From b29b348949597c187f044679fd1f519f831df7ce Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 2 Feb 2024 00:23:50 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-6210214
- https://snyk.io/vuln/SNYK-PYTHON-JINJA2-6150717
---
 requirements.txt | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index c2823519..12a049ad 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -24,7 +24,7 @@ click==7.0
     # via flask
 contextlib2==0.6.0.post1
     # via digitalmarketplace-utils
-cryptography==39.0.1
+cryptography==42.0.2
     # via digitalmarketplace-utils
 defusedxml==0.6.0
     # via odfpy
@@ -79,7 +79,7 @@ itsdangerous==1.1.0
     #   -r requirements.in
     #   flask
     #   flask-wtf
-jinja2==2.11.3
+jinja2==3.1.3
     # via
     #   digitalmarketplace-content-loader
     #   flask