Merge pull request #1021 from dapr/snyk-fix-43adbf2fda0a0da9ada93a13ba657ce8

paulyuk · web-flow · commit 74b7a5fbd95c · 2025-01-23T13:56:52.000-08:00
[Snyk] Security upgrade werkzeug from 2.2.3 to 3.0.3
diff --git a/service_invocation/python/http/order-processor/requirements.txt b/service_invocation/python/http/order-processor/requirements.txt
@@ -1,3 +1,4 @@
 Flask
 dapr
-typing-extensions
+typing-extensions
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability
