From e1f65431e5c1f609ea5e57b4599cabdd22cf8ed4 Mon Sep 17 00:00:00 2001 From: lbbrhzn <8673442+lbbrhzn@users.noreply.github.com> Date: Sun, 22 Sep 2024 17:04:29 +0200 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities (#1331) The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482 - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899 Co-authored-by: snyk-bot --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 0e73175d..dc9a53fb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,5 +6,5 @@ websockets==13.0.1 jsonschema==4.23.0 pre-commit pytest-homeassistant-custom-component==0.13.163 -setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability +setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability