fix: requirements-dev.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482 - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899
OWASP · Jul 30, 2024 · cbaba5a · cbaba5a
1 parent 5482fdc
commit cbaba5a
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/requirements-dev.txt b/requirements-dev.txt
@@ -1,7 +1,9 @@
 pytest==6.2.4
 pytest-rerunfailures==10.1
 codecov==2.1.12
-requests==2.26.0
+requests==2.32.2
 flake8==3.9.2
 wheel==0.36.2
-requests==2.26.0
+requests==2.32.2
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability