From d8a912f2e5ec51719849b007223f549ced9bdf9e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 10 Jul 2024 07:00:55 +0000 Subject: [PATCH] fix: dev_requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899 --- dev_requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/dev_requirements.txt b/dev_requirements.txt index 09f09f1c..1bee4cc4 100644 --- a/dev_requirements.txt +++ b/dev_requirements.txt @@ -19,3 +19,4 @@ python-vagrant>=0.5.15 pytest git+https://github.com/couchbaselabs/sphinx-autodoc-typehints.git; python_version>='3.0' git+https://github.com/couchbaselabs/mypy.git@stub-merge; python_version>'3.10' +zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability