fix: src/promptflow/dev_requirements.txt to reduce vulnerabilities

snyk-bot · snyk-bot · commit 69efdb031956 · 2025-12-28T11:36:16.000Z
The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-MARSHMALLOW-14550833
diff --git a/src/promptflow/dev_requirements.txt b/src/promptflow/dev_requirements.txt
@@ -33,3 +33,4 @@ papermill>=2.5.0
 
 # test executor server in local
 uvicorn>=0.27.0
+marshmallow>=3.26.2 # not directly required, pinned by Snyk to avoid a vulnerability

Original file line number	Diff line number	Diff line change
`@@ -33,3 +33,4 @@ papermill>=2.5.0`
`33`	`33`
`34`	`34`	`# test executor server in local`
`35`	`35`	`uvicorn>=0.27.0`
	`36`	`+marshmallow>=3.26.2 # not directly required, pinned by Snyk to avoid a vulnerability`