From f284d898201e327a9c77e6966ccfbbf61c7afa29 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 5 Sep 2024 00:48:25 +0000
Subject: [PATCH] fix: requirements/dev.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7886958
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7886959
---
 requirements/dev.txt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/requirements/dev.txt b/requirements/dev.txt
index e4d14bef109..0df7bf7b4ef 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -46,3 +46,4 @@ tox==2.3.1 \
 Werkzeug==0.11.4 \
     --hash=sha256:7db3cb2d4725be0680abf64a45b18229186f03ad8b9989abbe053f9357b17b37 \
  --hash=sha256:e48fb7e3f2bb5a740dd9a666624699a4d83e2e028555f9c46bcc8ecfc2cd8c32
+django>=4.2.16 # not directly required, pinned by Snyk to avoid a vulnerability