From 067465503a99ed59f8a4fa855def3a5ca3b5dc9f Mon Sep 17 00:00:00 2001
From: Lars Bogner <upyxo@student.kit.edu>
Date: Thu, 23 Jul 2026 13:20:11 +0200
Subject: [PATCH] Pin setuptools>=83.0.0 as a dev dependency

The build-system requirement only pins the isolated build backend, not
the runtime venv setuptools that pip-audit scans, so CI still saw the
vulnerable 79.0.1. Add it to the dev extra so pip actually installs
the patched version.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
---
 pyproject.toml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pyproject.toml b/pyproject.toml
index 1cc252a..1efed0b 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -49,6 +49,7 @@ dev = [
     "ruff>=0.6",
     "ty>=0.0.1",
     "pip-audit>=2.7",
+    "setuptools>=83.0.0",
 ]
 plotting = [
     "matplotlib>=3.7",