diff --git a/build_defs/requirements_lock.txt b/build_defs/requirements_lock.txt
index 4925b54b..6dc1552b 100644
--- a/build_defs/requirements_lock.txt
+++ b/build_defs/requirements_lock.txt
@@ -1558,3 +1558,4 @@ wsproto==1.2.0 \
     --hash=sha256:ad565f26ecb92588a3e43bc3d96164de84cd9902482b130d0ddbaa9664a85065 \
     --hash=sha256:b9acddd652b585d75b20477888c56642fdade28bdfd3579aa24a4d2c037dd736
     # via simple-websocket
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability