groups = ["main"]
 files = [
-    {file = "opentelemetry_exporter_otlp_proto_http-1.30.0-py3-none-any.whl", hash = "sha256:9578e790e579931c5ffd50f1e6975cbdefb6a0a0a5dea127a6ae87df10e0a589"},
-    {file = "opentelemetry_exporter_otlp_proto_http-1.30.0.tar.gz", hash = "sha256:c3ae75d4181b1e34a60662a6814d0b94dd33b628bee5588a878bed92cee6abdc"},
+    {file = "opentelemetry_exporter_otlp_proto_http-1.45.1-py3-none-any.whl", hash = "sha256:24a97cf3753c7fb52fad44a696e452ff371686339e2acf3309e2eda3d0230700"},
+    {file = "opentelemetry_exporter_otlp_proto_http-1.45.1.tar.gz", hash = "sha256:45c218405ce3fd879596924b1874bf9a8f6880206d61065c5a912c8e5c297fb7"},
 ]
 
 [package.dependencies]
-deprecated = ">=1.2.6"
 googleapis-common-protos = ">=1.52,<2.0"
 opentelemetry-api = ">=1.15,<2.0"
-opentelemetry-exporter-otlp-proto-common = "1.30.0"
-opentelemetry-proto = "1.30.0"
-opentelemetry-sdk = ">=1.30.0,<1.31.0"
+opentelemetry-exporter-http-transport = {version = "0.66b1", extras = ["requests"]}
+opentelemetry-exporter-otlp-common = "0.66b1"
+opentelemetry-exporter-otlp-proto-common = "1.45.1"
+opentelemetry-proto = "1.45.1"
+opentelemetry-sdk = ">=1.45.1,<1.46.0"
 requests = ">=2.7,<3.0"
+typing-extensions = ">=4.5.0"
+
+[package.extras]
+gcp-auth = ["opentelemetry-exporter-credential-provider-gcp (>=0.59b0)"]
+requests = ["opentelemetry-exporter-http-transport[requests] (==0.66b1)", "requests (>=2.7,<3.0)"]
 
 [[package]]
 name = "opentelemetry-instrumentation"
-version = "0.51b0"
+version = "0.66b1"
 description = "Instrumentation Tools & Auto Instrumentation for OpenTelemetry Python"
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.10"
 groups = ["main"]
 files = [
-    {file = "opentelemetry_instrumentation-0.51b0-py3-none-any.whl", hash = "sha256:c6de8bd26b75ec8b0e54dff59e198946e29de6a10ec65488c357d4b34aa5bdcf"},
-    {file = "opentelemetry_instrumentation-0.51b0.tar.gz", hash = "sha256:4ca266875e02f3988536982467f7ef8c32a38b8895490ddce9ad9604649424fa"},
+    {file = "opentelemetry_instrumentation-0.66b1-py3-none-any.whl", hash = "sha256:4c4aa14dc9a24a02325a9d4c42c4d0208dbb1374c2b1b8fe6c9392d59f3e1008"},
+    {file = "opentelemetry_instrumentation-0.66b1.tar.gz", hash = "sha256:e79a510f7d87c72d95e964ddb42193a0d9a75668c027d980eab032ea1322a5ce"},
 ]
 
 [package.dependencies]
 opentelemetry-api = ">=1.4,<2.0"
-opentelemetry-semantic-conventions = "0.51b0"
+opentelemetry-semantic-conventions = "0.66b1"
 packaging = ">=18.0"
-wrapt = ">=1.0.0,<2.0.0"
+wrapt = ">=1.0.0,<3.0.0"
 
 [[package]]
 name = "opentelemetry-instrumentation-asgi"
-version = "0.51b0"
+version = "0.66b1"
 description = "ASGI instrumentation for OpenTelemetry"
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.10"
 groups = ["main"]
 files = [
-    {file = "opentelemetry_instrumentation_asgi-0.51b0-py3-none-any.whl", hash = "sha256:e8072993db47303b633c6ec1bc74726ba4d32bd0c46c28dfadf99f79521a324c"},
-    {file = "opentelemetry_instrumentation_asgi-0.51b0.tar.gz", hash = "sha256:b3fe97c00f0bfa934371a69674981d76591c68d937b6422a5716ca21081b4148"},
+    {file = "opentelemetry_instrumentation_asgi-0.66b1-py3-none-any.whl", hash = "sha256:78b3f9bdf0fa38c65935a2ab46d59e0f9de873a51e0c95b0329f106e2ccb5274"},
+    {file = "opentelemetry_instrumentation_asgi-0.66b1.tar.gz", hash = "sha256:78cdc5e45e897e16a8dac9d282e8d5bdf9af2d58e1313fa0bdd4a134c6f9dafc"},
 ]
 
 [package.dependencies]
 asgiref = ">=3.0,<4.0"
 opentelemetry-api = ">=1.12,<2.0"
-opentelemetry-instrumentation = "0.51b0"
-opentelemetry-semantic-conventions = "0.51b0"
-opentelemetry-util-http = "0.51b0"
+opentelemetry-instrumentation = "0.66b1"
+opentelemetry-semantic-conventions = "0.66b1"
+opentelemetry-util-http = "0.66b1"
 
 [package.extras]
 instruments = ["asgiref (>=3.0,<4.0)"]
 
 [[package]]
 name = "opentelemetry-instrumentation-fastapi"
-version = "0.51b0"
+version = "0.66b1"
 description = "OpenTelemetry FastAPI Instrumentation"
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.10"
 groups = ["main"]
 files = [
-    {file = "opentelemetry_instrumentation_fastapi-0.51b0-py3-none-any.whl", hash = "sha256:10513bbc11a1188adb9c1d2c520695f7a8f2b5f4de14e8162098035901cd6493"},
-    {file = "opentelemetry_instrumentation_fastapi-0.51b0.tar.gz", hash = "sha256:1624e70f2f4d12ceb792d8a0c331244cd6723190ccee01336273b4559bc13abc"},
+    {file = "opentelemetry_instrumentation_fastapi-0.66b1-py3-none-any.whl", hash = "sha256:97f8ac8fd7537517f9e6988bd0aca04bfa5aad564bcd46c245530739e2be72d1"},
+    {file = "opentelemetry_instrumentation_fastapi-0.66b1.tar.gz", hash = "sha256:584cf9d2c4417ff8b2d6ff2bc606bfe13c8b3456018bf94f50f2cf658492505b"},
 ]
 
 [package.dependencies]
 opentelemetry-api = ">=1.12,<2.0"
-opentelemetry-instrumentation = "0.51b0"
-opentelemetry-instrumentation-asgi = "0.51b0"
-opentelemetry-semantic-conventions = "0.51b0"
-opentelemetry-util-http = "0.51b0"
+opentelemetry-instrumentation = "0.66b1"
+opentelemetry-instrumentation-asgi = "0.66b1"
+opentelemetry-semantic-conventions = "0.66b1"
+opentelemetry-util-http = "0.66b1"
 
 [package.extras]
-instruments = ["fastapi (>=0.58,<1.0)"]
+instruments = ["fastapi (>=0.92,<1.0)"]
 
 [[package]]
 name = "opentelemetry-instrumentation-grpc"
-version = "0.51b0"
+version = "0.66b1"
 description = "OpenTelemetry gRPC instrumentation"
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.10"
 groups = ["main"]
 files = [
-    {file = "opentelemetry_instrumentation_grpc-0.51b0-py3-none-any.whl", hash = "sha256:cf54d77c706d7e85f293675d0990e97577b0d14ef92f4a30d55507f08f194c9b"},
-    {file = "opentelemetry_instrumentation_grpc-0.51b0.tar.gz", hash = "sha256:70931c1a9f5fdde9d4498762fd98db41ad119a7e08e432052ff83a6495bf8ac5"},
+    {file = "opentelemetry_instrumentation_grpc-0.66b1-py3-none-any.whl", hash = "sha256:8d0b0594bf86ece324367b4614c14c9a1893d65f0c7f2366a8131b45fc9ad474"},
+    {file = "opentelemetry_instrumentation_grpc-0.66b1.tar.gz", hash = "sha256:2055c8584ea67cebe9e39a13dca000cbba17c52366aa2aa7c6655fe454ec13b4"},
 ]
 
 [package.dependencies]
 opentelemetry-api = ">=1.12,<2.0"
-opentelemetry-instrumentation = "0.51b0"
-opentelemetry-semantic-conventions = "0.51b0"
-wrapt = ">=1.0.0,<2.0.0"
+opentelemetry-instrumentation = "0.66b1"
+opentelemetry-semantic-conventions = "0.66b1"
+wrapt = ">=1.0.0,<3.0.0"
 
 [package.extras]
 instruments = ["grpcio (>=1.42.0)"]
 
 [[package]]
 name = "opentelemetry-proto"
-version = "1.30.0"
+version = "1.45.1"
 description = "OpenTelemetry Python Proto"
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.10"
 groups = ["main"]
 files = [
-    {file = "opentelemetry_proto-1.30.0-py3-none-any.whl", hash = "sha256:c6290958ff3ddacc826ca5abbeb377a31c2334387352a259ba0df37c243adc11"},
-    {file = "opentelemetry_proto-1.30.0.tar.gz", hash = "sha256:afe5c9c15e8b68d7c469596e5b32e8fc085eb9febdd6fb4e20924a93a0389179"},
+    {file = "opentelemetry_proto-1.45.1-py3-none-any.whl", hash = "sha256:f38e2a8413053c180cd3d2637fbb279673ec2f6a6e09c995aafa2f452c52b46e"},
+    {file = "opentelemetry_proto-1.45.1.tar.gz", hash = "sha256:79e0fb95e4616691a469439238aa9224d75779b3e108e895d1aa125ab29ca77c"},
 ]
 
 [package.dependencies]
-protobuf = ">=5.0,<6.0"
+protobuf = ">=5.0,<8.0"
 
 [[package]]
 name = "opentelemetry-sdk"
-version = "1.30.0"
+version = "1.45.1"
 description = "OpenTelemetry Python SDK"
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.10"
 groups = ["main"]
 files = [
-    {file = "opentelemetry_sdk-1.30.0-py3-none-any.whl", hash = "sha256:14fe7afc090caad881addb6926cec967129bd9260c4d33ae6a217359f6b61091"},
-    {file = "opentelemetry_sdk-1.30.0.tar.gz", hash = "sha256:c9287a9e4a7614b9946e933a67168450b9ab35f08797eb9bc77d998fa480fa18"},
+    {file = "opentelemetry_sdk-1.45.1-py3-none-any.whl", hash = "sha256:c604c11dc429810812348989115fa44bd558772a3d7442afc43d024f2c250ca4"},
+    {file = "opentelemetry_sdk-1.45.1.tar.gz", hash = "sha256:63d24a6ca645019a631e6a51999c73e93adcac1196ca640b8ae78a7cc4762bf3"},
 ]
 
 [package.dependencies]
-opentelemetry-api = "1.30.0"
-opentelemetry-semantic-conventions = "0.51b0"
-typing-extensions = ">=3.7.4"
+opentelemetry-api = "1.45.1"
+opentelemetry-semantic-conventions = "0.66b1"
+typing-extensions = ">=4.5.0"
+
+[package.extras]
+file-configuration = ["opentelemetry-configuration (==0.66b1)"]
 
 [[package]]
 name = "opentelemetry-semantic-conventions"
-version = "0.51b0"
+version = "0.66b1"
 description = "OpenTelemetry Semantic Conventions"
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.10"
 groups = ["main"]
 files = [
-    {file = "opentelemetry_semantic_conventions-0.51b0-py3-none-any.whl", hash = "sha256:fdc777359418e8d06c86012c3dc92c88a6453ba662e941593adb062e48c2eeae"},
-    {file = "opentelemetry_semantic_conventions-0.51b0.tar.gz", hash = "sha256:3fabf47f35d1fd9aebcdca7e6802d86bd5ebc3bc3408b7e3248dde6e87a18c47"},
+    {file = "opentelemetry_semantic_conventions-0.66b1-py3-none-any.whl", hash = "sha256:d4cddeb4315490b35213f55e2bdc9ac54bb1e4d318927475bed62b35545e581b"},
+    {file = "opentelemetry_semantic_conventions-0.66b1.tar.gz", hash = "sha256:497ca63bf383723411e8eaf60c8779e9877633c936bb641080adab59d0eb6ec8"},
 ]
 
 [package.dependencies]
-deprecated = ">=1.2.6"
-opentelemetry-api = "1.30.0"
+opentelemetry-api = "1.45.1"
+typing-extensions = ">=4.5.0"
 
 [[package]]
 name = "opentelemetry-util-http"
-version = "0.51b0"
+version = "0.66b1"
 description = "Web util for OpenTelemetry"
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.10"
 groups = ["main"]
 files = [
-    {file = "opentelemetry_util_http-0.51b0-py3-none-any.whl", hash = "sha256:0561d7a6e9c422b9ef9ae6e77eafcfcd32a2ab689f5e801475cbb67f189efa20"},
-    {file = "opentelemetry_util_http-0.51b0.tar.gz", hash = "sha256:05edd19ca1cc3be3968b1e502fd94816901a365adbeaab6b6ddb974384d3a0b9"},
+    {file = "opentelemetry_util_http-0.66b1-py3-none-any.whl", hash = "sha256:8f443d7abcaf29c4a07b373bbd31b5b39132c0ed3c27d015a59dc0323d5b1c58"},
+    {file = "opentelemetry_util_http-0.66b1.tar.gz", hash = "sha256:047dea1a628031f857a5a32261dc0e955bc162d39993ed1cffb8f2cff5ba8a62"},
 ]
 
 [[package]]
@@ -7122,7 +7154,7 @@ files = [
 
 [package.dependencies]
 aiobotocore = ">=2.19.0,<4.0.0"
-aiohttp = ">=3.9.0,!=4.0.0a0,!=4.0.0a1"
+aiohttp = ">=3.9.0,<4.0.0a0 || >4.0.0a0,<4.0.0a1 || >4.0.0a1"
 fsspec = ">=2026.7.0,<2026.7.1"
 
 [[package]]
@@ -8550,4 +8582,4 @@ testing = ["coverage[toml]", "zope.event", "zope.testing"]
 [metadata]
 lock-version = "2.1"
 python-versions = ">=3.12,<3.13"
-content-hash = "8f63af82d17eae3bc285f8912712cd6aaf5cf6334e3175a4b95bec43b2d5a92a"
+content-hash = "9ba4fd3946dbd11b5bc7366916fd6a9979487765228dff42d1106009c449eec5"
diff --git a/pyproject.toml b/pyproject.toml
index e10aa80..ca4fcd5 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -35,9 +35,11 @@ dependencies = [
     "dvc-s3 (>=3.2.1,<4.0.0)",
     "mlserver (>=1.7.1,<2.0.0)",
     "mlserver-mlflow (>=1.7.1,<2.0.0)",
-    "opentelemetry-instrumentation (>=0.51b0,<0.52)",
-    "opentelemetry-exporter-otlp-proto-http (>=1.30.0,<2.0.0)",
-    "opentelemetry-exporter-otlp (>=1.30.0,<2.0.0)",
+    "opentelemetry-instrumentation (>=0.51b0,<1.0.0)",
+    "opentelemetry-exporter-otlp-proto-http (>=1.45.1,<2.0.0)",
+    "opentelemetry-exporter-otlp (>=1.45.1,<2.0.0)",
+    # explicitly define secure version for transitive dependency opentelemetry-api (April 2026 environment)
+    "opentelemetry-api (>=1.45.1,<2.0.0)",
     "confluent-kafka (>=2.8.2,<3.0.0)",
     "fastapi (>=0.124.0,<1.0.0)",
     "pyopenssl (>=26.0.0,<27.0.0)",
diff --git a/python_env.yaml b/python_env.yaml
index 5c8b3d5..92b2a6d 100644
--- a/python_env.yaml
+++ b/python_env.yaml
@@ -5,7 +5,7 @@
         "aiofiles==25.1.0",
         "aiohappyeyeballs==2.7.1",
         "aiohttp-retry==2.9.1",
-        "aiohttp==3.14.4",
+        "aiohttp==3.14.5",
         "aioitertools==0.13.0",
         "aiokafka==0.14.0",
         "aiosignal==1.4.0",
@@ -42,7 +42,6 @@
         "cryptography==50.0.2",
         "cycler==0.12.1",
         "databricks-sdk==0.123.0",
-        "deprecated==1.3.1",
         "dictdiffer==0.10.0",
         "diskcache==5.6.3",
         "distro==1.9.0",
@@ -59,7 +58,7 @@
         "dvc==3.67.1",
         "entrypoints==0.4",
         "fastapi==0.124.4",
-        "filelock==3.32.2",
+        "filelock==4.2.4",
         "flask-cors==6.0.5",
         "flask==3.1.3",
         "flatten-dict==0.5.0",
@@ -99,15 +98,15 @@
         "kombu==5.6.2",
         "llvmlite==0.48.0",
         "loguru==0.7.3",
-        "mako==1.4.2",
+        "mako==1.4.3",
         "markdown-it-py==4.2.0",
         "markupsafe==3.0.3",
         "matplotlib==3.11.1",
         "mdurl==0.1.2",
         "ml-dtypes==0.5.4",
-        "mlflow-skinny==3.16.1",
-        "mlflow-tracing==3.16.1",
-        "mlflow==3.16.1",
+        "mlflow-skinny==3.17.2",
+        "mlflow-tracing==3.17.2",
+        "mlflow==3.17.2",
         "mlserver-mlflow==1.7.1",
         "mlserver==1.7.2rc1",
         "multidict==6.9.1",
@@ -118,21 +117,23 @@
         "numba==0.66.0",
         "numpy==1.26.4",
         "omegaconf==2.3.1",
-        "opentelemetry-api==1.30.0",
-        "opentelemetry-exporter-otlp-proto-common==1.30.0",
-        "opentelemetry-exporter-otlp-proto-grpc==1.30.0",
-        "opentelemetry-exporter-otlp-proto-http==1.30.0",
-        "opentelemetry-exporter-otlp==1.30.0",
-        "opentelemetry-instrumentation-asgi==0.51b0",
-        "opentelemetry-instrumentation-fastapi==0.51b0",
-        "opentelemetry-instrumentation-grpc==0.51b0",
-        "opentelemetry-instrumentation==0.51b0",
-        "opentelemetry-proto==1.30.0",
-        "opentelemetry-sdk==1.30.0",
-        "opentelemetry-semantic-conventions==0.51b0",
-        "opentelemetry-util-http==0.51b0",
+        "opentelemetry-api==1.45.1",
+        "opentelemetry-exporter-http-transport[requests]==0.66b1",
+        "opentelemetry-exporter-otlp-common==0.66b1",
+        "opentelemetry-exporter-otlp-proto-common==1.45.1",
+        "opentelemetry-exporter-otlp-proto-grpc==1.45.1",
+        "opentelemetry-exporter-otlp-proto-http==1.45.1",
+        "opentelemetry-exporter-otlp==1.45.1",
+        "opentelemetry-instrumentation-asgi==0.66b1",
+        "opentelemetry-instrumentation-fastapi==0.66b1",
+        "opentelemetry-instrumentation-grpc==0.66b1",
+        "opentelemetry-instrumentation==0.66b1",
+        "opentelemetry-proto==1.45.1",
+        "opentelemetry-sdk==1.45.1",
+        "opentelemetry-semantic-conventions==0.66b1",
+        "opentelemetry-util-http==0.66b1",
         "orjson==3.11.9",
-        "packaging==26.2",
+        "packaging==26.3",
         "pandas==2.3.3",
         "pandera==0.20.4",
         "pathspec==1.1.1",
@@ -166,6 +167,7 @@
         "python-multipart==0.0.32",
         "python-rapidjson==1.23",
         "pytz==2026.3.post1",
+        "pywin32==312",
         "pyyaml==6.0.3",
         "requests==2.34.2",
         "rich==15.0.0",
@@ -175,7 +177,7 @@
         "scipy==1.17.1",
         "scmrepo==3.6.2",
         "semver==3.0.4",
-        "setuptools==83.0.0",
+        "setuptools==84.1.0",
         "shap==0.46.0",
         "shortuuid==1.0.13",
         "shtab==1.9.2",
@@ -217,4 +219,4 @@
         "zope-event==6.2",
         "zope-interface==8.5"
     ]
-}
+}
\ No newline at end of file
diff --git a/requirements.txt b/requirements.txt
index 3bf9ab2..6e87dc3 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,7 +2,7 @@ aiobotocore==3.9.0 ; python_version == "3.12"
 aiofiles==25.1.0 ; python_version == "3.12"
 aiohappyeyeballs==2.7.1 ; python_version == "3.12"
 aiohttp-retry==2.9.1 ; python_version == "3.12"
-aiohttp==3.14.4 ; python_version == "3.12"
+aiohttp==3.14.5 ; python_version == "3.12"
 aioitertools==0.13.0 ; python_version == "3.12"
 aiokafka==0.14.0 ; python_version == "3.12"
 aiosignal==1.4.0 ; python_version == "3.12"
@@ -39,7 +39,6 @@ contourpy==1.3.3 ; python_version == "3.12"
 cryptography==50.0.2 ; python_version == "3.12"
 cycler==0.12.1 ; python_version == "3.12"
 databricks-sdk==0.123.0 ; python_version == "3.12"
-deprecated==1.3.1 ; python_version == "3.12"
 dictdiffer==0.10.0 ; python_version == "3.12"
 diskcache==5.6.3 ; python_version == "3.12"
 distro==1.9.0 ; python_version == "3.12"
@@ -56,7 +55,7 @@ dvc-task==0.40.2 ; python_version == "3.12"
 dvc==3.67.1 ; python_version == "3.12"
 entrypoints==0.4 ; python_version == "3.12"
 fastapi==0.124.4 ; python_version == "3.12"
-filelock==3.32.2 ; python_version == "3.12"
+filelock==4.2.4 ; python_version == "3.12"
 flask-cors==6.0.5 ; python_version == "3.12"
 flask==3.1.3 ; python_version == "3.12"
 flatten-dict==0.5.0 ; python_version == "3.12"
@@ -96,15 +95,15 @@ kiwisolver==1.5.0 ; python_version == "3.12"
 kombu==5.6.2 ; python_version == "3.12"
 llvmlite==0.48.0 ; python_version == "3.12"
 loguru==0.7.3 ; python_version == "3.12"
-mako==1.4.2 ; python_version == "3.12"
+mako==1.4.3 ; python_version == "3.12"
 markdown-it-py==4.2.0 ; python_version == "3.12"
 markupsafe==3.0.3 ; python_version == "3.12"
 matplotlib==3.11.1 ; python_version == "3.12"
 mdurl==0.1.2 ; python_version == "3.12"
 ml-dtypes==0.5.4 ; python_version == "3.12"
-mlflow-skinny==3.16.1 ; python_version == "3.12"
-mlflow-tracing==3.16.1 ; python_version == "3.12"
-mlflow==3.16.1 ; python_version == "3.12"
+mlflow-skinny==3.17.2 ; python_version == "3.12"
+mlflow-tracing==3.17.2 ; python_version == "3.12"
+mlflow==3.17.2 ; python_version == "3.12"
 mlserver-mlflow==1.7.1 ; python_version == "3.12"
 mlserver==1.7.2rc1 ; python_version == "3.12"
 multidict==6.9.1 ; python_version == "3.12"
@@ -115,21 +114,23 @@ networkx==3.6.1 ; python_version == "3.12"
 numba==0.66.0 ; python_version == "3.12"
 numpy==1.26.4 ; python_version == "3.12"
 omegaconf==2.3.1 ; python_version == "3.12"
-opentelemetry-api==1.30.0 ; python_version == "3.12"
-opentelemetry-exporter-otlp-proto-common==1.30.0 ; python_version == "3.12"
-opentelemetry-exporter-otlp-proto-grpc==1.30.0 ; python_version == "3.12"
-opentelemetry-exporter-otlp-proto-http==1.30.0 ; python_version == "3.12"
-opentelemetry-exporter-otlp==1.30.0 ; python_version == "3.12"
-opentelemetry-instrumentation-asgi==0.51b0 ; python_version == "3.12"
-opentelemetry-instrumentation-fastapi==0.51b0 ; python_version == "3.12"
-opentelemetry-instrumentation-grpc==0.51b0 ; python_version == "3.12"
-opentelemetry-instrumentation==0.51b0 ; python_version == "3.12"
-opentelemetry-proto==1.30.0 ; python_version == "3.12"
-opentelemetry-sdk==1.30.0 ; python_version == "3.12"
-opentelemetry-semantic-conventions==0.51b0 ; python_version == "3.12"
-opentelemetry-util-http==0.51b0 ; python_version == "3.12"
+opentelemetry-api==1.45.1 ; python_version == "3.12"
+opentelemetry-exporter-http-transport[requests]==0.66b1 ; python_version == "3.12"
+opentelemetry-exporter-otlp-common==0.66b1 ; python_version == "3.12"
+opentelemetry-exporter-otlp-proto-common==1.45.1 ; python_version == "3.12"
+opentelemetry-exporter-otlp-proto-grpc==1.45.1 ; python_version == "3.12"
+opentelemetry-exporter-otlp-proto-http==1.45.1 ; python_version == "3.12"
+opentelemetry-exporter-otlp==1.45.1 ; python_version == "3.12"
+opentelemetry-instrumentation-asgi==0.66b1 ; python_version == "3.12"
+opentelemetry-instrumentation-fastapi==0.66b1 ; python_version == "3.12"
+opentelemetry-instrumentation-grpc==0.66b1 ; python_version == "3.12"
+opentelemetry-instrumentation==0.66b1 ; python_version == "3.12"
+opentelemetry-proto==1.45.1 ; python_version == "3.12"
+opentelemetry-sdk==1.45.1 ; python_version == "3.12"
+opentelemetry-semantic-conventions==0.66b1 ; python_version == "3.12"
+opentelemetry-util-http==0.66b1 ; python_version == "3.12"
 orjson==3.11.9 ; python_version == "3.12"
-packaging==26.2 ; python_version == "3.12"
+packaging==26.3 ; python_version == "3.12"
 pandas==2.3.3 ; python_version == "3.12"
 pandera==0.20.4 ; python_version == "3.12"
 pathspec==1.1.1 ; python_version == "3.12"
@@ -173,7 +174,7 @@ scikit-learn==1.9.0 ; python_version == "3.12"
 scipy==1.17.1 ; python_version == "3.12"
 scmrepo==3.6.2 ; python_version == "3.12"
 semver==3.0.4 ; python_version == "3.12"
-setuptools==83.0.0 ; python_version == "3.12"
+setuptools==84.1.0 ; python_version == "3.12"
 shap==0.46.0 ; python_version == "3.12"
 shortuuid==1.0.13 ; python_version == "3.12"
 shtab==1.9.2 ; python_version == "3.12"