📌(agents) unpin OpenSSL and related dependencies

The base image now includes OpenSSL 3.5.5, which resolves
CVE-2025-15467.

Remove explicit pinning of OpenSSL and its dependencies.

CHANGELOG.md

@@ -30,6 +30,7 @@ and this project adheres to
 - ⚡️(helm) reduce initialDelaySeconds and add periods seconds #1139
 - 🔒️(backend) avoid information exposure through exception messages #1144
 - ⬆️(dependencies) update PyJWT to v2.12.0 [SECURITY] #1151
+- 📌(agents) unpin OpenSSL and related dependencies #1167
 
 ### Fixed
 

src/agents/Dockerfile

@@ -1,14 +1,11 @@
 FROM python:3.13-slim AS base
 
 # Install system dependencies required by LiveKit
-RUN apt-get update \
- && apt-get install -y --no-install-recommends \
-        libglib2.0-0 \
-        libgobject-2.0-0 \
- && apt-get upgrade -y openssl libssl3t64 \
- && apt-get clean \
- && rm -rf /var/lib/apt/lists/*
-    
+RUN apt-get update && apt-get install -y \
+    libglib2.0-0 \
+    libgobject-2.0-0 \
+    && rm -rf /var/lib/apt/lists/*
+
 FROM base AS builder
 
 WORKDIR /builder