From 16534c50deb37062ac0f7f1864cbb49bf13bf90f Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 18 Apr 2024 19:04:30 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-3164749
- https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-5805047
- https://snyk.io/vuln/SNYK-PYTHON-FLASK-5490129
- https://snyk.io/vuln/SNYK-PYTHON-GRPCIO-5834443
- https://snyk.io/vuln/SNYK-PYTHON-GUNICORN-6615672
- https://snyk.io/vuln/SNYK-PYTHON-IDNA-6597975
- https://snyk.io/vuln/SNYK-PYTHON-JINJA2-6150717
- https://snyk.io/vuln/SNYK-PYTHON-PROTOBUF-3031740
- https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-5595532
- https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-5926907
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-6002459
- https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-3319935
- https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-3319936
- https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6035177
---
 requirements.txt | 21 +++++++++++----------
 1 file changed, 11 insertions(+), 10 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index bdd893c..9871097 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,39 +1,40 @@
 cachetools==4.2.4
-certifi==2021.10.8
+certifi==2023.7.22
 charset-normalizer==2.0.8
 click==8.0.3
 cloudevents==1.2.0
 deprecation==2.1.0
 docker==5.0.3
-Flask==2.0.2
+Flask==2.2.5
 functions-framework==3.0.0
 google-api-core==2.2.2
 google-auth==2.3.3
 google-cloud-pubsub==2.9.0
 googleapis-common-protos==1.53.0
 grpc-google-iam-v1==0.12.3
-grpcio==1.42.0
+grpcio==1.53.2
 grpcio-status==1.42.0
-gunicorn==20.1.0
-idna==3.3
+gunicorn==22.0.0
+idna==3.7
 itsdangerous==2.0.1
-Jinja2==3.0.3
+Jinja2==3.1.3
 libcst==0.3.23
 MarkupSafe==2.0.1
 mypy-extensions==0.4.3
 packaging==21.3
 proto-plus==1.19.8
-protobuf==3.19.1
+protobuf==3.19.5
 pyasn1==0.4.8
 pyasn1-modules==0.2.8
 pyparsing==3.0.6
 PyYAML==6.0
-requests==2.26.0
+requests==2.31.0
 rsa==4.8
 six==1.16.0
 typing-inspect==0.7.1
 typing_extensions==4.0.1
-urllib3==1.26.7
+urllib3==1.26.18
 watchdog==1.0.2
 websocket-client==1.2.1
-Werkzeug==2.0.2
+Werkzeug==2.3.8
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability