fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-5537286 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-5840803
tb0hdan · Oct 30, 2023 · 7f26a6d · 7f26a6d
1 parent 04fd603
commit 7f26a6d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/requirements.txt b/requirements.txt
@@ -16,4 +16,4 @@ setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerabil
 slack_sdk==3.21.3
 Werkzeug~=3.0.1
 certifi>=2022.12.7 # not directly required, pinned by Snyk to avoid a vulnerability
-tornado==6.1 # has to stay fixed until python-telegram-bot is upgraded
+tornado==6.3.3 # has to stay fixed until python-telegram-bot is upgraded