From 4ddf9d0616c6b35ac7cef559597d7517116064f7 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Tue, 3 Feb 2026 20:55:06 +0000
Subject: [PATCH] fix: python/third_party/TradingAgents/requirements.txt to
 reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-PROTOBUF-15090738
- https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899
---
 python/third_party/TradingAgents/requirements.txt | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/python/third_party/TradingAgents/requirements.txt b/python/third_party/TradingAgents/requirements.txt
index 94b4b8349..d5e222881 100644
--- a/python/third_party/TradingAgents/requirements.txt
+++ b/python/third_party/TradingAgents/requirements.txt
@@ -23,3 +23,5 @@ questionary
 langchain_anthropic
 langchain-google-genai
 python-dotenv
+protobuf>=6.33.5 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability