diff --git a/composer/blog/gcp-tech-blog/unit-test-dags-cloud-build/requirements.txt b/composer/blog/gcp-tech-blog/unit-test-dags-cloud-build/requirements.txt
index 10bd03ecc5d..0a8d4aceae7 100644
--- a/composer/blog/gcp-tech-blog/unit-test-dags-cloud-build/requirements.txt
+++ b/composer/blog/gcp-tech-blog/unit-test-dags-cloud-build/requirements.txt
@@ -2,3 +2,4 @@
 # see https://airflow.apache.org/docs/apache-airflow/stable/installation/installing-from-pypi.html#constraints-files
 apache-airflow[gcp]==1.10.15 # updates beyond 1.10.15 are untested with this code
 apache-airflow-backport-providers-google==2021.3.3
+idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability