pbr>=1.4
# Transitive build-time dep, pinned to fix CVE-2024-6345 (RCE),
# CVE-2025-47273 (path traversal), and CVE-2026-59890 (macOS sdist
# exclusion bypass).
setuptools>=83.0.0
