From 750431ef49ffe89ab10f745d724c7709f5d8beff Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Sun, 11 Aug 2024 21:07:59 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-ANYIO-7361842
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7435780
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7436273
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7436514
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7436646
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7642790
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7642791
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7642813
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7642814
- https://snyk.io/vuln/SNYK-PYTHON-DJANGORESTFRAMEWORK-7252137
- https://snyk.io/vuln/SNYK-PYTHON-GUNICORN-6615672
- https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321964
- https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321966
- https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321970
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-5918878
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6043904
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6182918
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219984
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219986
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6514866
- https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867
- https://snyk.io/vuln/SNYK-PYTHON-SQLPARSE-6615674
- https://snyk.io/vuln/SNYK-PYTHON-TORNADO-7217828
- https://snyk.io/vuln/SNYK-PYTHON-TORNADO-7217829
- https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6035177
- https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6808933
- https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899
---
 requirements.txt | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 42bc51f..8ddcfba 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -13,7 +13,7 @@ django-feather==0.3.0
 django-livereload-server==0.5.1
 django-permissions-policy==4.19.0
 django-robohash-svg==0.9.5
-djangorestframework==3.14.0
+djangorestframework==3.15.2
 firebase_admin==6.3.0
 fredapi==0.5.1
 functions-framework==3.5.0
@@ -22,7 +22,7 @@ google-cloud-secret-manager==2.17.0
 google-cloud-firestore==2.14.0
 google-cloud-logging==3.9.0
 googlemaps==4.10.0
-gunicorn==21.2.0
+gunicorn==22.0.0
 Markdown==3.5.2
 numexpr==2.8.8
 openai==1.9.0
@@ -30,7 +30,7 @@ openpyxl==3.1.2
 opencv-python==4.9.0.80
 pandas==2.2.0
 pdfplumber==0.10.3
-Pillow==10.2.0
+Pillow==10.3.0
 pyarrow==15.0.0
 pypdf==4.0.0
 pytesseract==0.3.10
@@ -39,7 +39,7 @@ python-dotenv==1.0.0
 pymdown-extensions==10.7
 python-markdown-math==0.8
 pyzbar==0.1.9
-requests==2.31.0
+requests==2.32.2
 scikit-learn==1.4.0
 selenium==4.16.0
 statsmodels==0.14.1
@@ -50,3 +50,9 @@ Wand==0.6.13
 whitenoise==6.6.0
 xxhash==3.4.1
 zipcodes==1.2.0
+anyio>=4.4.0 # not directly required, pinned by Snyk to avoid a vulnerability
+numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability
+sqlparse>=0.5.0 # not directly required, pinned by Snyk to avoid a vulnerability
+tornado>=6.4.1 # not directly required, pinned by Snyk to avoid a vulnerability
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability