From 170a03986ed085c7047b12eee1b17aeb32a40356 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Sun, 7 Sep 2025 10:20:02 +0000
Subject: [PATCH] fix: requirements/dev.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-12485156
---
 requirements/dev.txt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/requirements/dev.txt b/requirements/dev.txt
index e4d14bef109..a7ec377700d 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -46,3 +46,4 @@ tox==2.3.1 \
 Werkzeug==0.11.4 \
     --hash=sha256:7db3cb2d4725be0680abf64a45b18229186f03ad8b9989abbe053f9357b17b37 \
  --hash=sha256:e48fb7e3f2bb5a740dd9a666624699a4d83e2e028555f9c46bcc8ecfc2cd8c32
+django>=4.2.24 # not directly required, pinned by Snyk to avoid a vulnerability