From 9c2dad5867ee16e9b98d090a5f1fac66c25055f9 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 27 Sep 2026 09:22:55 +0000
Subject: [PATCH] Bump pynacl from 1.5.0 to 1.6.2

Bumps [pynacl](https://github.com/pyca/pynacl) from 1.5.0 to 1.6.2.
- [Changelog](https://github.com/pyca/pynacl/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/pynacl/compare/1.5.0...1.6.2)

---
updated-dependencies:
- dependency-name: pynacl
  dependency-version: 1.6.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 1ebcc92..9775edc 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -6,7 +6,7 @@ lyricsgenius==3.12.2
 # PYSEC-2026-1448 / PYSEC-2026-3002, which are in libsodium's ed25519 point
 # validation — voice only uses its secretbox/AEAD ciphers, so the bot never
 # reaches that code. Lift the pin once discord.py allows 1.6.2.
-PyNaCl==1.5.0
+PyNaCl==1.6.2
 python-dotenv==1.2.2
 aiohttp==3.14.3
 # Never imported here: yt-dlp uses it for browser impersonation, which some