From e2136d6039017c35896a97eeba76ddf46cdc3c8d Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 23 Jan 2026 11:29:08 +0000
Subject: [PATCH] fix: requirements/default.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-PYASN1-15032639
- https://snyk.io/vuln/SNYK-PYTHON-WHEEL-15053866
---
 requirements/default.txt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/requirements/default.txt b/requirements/default.txt
index 2efafa48a0a..993c9fea10c 100644
--- a/requirements/default.txt
+++ b/requirements/default.txt
@@ -294,7 +294,7 @@ URLObject==2.4.0 \
     --hash=sha256:f51272b12846db98af530b0a64f6593d2b1e8405f0aa580285b37ce8009b8d9c
 
 # Build wheel files for caching (recent pip installs them)
-wheel==0.29.0 \
+wheel==0.46.2 \
     --hash=sha256:ea8033fc9905804e652f75474d33410a07404c1a78dd3c949a66863bd1050ebd \
     --hash=sha256:1ebb8ad7e26b448e9caa4773d2357849bf80ff9e313964bcaf79cbf0201a1648
 
@@ -302,3 +302,4 @@ wheel==0.29.0 \
 whitenoise==2.0.6 \
     --hash=sha256:826ffe5d608c9dc8daebef1b0b43d01f7958f17c2fce36e75c80e26160172c4f \
     --hash=sha256:5aea935dfc09ef2beeb76960b4a808b0bbe65e85fb0b0312434b9c365ca02a41
+pyasn1>=0.6.2 # not directly required, pinned by Snyk to avoid a vulnerability