fix: binder/requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250
hydrosquall · Jun 19, 2024 · 268514d · 268514d
1 parent 8a222fb
commit 268514d
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/binder/requirements.txt b/binder/requirements.txt
@@ -4,3 +4,4 @@ tiingo==0.15.6
 # You technically don't have to use tiingo with pandas, but
 # we included it since most data analysts will have it installed already.
 pandas==1.5.3
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability