From 6dd99a6a36ad114b9a3162611c4b4c5fe80f475b Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 21 May 2026 08:11:09 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-GUNICORN-9510910
- https://snyk.io/vuln/SNYK-PYTHON-IDNA-16769942
- https://snyk.io/vuln/SNYK-PYTHON-JINJA2-8548181
- https://snyk.io/vuln/SNYK-PYTHON-JINJA2-8548987
- https://snyk.io/vuln/SNYK-PYTHON-PYTHONDOTENV-16115271
- https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250
- https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899
---
 requirements.txt | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index e0da4d2..45d545f 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -3,16 +3,16 @@ certifi==2024.7.4
 chardet==3.0.4
 click==7.1.2
 Flask==3.1.3
-gunicorn==22.0.0
-idna==3.7
+gunicorn==23.0.0
+idna==3.15
 itsdangerous==1.1.0
-Jinja2==3.1.4
+Jinja2==3.1.5
 MarkupSafe==2.0.1
 pycodestyle==2.8.0
-python-dotenv==0.14.0
+python-dotenv==1.2.2
 requests==2.32.2
 toml==0.10.2
-urllib3==1.26.18
+urllib3==1.26.19
 Werkzeug==2.3.8
 colorthief==0.2.1
 pillow>=10.0.0 # not directly required, pinned by Snyk to avoid a vulnerability