fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321964 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321966 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321970 - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-5918878 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412
E-wave112 · Oct 30, 2023 · e061ba6 · e061ba6
1 parent ccbcce0
commit e061ba6
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/requirements.txt b/requirements.txt
@@ -17,4 +17,7 @@ boto3==1.17.54
 pystan==2.19.1.1
 prophet
 redis
-sentry-sdk==1.15.0
+sentry-sdk==1.15.0
+numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability
+pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability