From 684bea8bba8ad9d2bcd639b6723386c83b03c591 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 27 Sep 2026 09:28:35 +0000 Subject: [PATCH] Bump python-dotenv from 1.2.2 to 1.2.3 Bumps [python-dotenv](https://github.com/theskumar/python-dotenv) from 1.2.2 to 1.2.3. - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](https://github.com/theskumar/python-dotenv/compare/v1.2.2...v1.2.3) --- updated-dependencies: - dependency-name: python-dotenv dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 1ebcc92..31dda91 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7,7 +7,7 @@ lyricsgenius==3.12.2 # validation — voice only uses its secretbox/AEAD ciphers, so the bot never # reaches that code. Lift the pin once discord.py allows 1.6.2. PyNaCl==1.5.0 -python-dotenv==1.2.2 +python-dotenv==1.2.3 aiohttp==3.14.3 # Never imported here: yt-dlp uses it for browser impersonation, which some # extractors require. Removing it breaks those sites, not an import.