Fix high severity vulnerabilities from Snyk scans

[austin-hall-skylight]

Background

We have discovered some high level vulnerabilities in our Snyk reports. We need to address the vulnerabilities that effect the app in production (so ignoring things like dev-requirements, or containers that we're not using such as record-linkage).

Action Requested

Go through the problems listed by Snyk and address, likely by updating requirements as needed.

Here is the list as of 11/27:

• ingestion/requirements.txt
  • Pin setuptools to version 70.0.0
  • Pin anyio to version 4.4.0
• message-parser/requirements.txt
  • Pin anyio to version 4.4.0
• orchestration/requirements.txt
  • Pin anyio to version 4.4.0
• trigger-code-reference/requirements.txt
  • Pin anyio to version 4.4.0
• fhir-converter-requirements.txt
  • Pin anyio to version 4.4.0

Acceptance Criteria (Requirements)

• Snyk security scans for our containers are clean of any critical or high severity issues.