From adcadb9c9e9f429e9def2f5fea7a10f8629c189f Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Wed, 20 Dec 2023 17:56:37 +0000
Subject: [PATCH] fix: gpt4all-training/requirements.txt to reduce
 vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-FONTTOOLS-6133203
---
 gpt4all-training/requirements.txt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/gpt4all-training/requirements.txt b/gpt4all-training/requirements.txt
index 110977d231ab..f31427f8a0f7 100644
--- a/gpt4all-training/requirements.txt
+++ b/gpt4all-training/requirements.txt
@@ -12,4 +12,5 @@ sentencepiece
 jsonlines
 nomic
 scikit-learn
-matplotlib
\ No newline at end of file
+matplotlib
+fonttools>=4.43.0 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file