# Direct dependencies
argon2-cffi==25.1.0
flask==3.1.3
pytest==9.1.1

# Transitive dependencies, pinned from `pip freeze` (Python 3.14.7, 2026-10-10).
# Releases younger than 14 days were skipped unless they fix a security issue:
# werkzeug 3.1.9 fixes GHSA-g6x2-hccm-hh4m; iniconfig 2.3.1, markupsafe 3.0.4 and
# pycparser 3.1/3.11 do not, so the previous releases are pinned.
argon2-cffi-bindings==26.1.0
blinker==1.9.0
cffi==2.1.1
click==8.5.0
iniconfig==2.3.0
itsdangerous==2.2.0
jinja2==3.1.6
markupsafe==3.0.3
packaging==26.3
pluggy==1.6.0
pycparser==3.0
pygments==2.21.0
werkzeug==3.1.9
