[Snyk] Fix for 3 vulnerabilities (#88)

* fix: requirements.txt to reduce vulnerabilities


The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250
- https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899

* Bump [email protected] and transitive patched deps

---------

Co-authored-by: snyk-bot <[email protected]>

Dockerfile

@@ -13,5 +13,5 @@ RUN pip install --upgrade pip && \
 
 COPY /src .
 
-RUN chown -R app:app $APP_HOME
+RUN chown -R app:app "$APP_HOME"
 USER app

requirements.txt

@@ -1,15 +1,16 @@
-slack_bolt==1.19.0
+slack_bolt==1.19.1
 python_dotenv==1.0.1
 gunicorn==22.0.0
 flask==3.0.3
 requests==2.32.3
 pyjwt==2.8.0
 gql==3.5.0
 requests-toolbelt==1.0.0
-certifi>=2024.6.2 # not directly required, pinned by Snyk to avoid a vulnerability
-setuptools>=70.1.1 # not directly required, pinned by Snyk to avoid a vulnerability
+certifi>=2024.6.4 # not directly required, pinned by Snyk to avoid a vulnerability
+setuptools>=71.0.1 # not directly required, pinned by Snyk to avoid a vulnerability
 werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability
 urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability
 jinja2>=3.1.4 # not directly required, pinned by Snyk to avoid a vulnerability
 idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability
-anyio>=4.4.0 # not directly required, pinned by Snyk to avoid a vulnerability
+anyio>=4.4.0 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.2 # not directly required, pinned by Snyk to avoid a vulnerability

tests/requirements.txt

@@ -1,4 +1,4 @@
-slack_bolt==1.19.0
+slack_bolt==1.19.1
 python_dotenv==1.0.1
 gunicorn==22.0.0
 flask==3.0.3