splunk · shuningc · Aug 11, 2026 · Jul 27, 2026 · Jul 27, 2026 · Jul 27, 2026
diff --git a/examples/agent/crewAI/research_crew/pyproject.toml b/examples/agent/crewAI/research_crew/pyproject.toml
@@ -8,7 +8,7 @@ dependencies = [
     "aiohttp>=3.14.1,<4",
     "crewai[tools]>=0.203.1,<1.0.0",
     "splunk-ao",
-    "python-dotenv",
+    "python-dotenv>=1.2.2",
 ]
 
 # Project-level runtime dependencies used by the Crew (added so users can

diff --git a/examples/agent/google-adk/requirements.txt b/examples/agent/google-adk/requirements.txt
@@ -1,4 +1,4 @@
 google-adk>=1.28.1
 openinference-instrumentation-google-adk
-python-dotenv
+python-dotenv>=1.2.2
 splunk-ao
diff --git a/examples/agent/langchain-middleware/requirements.txt b/examples/agent/langchain-middleware/requirements.txt
@@ -2,4 +2,4 @@ openai
 langchain
 langchain-openai
 splunk-ao
-python-dotenv
+python-dotenv>=1.2.2
diff --git a/examples/agent/langgraph-fsi-agent/after/pyproject.toml b/examples/agent/langgraph-fsi-agent/after/pyproject.toml
@@ -15,7 +15,7 @@ dependencies = [
   "langgraph~=0.4.7",
   "langgraph-supervisor>=0.0.26",
   "pinecone[asyncio]>=6.0.2",
-  "python-dotenv>=1.1.0",
+  "python-dotenv>=1.2.2",
 ]
 
 [dependency-groups]

diff --git a/examples/agent/langgraph-fsi-agent/before/poetry.lock b/examples/agent/langgraph-fsi-agent/before/poetry.lock
diff --git a/examples/agent/langgraph-fsi-agent/before/pyproject.toml b/examples/agent/langgraph-fsi-agent/before/pyproject.toml
@@ -14,7 +14,7 @@ dependencies = [
   "langgraph~=0.4.7",
   "langgraph-supervisor>=0.0.26",
   "pinecone[asyncio]>=6.0.2",
-  "python-dotenv>=1.1.0",
+  "python-dotenv>=1.2.2",
 ]
 
 [dependency-groups]

diff --git a/examples/agent/langgraph-open-telemetry/pyproject.toml b/examples/agent/langgraph-open-telemetry/pyproject.toml
@@ -8,7 +8,7 @@ dependencies = [
     "langgraph>=0.6.0",
     "langgraph-prebuilt>=0.6.0",
     "openai",
-    "python-dotenv>=1.1.0",
+    "python-dotenv>=1.2.2",
     "splunk-ao",
     "opentelemetry-instrumentation-langchain>=0.48.1",
     "opentelemetry-instrumentation-openai-v2>=2.1b0",

diff --git a/examples/agent/langgraph-otel/pyproject.toml b/examples/agent/langgraph-otel/pyproject.toml
@@ -14,7 +14,7 @@ dependencies = [
     "opentelemetry-exporter-otlp-proto-grpc>=1.36.0",
     "opentelemetry-exporter-otlp-proto-http>=1.36.0",
     "openinference-instrumentation-langchain>=0.1.0",
-    "python-dotenv>=1.1.0",
+    "python-dotenv>=1.2.2",
     "openinference-instrumentation-openai>=0.1.32",
 ]
 

diff --git a/examples/agent/langgraph-telecom-agent/pyproject.toml b/examples/agent/langgraph-telecom-agent/pyproject.toml
@@ -15,7 +15,7 @@ dependencies = [
   "langgraph~=0.4.7",
   "langgraph-supervisor>=0.0.26",
   "pinecone[asyncio]>=6.0.2",
-  "python-dotenv>=1.1.0",
+  "python-dotenv>=1.2.2",
 ]
 
 [dependency-groups]

diff --git a/examples/agent/langgraph-traceloop/pyproject.toml b/examples/agent/langgraph-traceloop/pyproject.toml
@@ -11,7 +11,7 @@ dependencies = [
     "langchain-core>=0.3.0",
     "langchain-openai>=0.2.0",
     "openai",
-    "python-dotenv>=1.1.0",
+    "python-dotenv>=1.2.2",
     "traceloop-sdk>=0.30.0",
 ]
 

diff --git a/examples/agent/minimal-agent-example/requirements.txt b/examples/agent/minimal-agent-example/requirements.txt
@@ -17,4 +17,4 @@ six==1.17.0
 typing_extensions==4.12.2
 urllib3==2.7.0
 yarl==1.18.3
-python-dotenv>=1.0.0
+python-dotenv>=1.2.2
diff --git a/examples/agent/startup-simulator-3000/requirements.txt b/examples/agent/startup-simulator-3000/requirements.txt
@@ -34,7 +34,7 @@ pydantic-core
 pydantic-settings
 pyjwt==2.13.0
 python-dateutil==2.9.0.post0
-python-dotenv==1.1.0
+python-dotenv==1.2.2
 pyyaml==6.0.2
 regex==2024.11.6
 requests==2.33.0

diff --git a/examples/agent/strands-agents/requirements.txt b/examples/agent/strands-agents/requirements.txt
@@ -1,6 +1,6 @@
 opentelemetry-api
 opentelemetry-exporter-otlp
 opentelemetry-sdk
-python-dotenv
+python-dotenv>=1.2.2
 strands-agents
 strands-agents-tools
diff --git a/examples/agent/weather-vibes-agent/requirements.txt b/examples/agent/weather-vibes-agent/requirements.txt
@@ -1,7 +1,7 @@
 # Core dependencies
 fastapi
 uvicorn
-python-dotenv
+python-dotenv>=1.2.2
 jinja2
 pydantic
 rich>=13.0.0

diff --git a/examples/chatbot/elevenlabs-chatbot/README.md b/examples/chatbot/elevenlabs-chatbot/README.md
@@ -61,7 +61,7 @@ Edit `.env` with your credentials. Note for `ELEVENLABS_*` variables you can [si
 
 ## Requirements
 
-- Python 3.10+
+- Python 3.11+
 - Microphone and headphones (to avoid audio feedback)
 
 ## Learn More

diff --git a/examples/chatbot/elevenlabs-chatbot/pyproject.toml b/examples/chatbot/elevenlabs-chatbot/pyproject.toml
@@ -2,9 +2,9 @@
 name = "elevenlabs-chatbot"
 version = "0.1.0"
 description = "ElevenLabs Voice Chatbot with Splunk AO logging and tracing"
-requires-python = ">=3.9"
+requires-python = ">=3.11"
 dependencies = [
-    "python-dotenv>=1.0.0",
+    "python-dotenv>=1.2.2",
     "elevenlabs>=1.0.0",
     "splunk-ao",
     "pyaudio>=0.2.14",

diff --git a/examples/chatbot/elevenlabs-chatbot/requirements.txt b/examples/chatbot/elevenlabs-chatbot/requirements.txt
@@ -1,4 +1,4 @@
-python-dotenv>=1.0.0
+python-dotenv>=1.2.2
 elevenlabs>=1.0.0
 splunk-ao
 pyaudio>=0.2.14
diff --git a/examples/chatbot/sample-project-chatbot/anthropic/requirements.txt b/examples/chatbot/sample-project-chatbot/anthropic/requirements.txt
@@ -1,4 +1,4 @@
 anthropic
 splunk-ao
-python-dotenv
+python-dotenv>=1.2.2
 pytest
diff --git a/examples/chatbot/sample-project-chatbot/azure-inference/requirements.txt b/examples/chatbot/sample-project-chatbot/azure-inference/requirements.txt
@@ -1,4 +1,4 @@
 azure-ai-inference
 splunk-ao
-python-dotenv
+python-dotenv>=1.2.2
 pytest
diff --git a/examples/chatbot/sample-project-chatbot/openai-ollama/requirements.txt b/examples/chatbot/sample-project-chatbot/openai-ollama/requirements.txt
@@ -1,3 +1,3 @@
 splunk-ao[openai]
-python-dotenv
+python-dotenv>=1.2.2
 pytest
diff --git a/examples/experiments/multi-turn/requirements.txt b/examples/experiments/multi-turn/requirements.txt
@@ -1,2 +1,2 @@
 splunk-ao
-python-dotenv
+python-dotenv>=1.2.2
diff --git a/examples/experiments/rag-and-tools/requirements.txt b/examples/experiments/rag-and-tools/requirements.txt
@@ -1,2 +1,2 @@
 splunk-ao[openai]
-python-dotenv
+python-dotenv>=1.2.2
diff --git a/examples/experiments/upload_experiment/requirements.txt b/examples/experiments/upload_experiment/requirements.txt
@@ -1,2 +1,2 @@
 splunk-ao
-python-dotenv>=1.0.0
+python-dotenv>=1.2.2
diff --git a/examples/logging-samples/distributed-tracing/requirements.txt b/examples/logging-samples/distributed-tracing/requirements.txt
@@ -1,5 +1,5 @@
 # Core dependencies
-python-dotenv==1.1.1
+python-dotenv==1.2.2
 pydantic==2.11.9
 
 # HTTP and Web Framework

diff --git a/examples/logging-samples/log-mcp-calls/requirements.txt b/examples/logging-samples/log-mcp-calls/requirements.txt
@@ -1,4 +1,4 @@
 anthropic
 splunk-ao
 mcp>=1.27.2,<2
-python-dotenv
+python-dotenv>=1.2.2
diff --git a/examples/logging-samples/openai-responses/requirements.txt b/examples/logging-samples/openai-responses/requirements.txt
@@ -57,7 +57,7 @@ pyjwt==2.13.0
     #   galileo-core
 python-dateutil==2.9.0.post0
     # via splunk-ao
-python-dotenv==1.2.1
+python-dotenv==1.2.2
     # via pydantic-settings
 six==1.17.0
     # via python-dateutil

diff --git a/examples/logging-samples/splunk-ao-logger/requirements.txt b/examples/logging-samples/splunk-ao-logger/requirements.txt
@@ -1,2 +1,2 @@
 splunk-ao
-python-dotenv
+python-dotenv>=1.2.2
diff --git a/examples/rag/cli-rag-demo/requirements.txt b/examples/rag/cli-rag-demo/requirements.txt
@@ -22,5 +22,5 @@ yarl==1.18.3
 faiss-cpu>=1.7.4
 sentence-transformers>=2.5.1
 numpy>=1.24.0  # Required by FAISS and sentence-transformers
-python-dotenv>=1.0.0  # Added for dotenv support
+python-dotenv>=1.2.2  # Added for dotenv support
 datasets>=2.18.0  # Added for loading example datasets
diff --git a/examples/rag/elastic-chatbot-rag-app/requirements.in b/examples/rag/elastic-chatbot-rag-app/requirements.in
@@ -1,4 +1,5 @@
-# security floors (VULN-88795 / CVE-2026-54275 — aiohttp SNI bypass)
+# security floors (VULN-88817 — python-dotenv symlink overwrite; VULN-88795 — aiohttp SNI bypass)
+python-dotenv>=1.2.2
 aiohttp>=3.14.1,<4
 
 # core dependencies

diff --git a/examples/rag/elastic-chatbot-rag-app/requirements.txt b/examples/rag/elastic-chatbot-rag-app/requirements.txt
@@ -378,7 +378,7 @@ python-dateutil==2.9.0.post0
     # via
     #   botocore
     #   google-cloud-bigquery
-python-dotenv==1.0.1
+python-dotenv==1.2.2
     # via pydantic-settings
-python-dotenv==1.2.2
-    # via pydantic-settings
+python-dotenv==1.2.2
+    # via
+    #   -r requirements.in
+    #   pydantic-settings
-python-dotenv==1.2.2
-    # via pydantic-settings
+python-dotenv==1.2.2
+    # via
+    #   -r requirements.in
+    #   pydantic-settings
-python-dotenv==1.2.2
-    # via pydantic-settings
+python-dotenv==1.2.2
+    # via
+    #   -r requirements.in
+    #   pydantic-settings
-python-dotenv==1.2.2
-    # via pydantic-settings
+python-dotenv==1.2.2
+    # via
+    #   -r requirements.in
+    #   pydantic-settings
 pyyaml==6.0.2
     # via

diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -60,6 +60,7 @@ opentelemetry-api = "^1.38.0"
 opentelemetry-exporter-otlp-proto-http = "^1.38.0"
 filelock = ">=3.20.1"
 idna = ">=3.15,<4"
+python-dotenv = ">=1.2.2"
-python-dotenv = ">=1.2.2"
+# security floor (VULN-88817 — python-dotenv symlink overwrite)
+python-dotenv = ">=1.2.2"
-python-dotenv = ">=1.2.2"
+# security floor (VULN-88817 — python-dotenv symlink overwrite)
+python-dotenv = ">=1.2.2"
 requests = ">=2.33.0"
 uv = { version = ">=0.9.6", optional = true, python = ">=3.11,<3.14" }
 mcp = { version = ">=1.27.2,<2", optional = true }

diff --git a/splunk-ao-a2a/pyproject.toml b/splunk-ao-a2a/pyproject.toml
@@ -51,7 +51,7 @@ examples = [
     "langchain>=1.2.13",
     "langchain-openai>=1.1.12",
     "langgraph>=1.1.3",
-    "python-dotenv>=1.1.0",
+    "python-dotenv>=1.2.2",
 ]
 
 [build-system]