From 7fe8d9e76be16d2882669de3b3874d8c9bb064a7 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 16 Jul 2024 07:36:49 +0000 Subject: [PATCH] fix: gpt4all-training/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482 --- gpt4all-training/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gpt4all-training/requirements.txt b/gpt4all-training/requirements.txt index 79a0bc45d63b..be022243da2a 100644 --- a/gpt4all-training/requirements.txt +++ b/gpt4all-training/requirements.txt @@ -15,7 +15,7 @@ scikit-learn matplotlib pillow>=10.2.0 # not directly required, pinned by Snyk to avoid a vulnerability numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability -setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability +setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability wheel>=0.38.0 # not directly required, pinned by Snyk to avoid a vulnerability aiohttp>=3.9.4 # not directly required, pinned by Snyk to avoid a vulnerability fonttools>=4.43.0 # not directly required, pinned by Snyk to avoid a vulnerability