From cdced82041aa4b4d88ba419a32d9385916663e40 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Wed, 10 Jul 2024 07:26:17 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-7430173
- https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867
- https://snyk.io/vuln/SNYK-PYTHON-SQLPARSE-6615674
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250
- https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899
---
 requirements.txt | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index c0715a4c..940f1e7f 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,7 +2,7 @@ asgiref~=3.3
 backports.functools-lru-cache>=1.6.4
 beautifulsoup4==4.9.3
 cached-property==1.5.2
-certifi==2023.7.22
+certifi==2024.7.4
 chardet==4.0.0
 Django==4.2.11
 django-environ==0.4.5
@@ -16,15 +16,16 @@ importlib-metadata>=6.6.0
 Pillow==10.3.0
 psycopg[c]==3.1.18
 pytz==2023.3
-requests==2.31.0
+requests==2.32.2
 six==1.16.0
 soupsieve~=2.2
 sqlparse==0.5.0
 stripe==5.4.0
 tornado==6.3.3
-urllib3>=2.0.7
+urllib3>=2.2.2
 celery==5.2.2
 django-clacks>=0.1.0
 cookiecutter==2.1.1 # not directly required, pinned by Snyk to avoid a vulnerability
 setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability
 typing-extensions>=4.5.0 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability