Merge pull request #1014 from dapr/snyk-fix-56a526edbc39746fb347796a6…

…627747e [Snyk] Security upgrade aiohttp from 3.8.6 to 3.9.4
dapr · Jan 23, 2025 · fb8cd65 · fb8cd65
2 parents f7c925d + 54a4706
commit fb8cd65
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/service_invocation/python/http/order-processor/requirements.txt b/service_invocation/python/http/order-processor/requirements.txt
@@ -1,3 +1,4 @@
 Flask
 dapr
-typing-extensions
+typing-extensions
+aiohttp>=3.9.4 # not directly required, pinned by Snyk to avoid a vulnerability