From a6130b72efbb3fe976bd1e91e77f67faeb42885d Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 14 Jul 2025 05:58:31 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-10305723
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-10390193
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-10390194
---
 requirements.txt | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 97e3e42..a3bcedd 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,5 +1,6 @@
 PyTelegramBotAPI==3.7.6
 psycopg2-binary==2.8.6
-requests==2.25.1
+requests==2.32.4
 schedule==1.1.0
-icalendar~=4.0.9
\ No newline at end of file
+icalendar~=4.0.9
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file