Updated requirements to address dependabot security alert

MarkhamLee · Apr 19, 2024 · d8d6932 · d8d6932
1 parent f02ed13
commit d8d6932
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/README.md b/README.md
@@ -3,6 +3,10 @@ I spent most of the winter and spring '22 researching, prototyping, and testing
 
 ### Recent Updates
 
+#### 04/19/2024 - Security Updates
+*  Updated the Dockerfile to be smaller and more secure by moving to a two-stage build. The final image is ~2.1GB smaller and has a smaller risk surface area because the tools used to build the Python dependencies are only used in the first/build stage and are then dropped from the final image, as the fully built Python dependencies are just copied over. 
+* Updated base image and Python dependencies to address security issues 
+
 #### 03/29/2024
 Made several updates over the last couple of weeks 
 * Real time monitoring via MQTT & InfluxDB - e.g., tracking match %, inferencing latency and similarity over time 

diff --git a/api/requirements.txt b/api/requirements.txt
@@ -1,6 +1,6 @@
 facenet-pytorch==2.5.3
 Flask==2.3.2
-gunicorn==21.2.0
+gunicorn==22.0.0
 joblib==1.3.1
 # opencv-python==4.8.0.74
 pillow>=10.0.1