From 98248147c650d6c432cfd8325778b426a814880e Mon Sep 17 00:00:00 2001
From: Roland Walker <walker@pobox.com>
Date: Tue, 6 Oct 2026 13:24:09 -0400
Subject: [PATCH] force transitive dependencies, to pass "uv audit"

Both are optional transitive dependencies:

 * httpx2 to 2.12.0
 * virtualenv to 21.7.12

"uv audit" runs clean after these forces.
---
 pyproject.toml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pyproject.toml b/pyproject.toml
index 0308c5a8..7a6ba01e 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -64,6 +64,7 @@ llm = [
     "llm ~= 0.33",
     "setuptools == 83.*",                   # Required by llm commands to install models
     "pip ~= 26.2.1",
+    "httpx2 ~= 2.13.1",                     # transitive dependency forced for "uv audit"
 ]
 dataframe = [
     "polars ~= 1.44.1",
@@ -84,6 +85,7 @@ dev = [
     "tox ~= 4.35.0",
     "pdbpp ~= 0.11.7",
     "ruff ~= 0.16.5",
+    "virtualenv ~= 21.7.12",                # transitive dependency forced for "uv audit"
 ]
 
 [project.scripts]