fix: requirements/development.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321964 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321966 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321970 - https://snyk.io/vuln/SNYK-PYTHON-PYARROW-6052811 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412
preset-io · Apr 3, 2024 · e6bdd65 · e6bdd65
1 parent 5beda30
commit e6bdd65
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/requirements/development.txt b/requirements/development.txt
@@ -308,3 +308,6 @@ zope-interface==5.4.0
 # The following packages are considered to be unsafe in a requirements file:
 # pip
 # setuptools
+numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability
+pyarrow>=14.0.1 # not directly required, pinned by Snyk to avoid a vulnerability
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability