From 12f1312ecb7d24a4f57ad5eabf44359773e7ac05 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 1 Oct 2026 14:36:26 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-20302846
---
 requirements.txt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/requirements.txt b/requirements.txt
index 75e41170..efdf0519 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -52,3 +52,4 @@ litellm==1.84.0
 strawberry-graphql==0.315.7
 strawberry-graphql-django==0.80.0
 graphql-core==3.2.12 # 3.3.0 drops graphql.execution.ExecutionContext, which strawberry-graphql 0.315.7 imports
+urllib3>=2.8.0 # not directly required, pinned by Snyk to avoid a vulnerability