From ae6ff1ef47c32e3b4e437696af0b6ab842e8b4b7 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 25 Jun 2024 05:51:07 +0000 Subject: [PATCH] fix: requirements-dev.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-ANYIO-7361842 --- requirements-dev.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements-dev.txt b/requirements-dev.txt index ea38712d89d..7b985ae48d2 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -16,3 +16,4 @@ lintrunner-adapters>=0.12.3 # Edit additional linter dependencies in requirements-lintrunner.txt # Dependencies for the reference implementation. -r requirements-reference.txt +anyio>=4.4.0 # not directly required, pinned by Snyk to avoid a vulnerability