From e09debb78c86f46c99dd3fc00ccd6e8df863eae0 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Sat, 18 Apr 2026 00:56:14 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-AUTHLIB-16097396
- https://snyk.io/vuln/SNYK-PYTHON-MAKO-16098253
---
 requirements.txt | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index f2cd9e9..92cacfc 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -46,7 +46,7 @@ oauthlib==3.1.1
 requests-oauthlib==1.3.0
 
 # Template engines
-Mako==1.1.4
+Mako==1.3.11
 
 # Date/Time utilities
 python-dateutil==2.8.1
@@ -211,7 +211,7 @@ python-decouple==3.4
 
 # JWT and auth libraries
 python-jose==3.3.0
-authlib==0.15.4
+authlib==1.6.11
 
 # Excel/CSV processing
 openpyxl==3.0.7