fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6182918
hearbenchmark · Jan 21, 2024 · a901211 · a901211
1 parent 610d864
commit a901211
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/requirements.txt b/requirements.txt
@@ -19,4 +19,5 @@ ffmpeg-python
 note_seq
 tensorflow>=2.0
 schema
-patool
+patool
+pillow>=10.2.0 # not directly required, pinned by Snyk to avoid a vulnerability