[Snyk] Security upgrade zipp from 3.15.0 to 3.19.1 (#640)

sxd · snyk-bot · mnencia · web-flow · commit 666bc6a58045 · 2025-11-05T19:06:41.000+01:00
Signed-off-by: snyk-bot &lt;snyk-bot@snyk.io&gt;
Signed-off-by: Marco Nenciarini &lt;marco.nenciarini@enterprisedb.com&gt;
Co-authored-by: snyk-bot &lt;snyk-bot@snyk.io&gt;
Co-authored-by: Marco Nenciarini &lt;marco.nenciarini@enterprisedb.com&gt;
diff --git a/containers/sidecar-requirements.in b/containers/sidecar-requirements.in
@@ -1,2 +1,3 @@
 barman[azure,cloud,google,snappy,zstandard,lz4]==3.16.2
 setuptools==80.9.0
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability
diff --git a/containers/sidecar-requirements.txt b/containers/sidecar-requirements.txt
@@ -679,6 +679,10 @@ urllib3==2.5.0 \
     # via
     #   botocore
     #   requests
+zipp==3.23.0 \
+    --hash=sha256:071652d6115ed432f5ce1d34c336c0adfd6a884660d1e9712a256d3d3bd4b14e \
+    --hash=sha256:a07157588a12518c9d4034df3fbbee09c814741a33ff63c05fa29d26a2404166
+    # via -r sidecar-requirements.in
 zstandard==0.25.0 \
     --hash=sha256:011d388c76b11a0c165374ce660ce2c8efa8e5d87f34996aa80f9c0816698b64 \
     --hash=sha256:01582723b3ccd6939ab7b3a78622c573799d5d8737b534b86d0e06ac18dbde4a \

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,3 @@`
`1`	`1`	`barman[azure,cloud,google,snappy,zstandard,lz4]==3.16.2`
`2`	`2`	`setuptools==80.9.0`
	`3`	`+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability`