From 7babb5e2d20285a80069f48bc74275472de85d0a Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 9 Jan 2026 11:07:35 +0000
Subject: [PATCH] fix: requirements/dev.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-14896210
---
 requirements/dev.txt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/requirements/dev.txt b/requirements/dev.txt
index 31b4272..2978869 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -16,4 +16,5 @@ pytest==8.1.1
 towncrier==17.8.0
 tox==4.14.1
 twine==1.11.0
-yarl==1.1.1
\ No newline at end of file
+yarl==1.1.1
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file