From 08291c820d7501ee2b68a3c8ee844ed42d4b5e75 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Tue, 4 Nov 2025 16:46:34 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321969
- https://snyk.io/vuln/SNYK-PYTHON-UJSON-2359034
- https://snyk.io/vuln/SNYK-PYTHON-UJSON-2940619
- https://snyk.io/vuln/SNYK-PYTHON-UJSON-2942122
---
 requirements.txt | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 2c939d49b..0af937e94 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,11 +1,11 @@
 cython>=0.24,<0.28.0
-numpy>=1.7
+numpy>=1.21.0rc1
 cymem>=1.30,<1.32
 preshed>=1.0.0,<2.0.0
 thinc>=6.10.3,<6.11.0
 murmurhash>=0.28,<0.29
 plac<1.0.0,>=0.9.6
-ujson>=1.35
+ujson>=5.4.0
 dill>=0.2,<0.3
 regex==2017.4.5
 requests>=2.13.0,<3.0.0