dcb38618a7
The python-build-standalone tarball ships pip 24.1.2 and setuptools 70.3.0 which have known CVEs. Upgrade them first so --local audit only sees current, patched versions. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>