setup: bump scipy to 1.10.0 due to memory leak vulnerability

AFM-analysis · Jul 21, 2023 · c259cf6 · c259cf6
1 parent 2b87ec5
commit c259cf6
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/CHANGELOG b/CHANGELOG
@@ -1,3 +1,5 @@
+3.6.1
+ - setup: bump scipy to 1.10.0 due to memory leak vulnerability
 3.6.0
  - tests: make tests less strict and some cleanup
  - setup: drop support for Python 3.8 and 3.9

diff --git a/pyproject.toml b/pyproject.toml
@@ -38,7 +38,7 @@ dependencies = [
     "lmfit>=1",
     "numpy>=1.22.0",  # cython build
     "scikit-learn>=0.23.0",  # rating tests
-    "scipy",
+    "scipy>=1.10.0",  # scipy memory leak vulnerability
   ]
 dynamic = ["version"]
 [project.optional-dependencies]