diff --git a/pyproject.toml b/pyproject.toml index ca115350..fa434238 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -37,7 +37,7 @@ dependencies = [ "anthropic==0.59.0", "beautifulsoup4==4.14.2", "pywebview", - "pystray>=0.19.5", + "pystray==0.19.5", # Transitive deps pinned for security (dependabot alerts). # Exact pins because uvx installs from git, ignoring the lock file. "urllib3==2.6.3", diff --git a/uv.lock b/uv.lock index d7684133..e4ec874a 100644 --- a/uv.lock +++ b/uv.lock @@ -3009,7 +3009,7 @@ requires-dist = [ { name = "pyinstrument", marker = "extra == 'dev'", specifier = "==5.1.1" }, { name = "pyjwt", marker = "extra == 'dev'", specifier = "==2.10.1" }, { name = "pyright", specifier = "==1.1.403" }, - { name = "pystray", specifier = ">=0.19.5" }, + { name = "pystray", specifier = "==0.19.5" }, { name = "pytest", marker = "extra == 'dev'", specifier = "==8.4.1" }, { name = "pytest-timeout", marker = "extra == 'dev'", specifier = "==2.4.0" }, { name = "pytest-xdist", marker = "extra == 'dev'", specifier = "==3.8.0" },