From 632663d78cc8d1f14b59719607b8613a74267e28 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 16 Jul 2024 04:49:08 +0000 Subject: [PATCH] fix: requirements/base.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482 --- requirements/base.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements/base.txt b/requirements/base.txt index e946675b7..4c98f1eea 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -41,7 +41,7 @@ markdown2 # Utils pandas==1.3.5 typing-extensions==4.9.0 -setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability +setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability numpy>=1.22.2,<2.0.0 # not directly required, pinned by Snyk to avoid a vulnerability # Query engine - PostgreSQL