From 69efdb0319568cb38fda96650f3bac7d504935b5 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 28 Dec 2025 11:36:16 +0000 Subject: [PATCH] fix: src/promptflow/dev_requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-MARSHMALLOW-14550833 --- src/promptflow/dev_requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/src/promptflow/dev_requirements.txt b/src/promptflow/dev_requirements.txt index 9b1a8562d9b..fa9531c5e95 100644 --- a/src/promptflow/dev_requirements.txt +++ b/src/promptflow/dev_requirements.txt @@ -33,3 +33,4 @@ papermill>=2.5.0 # test executor server in local uvicorn>=0.27.0 +marshmallow>=3.26.2 # not directly required, pinned by Snyk to avoid a vulnerability