fix(deps): update h2 (medium, 1 alerts)

[viam-ci-org-reader]

Dependabot Sweep: h2

Ecosystem: pip
Highest severity: medium
Total alerts: 1

Advisories

MEDIUM: h2 allows HTTP Request Smuggling due to illegal characters in headers

• Advisory: GHSA-847f-9342-265h | CVE: CVE-2025-57804
• Vulnerable range: < 4.3.0
• Patched version: 4.3.0
• Alert numbers:
• Affected lockfiles:
  • uv.lock

Raw data

{
  "package": "h2",
  "ecosystem": "pip",
  "advisories": [
    {
      "ghsa_id": "GHSA-847f-9342-265h",
      "cve_id": "CVE-2025-57804",
      "severity": "medium",
      "summary": "h2 allows HTTP Request Smuggling due to illegal characters in headers",
      "vulnerable_range": "< 4.3.0",
      "patched_version": "4.3.0",
      "alert_numbers": [
        57
      ],
      "manifest_paths": [
        "uv.lock"
      ]
    }
  ],
  "all_manifest_paths": [
    "uv.lock"
  ],
  "max_severity": "medium",
  "alert_count": 1
}