From 2537886b4d9cfe5580d5d540bedc4b605a0c0ed5 Mon Sep 17 00:00:00 2001
From: Bart Schuurmans <bart@minnozz.com>
Date: Mon, 1 Apr 2024 19:11:27 +0200
Subject: [PATCH] Group version constraints for indirect dependencies and
 change to >=

---
 requirements.txt | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index f87cc0282..c38c9c054 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -18,7 +18,6 @@ django-storages==1.14.2
 django-storages[azure]
 environs==11.0.0
 flower==2.0.1
-grpcio==1.57.0 # Not a direct dependency, pinned to get a security fix
 libsass==0.23.0
 Markdown==3.6
 opentelemetry-api==1.24.0
@@ -39,8 +38,11 @@ redis==5.0.3
 requests==2.31.0
 responses==0.22.0
 s3-tar==0.1.13
-setuptools>=65.5.1 # Not a direct dependency, pinned to get a security fix
-tornado==6.3.3 # Not a direct dependency, pinned to get a security fix
+
+# Indirect dependencies with version constraints for security fixes
+grpcio>=1.57.0
+setuptools>=65.5.1
+tornado>=6.3.3
 
 # Dev
 black==22.*