From 5c8dbb830712bbf3f46b88c024286c19e69ea417 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 19 Aug 2026 11:41:02 +0000
Subject: [PATCH] chore(deps): bump python-engineio from 4.13.3 to 4.13.4

Bumps [python-engineio](https://github.com/miguelgrinberg/python-engineio) from 4.13.3 to 4.13.4.
- [Release notes](https://github.com/miguelgrinberg/python-engineio/releases)
- [Changelog](https://github.com/miguelgrinberg/python-engineio/blob/main/CHANGES.md)
- [Commits](https://github.com/miguelgrinberg/python-engineio/compare/v4.13.3...v4.13.4)

---
updated-dependencies:
- dependency-name: python-engineio
  dependency-version: 4.13.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pyproject.toml   | 2 +-
 requirements.txt | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 48bd5e0..2509e53 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -46,7 +46,7 @@ dependencies = [
     "pyjwt>=2.13.0",
     # python-engineio <= 4.13.1 / python-socketio <= 5.16.1 carry
     # Socket.IO CVEs. Both are transitive via flask-socketio; pin floors.
-    "python-engineio>=4.13.2",
+    "python-engineio>=4.13.4",
     "python-socketio>=5.16.2",
     # GHSA-qccp-gfcp-xxvc + GHSA-mf9v-mfxr-j63j — urllib3 < 2.7.0 leaks
     # sensitive headers across proxied redirects and bypasses the
diff --git a/requirements.txt b/requirements.txt
index bc784c5..b9cb7a1 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -157,7 +157,7 @@ python-dotenv==1.2.2
     # via
     #   mlflow-skinny
     #   pydantic-settings
-python-engineio==4.13.3
+python-engineio==4.13.4
     # via
     #   coda (pyproject.toml)
     #   python-socketio