fix: requirements/production.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-8456315 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-8456316
scieloorg · Dec 9, 2024 · 12890c2 · 12890c2
1 parent 68d637a
commit 12890c2
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/requirements/production.txt b/requirements/production.txt
@@ -15,4 +15,5 @@ setuptools>=68.2.2 # not directly required, pinned by Snyk to avoid a vulnerabil
 
 # Elastic-APM  # https://pypi.org/project/elastic-apm/
 # ------------------------------------------------------------------------------
-elastic-apm==6.21.4.post8347027212
+elastic-apm==6.21.4.post8347027212
+django>=4.2.17 # not directly required, pinned by Snyk to avoid a vulnerability