# Direct dependencies
flask==3.1.3
pytest==9.1.1

# Transitive dependencies, pinned from `pip freeze` (Python 3.14.7, 2026-10-10). Releases
# younger than 14 days were skipped unless they fix a security issue: werkzeug 3.1.9 fixes
# GHSA-g6x2-hccm-hh4m; iniconfig 2.3.1 and markupsafe 3.0.4 do not, so the previous releases
# are pinned.
blinker==1.9.0
click==8.5.0
iniconfig==2.3.0
itsdangerous==2.2.0
jinja2==3.1.6
markupsafe==3.0.3
packaging==26.3
pluggy==1.6.0
pygments==2.21.0
werkzeug==3.1.9
