From 93856bb21966bc5500a8f5d6e9e9377d98b40caa Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 16 Jul 2024 07:31:17 +0000 Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482 --- requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements.txt b/requirements.txt index 8a8e9073..69f02516 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2,3 +2,4 @@ kedro>=0.19.0, <0.20.0 kedro_datasets mlflow>=1.0.0, <3.0.0 pydantic>=1.0.0, <3.0.0 +setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability