fix: requirements-dev.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-8309635 - https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-8309636 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-8309091 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-8309092
Ouranosinc · Nov 3, 2024 · 9d188e2 · 9d188e2
1 parent 457273d
commit 9d188e2
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/requirements-dev.txt b/requirements-dev.txt
@@ -22,4 +22,5 @@ responses
 safety
 tox
 unify
-werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability
+werkzeug>=3.0.6 # not directly required, pinned by Snyk to avoid a vulnerability
+waitress>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability