chore(deps): various vulnerabilities resolution

Author: galkleinman

packages/opentelemetry-instrumentation-anthropic/poetry.lock

@@ -28,6 +28,9 @@ opentelemetry-api = "^1.28.0"
 opentelemetry-instrumentation = ">=0.50b0"
 opentelemetry-semantic-conventions = ">=0.50b0"
 opentelemetry-semantic-conventions-ai = "^0.4.12"
+# Security constraints for transitive dependencies
+aiohttp = "^3.12.14"
+protobuf = "^5.29.5"
 
 [tool.poetry.group.dev.dependencies]
 autopep8 = "^2.2.0"
@@ -36,7 +39,7 @@ pytest = "^8.2.2"
 pytest-sugar = "1.0.0"
 
 [tool.poetry.group.test.dependencies]
-anthropic = {extras = ["bedrock"], version = ">=0.36.0"}
+anthropic = {extras = ["bedrock"], version = ">=0.64.0"}
 pytest = "^8.2.2"
 pytest-sugar = "1.0.0"
 vcrpy = "^6.0.1"

packages/opentelemetry-instrumentation-anthropic/pyproject.toml

@@ -28,7 +28,7 @@ opentelemetry-api = "^1.28.0"
 opentelemetry-instrumentation = ">=0.50b0"
 opentelemetry-semantic-conventions = ">=0.50b0"
 opentelemetry-semantic-conventions-ai = "^0.4.12"
-anthropic = ">=0.17.0"
+anthropic = ">=0.64.0"
 tokenizers = ">=0.13.0"
 
 [tool.poetry.group.dev.dependencies]

packages/opentelemetry-instrumentation-bedrock/poetry.lock

@@ -28,6 +28,9 @@ opentelemetry-api = "^1.28.0"
 opentelemetry-instrumentation = ">=0.50b0"
 opentelemetry-semantic-conventions = ">=0.50b0"
 opentelemetry-semantic-conventions-ai = "^0.4.12"
+# Security constraints for transitive dependencies
+aiohttp = "^3.12.14"
+protobuf = "^5.29.5"
 
 [tool.poetry.group.dev.dependencies]
 autopep8 = "^2.3.1"
@@ -49,7 +52,7 @@ opentelemetry-sdk = "^1.27.0"
 opentelemetry-instrumentation-openai = { path = "../opentelemetry-instrumentation-openai", develop = true }
 opentelemetry-instrumentation-bedrock = { path = "../opentelemetry-instrumentation-bedrock", develop = true }
 text-generation = "^0.7.0"
-anthropic = "^0.51.0"
+anthropic = "^0.64.0"
 boto3 = "^1.35.49"
 langchain-anthropic = "^0.3.13"
 langchain-aws = "^0.2.11"