fix: dev-requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-FONTTOOLS-6133203
- https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867
pull/2838/head
snyk-bot 2024-06-17 11:41:21 +00:00
parent 8c520e1d94
commit 9219b458fb
No known key found for this signature in database
GPG Key ID: 78AC5AE55A47A65B
1 changed files with 1 additions and 0 deletions

View File

@ -12,3 +12,4 @@ requirements-parser
ruff
semgrep
setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability
requests>=2.32.2 # not directly required, pinned by Snyk to avoid a vulnerability