From 3a34cfb860f86eecd51d4efe051b4ea7e4a9f3ef Mon Sep 17 00:00:00 2001
From: "snyk-io[bot]" <141718529+snyk-io[bot]@users.noreply.github.com>
Date: Thu, 5 Feb 2026 02:34:06 +0000
Subject: [PATCH] fix: requirements-dev.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-15183335
---
 requirements-dev.txt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/requirements-dev.txt b/requirements-dev.txt
index 4b17b0c..b221e03 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -3,3 +3,4 @@ django-nose==1.4
 nose==1.3.6
 msgpack-python==0.4.6
 pyyaml==5.4
+django>=4.2.28 # not directly required, pinned by Snyk to avoid a vulnerability