From cb2da52b5c060f11071c3485c0e614ea15674454 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 28 Jul 2025 09:28:42 +0000
Subject: [PATCH] fix: services/bot/requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-YTDLP-10878169
---
 services/bot/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/services/bot/requirements.txt b/services/bot/requirements.txt
index 3e5158b4..6c0a9d59 100644
--- a/services/bot/requirements.txt
+++ b/services/bot/requirements.txt
@@ -1,5 +1,5 @@
 python-telegram-bot>=13.11
-yt-dlp>=2022.6.29
+yt-dlp>=2025.7.21
 loguru
 boto3
 setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file