From 0b4c0eb5ec1aa92ccc3abf824ec4bba9cd89de29 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Sun, 28 Sep 2025 14:50:26 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-10305723
- https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-9964606
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-10390194
---
 requirements.txt | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 69296b1..14cb3af 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,3 +1,4 @@
-requests>=2.31.0
+requests>=2.32.4
 tqdm>=4.66.0
-setuptools~=80.7.1
\ No newline at end of file
+setuptools~=80.7.1
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file