From b770f0582ee147e7855614a927e78023f7036ceb Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 14 Apr 2024 17:33:04 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-IDNA-6597975 --- requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements.txt b/requirements.txt index f6a3615..0f4f1d6 100644 --- a/requirements.txt +++ b/requirements.txt @@ -51,3 +51,4 @@ git+https://github.com/openprocurement/rfc6266.git -e git+https://github.com/openprocurement/openprocurement.tender.belowthreshold.git@master#egg=openprocurement.tender.belowthreshold -e git+https://github.com/openprocurement/openprocurement.tender.openua.git@master#egg=openprocurement.tender.openua -e git+https://github.com/openprocurement/openprocurement.tender.openeu.git@master#egg=openprocurement.tender.openeu +idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability