Upgrade paramiko to 5.0.0 to fix security vulnerability

[ebattat]

Summary

• Upgrade paramiko from 3.4.0 to 5.0.0
• Fixes Dependabot security alert (versions <= 4.0.0 are vulnerable)

Changes

• Updated requirements.txt: paramiko 3.4.0 → 5.0.0
• Updated pyproject.toml: paramiko 3.4.0 → 5.0.0

References

• Dependabot alert notification: Sep 22, 2026
• Latest stable version: 5.0.0

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Updated the Paramiko version used by the project. No user-facing changes are included in this release.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: redhat-performance/benchmark-runner/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 9048c44a-8f0f-4946-8d6a-0c21597c3924

📥 Commits

Reviewing files that changed from the base of the PR and between 1c8eefc and 4937519.

📒 Files selected for processing (2)

• pyproject.toml
• requirements.txt

Included review availability: Your plan provides up to 12 included reviews per hour; 11 remain after this review.

---

📝 Walkthrough

Walkthrough

The Paramiko dependency version changes from 3.4.0 to 5.0.0 in pyproject.toml and requirements.txt.

Changes

Paramiko Dependency Update

Layer / File(s)	Summary
Update dependency pins pyproject.toml, requirements.txt	Both manifests change the Paramiko version from 3.4.0 to 5.0.0.

Priority: ➖ Normal

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 49375

No concrete compatibility issue remains identified for the dependency update. Normal installation and connection checks are appropriate.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the Paramiko upgrade to version 5.0.0 and its security purpose, which match the main changes.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ebattat, RobertKrawitz

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [RobertKrawitz,ebattat]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment