CRO-10765: Upgrade aiohttp to 3.13.3 to fix security vulnerabilities

[TuringND]

• Updated aiohttp from 3.12.15 to >=3.13.3 (addresses 8 high-severity vulnerabilities)
• Updated litellm to >=1.81.6 to support newer openai versions
• Updated openai to >=2.8.0,<3.0.0 for compatibility with litellm and browser-use
• Updated openhands-tools to 1.10.0 for latest features
• Added explicit browser-use >=0.11.7 constraint for aiohttp compatibility
• All dependency conflicts resolved successfully

Security vulnerabilities fixed:

• CVE-2024-52304 and related aiohttp vulnerabilities (score 7.5)
• Affects aiohttp versions <= 3.13.2

Co-authored-by: Daniel Foguelman <>

Summary of PR

Change Type

• Bug fix
• New feature
• Breaking change
• Refactor
• Other (dependency update, docs, typo fixes, etc.)

Checklist

• I have read and reviewed the code and I understand what the code is doing.
• I have tested the code to the best of my ability and ensured it works as expected.

Fixes

Resolves #(issue)

Release Notes

• Include this change in the Release Notes.