From beaad37b685c5087ac519616e8cc9d5b656ca358 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 18 Dec 2025 10:55:57 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-FILELOCK-14458335 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-14400977 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-14400978 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-14400979 --- requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index dda2c33..86486db 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16,7 +16,7 @@ decorator==5.1.1 distlib==0.3.4 entrypoints==0.4 executing==0.8.3 -filelock==3.7.1 +filelock==3.20.1 flake8==4.0.1 flatbuffers==1.12 gast==0.4.0 @@ -91,7 +91,7 @@ termcolor==1.1.0 threadpoolctl==3.1.0 toml==0.10.2 tomli==2.0.1 -tornado==6.1 +tornado==6.5.3 tqdm==4.64.0 traitlets==5.2.2.post1 typing_extensions==4.2.0