From 8aac78555de054451d5e5b23db55ef56739632ac Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 9 Dec 2025 01:41:58 +0000 Subject: [PATCH] fix: rai_test_utils/requirements-dev.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192442 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14192443 --- rai_test_utils/requirements-dev.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/rai_test_utils/requirements-dev.txt b/rai_test_utils/requirements-dev.txt index 7abf875ff0..cb2210dbe0 100644 --- a/rai_test_utils/requirements-dev.txt +++ b/rai_test_utils/requirements-dev.txt @@ -9,4 +9,5 @@ numpy<2.0.0 ml-wrappers requests Pillow>=10.0.0; python_version>"3.7" # due to breaking changes in v10.0.0 (https://pillow.readthedocs.io/en/latest/releasenotes/10.0.0.html) -Pillow<10.0.0; python_version<="3.7" # Pillow v10.0.0 is only available starting with Python 3.8 \ No newline at end of file +Pillow<10.0.0; python_version<="3.7" # Pillow v10.0.0 is only available starting with Python 3.8 +urllib3>=2.6.0 # not directly required, pinned by Snyk to avoid a vulnerability \ No newline at end of file