From 9a22217d6c1371d277ba6bdb3ec3820e0682ed04 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Tue, 30 Jul 2024 08:27:59 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-AUTHLIB-7231109
- https://snyk.io/vuln/SNYK-PYTHON-BANDIT-6241859
- https://snyk.io/vuln/SNYK-PYTHON-BLACK-6256273
- https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867
- https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412
- https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250
- https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899
---
 requirements.txt | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index dddc0c7..05daf62 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -21,7 +21,7 @@ pep8-naming==0.13.3
 safety
 
 # Packaging
-setuptools==69.5.1
+setuptools==70.0.0
 twine==5.0.0
 wheel==0.43.0
 
@@ -30,3 +30,7 @@ types-mock==5.1.0.20240311
 types-orjson==3.6.2
 types-PyYAML==6.0.12.20240311
 types-jsonschema==4.21.0.20240331
+authlib>=1.3.1 # not directly required, pinned by Snyk to avoid a vulnerability
+requests>=2.32.2 # not directly required, pinned by Snyk to avoid a vulnerability
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability