From 9b0b76c7032afff29037235dec1b92972c4cd9a5 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 18 Jun 2024 21:26:21 +0000 Subject: [PATCH] fix: dev_requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250 --- dev_requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/dev_requirements.txt b/dev_requirements.txt index 09f09f1c..1a9738f9 100644 --- a/dev_requirements.txt +++ b/dev_requirements.txt @@ -19,3 +19,4 @@ python-vagrant>=0.5.15 pytest git+https://github.com/couchbaselabs/sphinx-autodoc-typehints.git; python_version>='3.0' git+https://github.com/couchbaselabs/mypy.git@stub-merge; python_version>'3.10' +urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability