fix: pin MiniSWEAgent LiteLLM proxy dependency

[xeophon]

Motivation

• Prevent runtime unpinned resolution of litellm[proxy] in the MiniSWEAgent PEP 723 script to eliminate a supply-chain arbitrary-code-execution risk introduced by dynamic uv sync resolution.

Description

• Pin litellm[proxy]==1.89.2 in the harness script at verifiers/v1/harnesses/mini_swe_agent/program.py while preserving the existing mini-swe-agent=={version} placeholder and the existing launch flow.

Testing

• Ran uv run pre-commit install, uv run ruff check --fix verifiers/v1/harnesses/mini_swe_agent/program.py, and python -m py_compile verifiers/v1/harnesses/mini_swe_agent/program.py, and the targeted lint/compile checks passed; a full pre-commit run could not complete because hook dependencies could not be fetched in this environment.

---

Codex Task

---

Note

Low Risk
Single dependency pin in a harness script with no logic or auth changes. Low risk, and it reduces supply-chain exposure from unpinned installs.

Overview
Pins litellm[proxy] to ==1.89.2 in the MiniSWEAgent PEP 723 script (program.py).

This removes unpinned runtime resolution of that dependency while keeping the existing mini-swe-agent=={version} placeholder and launch path unchanged.

^{Reviewed by Cursor Bugbot for commit 59457c7. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Pin litellm[proxy] to version 1.89.2 in MiniSWEAgent harness

Pins the litellm[proxy] dependency in program.py to version 1.89.2 instead of using the latest available version, preventing breakage from upstream changes.

^{Macroscope summarized 59457c7.}

[macroscopeapp]

Approvability

Verdict: Approved 59457c7

This PR pins a dependency version (litellm[proxy]==1.89.2) in script metadata. It's a simple, self-contained dependency constraint with no code logic changes.

^{You can customize Macroscope's approvability policy. Learn more.}