fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250 - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899
n3tuk · Jul 11, 2024 · d1ff7b3 · d1ff7b3
1 parent 4dc3b0b
commit d1ff7b3
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/requirements.txt b/requirements.txt
@@ -1 +1,4 @@
 cookiecutter==2.6.0
+requests>=2.32.2 # not directly required, pinned by Snyk to avoid a vulnerability
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability