From 785e222cbc329fd6001c04a7dc4216ea29e3c201 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 11 Nov 2024 06:15:55 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-3164749
- https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-5805047
- https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-7430173
- https://snyk.io/vuln/SNYK-PYTHON-GEVENT-5906371
- https://snyk.io/vuln/SNYK-PYTHON-GEVENT-8320934
- https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1086606
- https://snyk.io/vuln/SNYK-PYTHON-PYGMENTS-1088505
- https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412
- https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482
- https://snyk.io/vuln/SNYK-PYTHON-SPHINX-570772
- https://snyk.io/vuln/SNYK-PYTHON-SPHINX-570773
- https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-2428349
- https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-538573
- https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-538575
- https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-539932
- https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-543054
- https://snyk.io/vuln/SNYK-PYTHON-WAITRESS-8309635
- https://snyk.io/vuln/SNYK-PYTHON-WEBOB-7687445
---
 requirements.txt | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 7c82d69..25bdcef 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -6,7 +6,7 @@ PasteDeploy==1.5.2
 PyYAML==4.2b1
 Pygments==2.7.4
 Sphinx==3.0.4
-WebOb==1.6.0a0
+WebOb==1.8.8
 WebTest==2.0.18
 beautifulsoup4==4.3.2
 boto==2.39.0
@@ -15,7 +15,7 @@ cornice==1.0.0
 couchdb-schematics==1.1.1
 coverage==3.7.1
 docutils==0.12
-gevent==1.2a1
+gevent==24.10.1
 greenlet==0.4.9
 iso8601==0.1.10
 jsonpointer==1.9
@@ -32,7 +32,7 @@ pytz==2014.10
 repoze.lru==0.6
 requests==2.20
 schematics==1.1.1
-setuptools==7.0
+setuptools==70.0.0
 sh==1.11
 simplejson==3.6.5
 six==1.9.0
@@ -40,10 +40,11 @@ sphinxcontrib-httpdomain==1.4.0
 translationstring==1.3
 tzlocal==1.1.2
 venusian==1.0
-waitress==1.0a1
+waitress==3.0.1
 zope.deprecation==4.1.1
 zope.interface==4.1.1
 git+https://github.com/openprocurement/barbecue.git
 git+https://github.com/openprocurement/python-json-patch.git
 git+https://github.com/openprocurement/rfc6266.git
 -e git+https://github.com/openprocurement/openprocurement.api.git@master#egg=openprocurement.api
+certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerability