[Snyk] Fix for 48 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `pip` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • doc-requirements.txt

⚠️ Warning

vaex 4.16.0 requires vaex-core, which is not installed.
vaex-viz 0.5.4 requires vaex-core, which is not installed.
vaex-server 0.8.1 requires vaex-core, which is not installed.
vaex-server 0.8.1 requires fastapi, which is not installed.
vaex-server 0.8.1 requires uvicorn, which is not installed.
vaex-ml 0.18.1 requires vaex-core, which is not installed.
vaex-jupyter 0.8.1 requires vaex-core, which is not installed.
vaex-jupyter 0.8.1 requires ipyvolume, which is not installed.
vaex-jupyter 0.8.1 requires xarray, which is not installed.
vaex-hdf5 0.14.1 requires vaex-core, which is not installed.
vaex-astro 0.9.3 requires vaex-core, which is not installed.
protoc-gen-swagger 0.1.0 requires protobuf, which is not installed.
notebook 5.7.16 requires terminado, which is not installed.
nbformat 4.4.0 requires jsonschema, which is not installed.
nbconvert 5.6.1 has requirement mistune<2,>=0.8.1, but you have mistune 2.0.4.
jupyter 1.0.0 requires qtconsole, which is not installed.
jupyter 1.0.0 requires jupyter-console, which is not installed.
ipython 5.10.0 requires simplegeneric, which is not installed.
ipympl 0.9.2 has requirement matplotlib<4,>=3.4.0, but you have matplotlib 2.2.5.
ipyleaflet 0.17.0 requires xyzservices, which is not installed.
ImageHash 4.3.1 requires scipy, which is not installed.
ImageHash 4.3.1 requires PyWavelets, which is not installed.
google-auth 2.16.0 requires rsa, which is not installed.
flyteidl 1.3.5 requires googleapis-common-protos, which is not installed.
flyteidl 1.3.5 requires protobuf, which is not installed.
docker-image-py 0.1.12 requires regex, which is not installed.
databricks-cli 0.17.4 requires pyjwt, which is not installed.
databricks-cli 0.17.4 requires tabulate, which is not installed.

Vulnerabilities that will be fixed

By pinning:

Severity	Issue	Upgrade	Breaking Change	Exploit Maturity
	Arbitrary Code Execution SNYK-PYTHON-ASTROPY-42091	astropy: 2.0.16 -> 3.0.1	No	No Known Exploit
	Insufficient Verification of Data Authenticity SNYK-PYTHON-CERTIFI-3164749	certifi: 2021.10.8 -> 2022.12.7	No	No Known Exploit
	Arbitrary Code Execution SNYK-PYTHON-IPYTHON-2348630	ipython: 5.10.0 -> 7.16.3	No	No Known Exploit
	Improper Privilege Management SNYK-PYTHON-JUPYTERCORE-3063766	jupyter-core: 4.6.3 -> 4.11.2	No	No Known Exploit
	Cross-site Scripting (XSS) SNYK-PYTHON-NBCONVERT-2979829	nbconvert: 5.6.1 -> 6.3.0b0	No	Proof of Concept
	Open Redirect SNYK-PYTHON-NOTEBOOK-1041707	notebook: 5.7.16 -> 6.4.12	No	No Known Exploit
	Information Exposure SNYK-PYTHON-NOTEBOOK-2441824	notebook: 5.7.16 -> 6.4.12	No	No Known Exploit
	Access Restriction Bypass SNYK-PYTHON-NOTEBOOK-2928995	notebook: 5.7.16 -> 6.4.12	No	No Known Exploit
	Denial of Service (DoS) SNYK-PYTHON-NUMBA-1027297	numba: 0.47.0 -> 0.49.0	No	No Known Exploit
	NULL Pointer Dereference SNYK-PYTHON-NUMPY-2321964	numpy: 1.16.6 -> 1.22.2	No	Proof of Concept
	Buffer Overflow SNYK-PYTHON-NUMPY-2321966	numpy: 1.16.6 -> 1.22.2	No	No Known Exploit
	Buffer Overflow SNYK-PYTHON-NUMPY-2321969	numpy: 1.16.6 -> 1.22.2	No	Proof of Concept
	Denial of Service (DoS) SNYK-PYTHON-NUMPY-2321970	numpy: 1.16.6 -> 1.22.2	No	Proof of Concept
	Out-of-bounds Read SNYK-PYTHON-PILLOW-1055461	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Out-of-bounds Read SNYK-PYTHON-PILLOW-1055462	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Out-of-bounds Write SNYK-PYTHON-PILLOW-1059090	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Out-of-bounds Read SNYK-PYTHON-PILLOW-1080635	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-PYTHON-PILLOW-1080654	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Denial of Service (DoS) SNYK-PYTHON-PILLOW-1081494	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Denial of Service (DoS) SNYK-PYTHON-PILLOW-1081501	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Denial of Service (DoS) SNYK-PYTHON-PILLOW-1081502	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Heap-based Buffer Overflow SNYK-PYTHON-PILLOW-1082329	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Insufficient Validation SNYK-PYTHON-PILLOW-1082750	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Denial of Service (DoS) SNYK-PYTHON-PILLOW-1090584	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Denial of Service (DoS) SNYK-PYTHON-PILLOW-1090586	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Denial of Service (DoS) SNYK-PYTHON-PILLOW-1090587	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Denial of Service (DoS) SNYK-PYTHON-PILLOW-1090588	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Out-of-bounds Read SNYK-PYTHON-PILLOW-1292150	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Out-of-bounds Read SNYK-PYTHON-PILLOW-1292151	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Buffer Overflow SNYK-PYTHON-PILLOW-1316216	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-PYTHON-PILLOW-1319443	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Denial of Service (DoS) SNYK-PYTHON-PILLOW-2329135	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Arbitrary Code Execution SNYK-PYTHON-PILLOW-2331901	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Buffer Over-read SNYK-PYTHON-PILLOW-2331905	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Improper Initialization SNYK-PYTHON-PILLOW-2331907	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Improper Input Validation SNYK-PYTHON-PILLOW-2397241	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Denial of Service (DoS) SNYK-PYTHON-PILLOW-3113875	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Denial of Service (DoS) SNYK-PYTHON-PILLOW-3113876	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Out-of-Bounds SNYK-PYTHON-PILLOW-574573	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Out-of-bounds Read SNYK-PYTHON-PILLOW-574574	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Out-of-bounds Read SNYK-PYTHON-PILLOW-574575	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Out-of-bounds Read SNYK-PYTHON-PILLOW-574576	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Buffer Overflow SNYK-PYTHON-PILLOW-574577	pillow: 6.2.2 -> 9.2.0	No	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-PYTHON-PYGMENTS-1086606	pygments: 2.5.2 -> 2.7.4	No	Proof of Concept
	Denial of Service (DoS) SNYK-PYTHON-PYGMENTS-1088505	pygments: 2.5.2 -> 2.7.4	No	No Known Exploit
	Cross-site Scripting (XSS) SNYK-PYTHON-SPHINX-570772	sphinx: 1.8.6 -> 3.0.4	No	Mature
	Cross-site Scripting (XSS) SNYK-PYTHON-SPHINX-570773	sphinx: 1.8.6 -> 3.0.4	No	Mature
	Regular Expression Denial of Service (ReDoS) SNYK-PYTHON-WHEEL-3180413	wheel: 0.30.0 -> 0.38.0	No	No Known Exploit

Some vulnerabilities couldn't be fully fixed and so Snyk will still find them when the project is tested again. This may be because the vulnerability existed within more than one direct dependency, but not all of the affected dependencies could be upgraded.

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Arbitrary Code Execution
🦉 Improper Privilege Management
🦉 Cross-site Scripting (XSS)
🦉 More lessons are available in Snyk Learn

[codecov]

Codecov Report

Merging #1454 (8dc2bf0) into master (dee4804) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master    #1454   +/-   ##
=======================================
  Coverage   69.45%   69.45%           
=======================================
  Files         305      305           
  Lines       28574    28574           
  Branches     2700     2700           
=======================================
  Hits        19845    19845           
  Misses       8211     8211           
  Partials      518      518           

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.