From f62b9ba218a27d9d57b8272d2332a2e48206aaa8 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 18 Jun 2025 11:47:03 +0000 Subject: [PATCH] fix: dev_requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PROTOBUF-10364902 --- dev_requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/dev_requirements.txt b/dev_requirements.txt index 09f09f1c..e068af71 100644 --- a/dev_requirements.txt +++ b/dev_requirements.txt @@ -19,3 +19,4 @@ python-vagrant>=0.5.15 pytest git+https://github.com/couchbaselabs/sphinx-autodoc-typehints.git; python_version>='3.0' git+https://github.com/couchbaselabs/mypy.git@stub-merge; python_version>'3.10' +protobuf>=4.25.8 # not directly required, pinned by Snyk to avoid a vulnerability