From 90d3d1b3791228a2f7d1579fefcdf99bfa588dc6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 9 Aug 2026 19:52:57 +0000
Subject: [PATCH] chore(deps): bump python-engineio from 4.13.3 to 4.13.4

Bumps [python-engineio](https://github.com/miguelgrinberg/python-engineio) from 4.13.3 to 4.13.4.
- [Release notes](https://github.com/miguelgrinberg/python-engineio/releases)
- [Changelog](https://github.com/miguelgrinberg/python-engineio/blob/main/CHANGES.md)
- [Commits](https://github.com/miguelgrinberg/python-engineio/compare/v4.13.3...v4.13.4)

---
updated-dependencies:
- dependency-name: python-engineio
  dependency-version: 4.13.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pyproject.toml   | 2 +-
 requirements.txt | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index d87ed654..5f48cc38 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -41,7 +41,7 @@ dependencies = [
     "pyjwt>=2.13.0",
     # python-engineio <= 4.13.1 / python-socketio <= 5.16.1 carry
     # Socket.IO CVEs. Both are transitive via flask-socketio; pin floors.
-    "python-engineio>=4.13.2",
+    "python-engineio>=4.13.4",
     "python-socketio>=5.16.2",
     # GHSA-qccp-gfcp-xxvc + GHSA-mf9v-mfxr-j63j — urllib3 < 2.7.0 leaks
     # sensitive headers across proxied redirects and bypasses the
diff --git a/requirements.txt b/requirements.txt
index 77f32c44..d50799fd 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -157,7 +157,7 @@ python-dotenv==1.2.2
     # via
     #   mlflow-skinny
     #   pydantic-settings
-python-engineio==4.13.3
+python-engineio==4.13.4
     # via
     #   coda (pyproject.toml)
     #   python-socketio