From 9de80449801f13eb545b2f03560ef21da00332f9 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 9 Jul 2024 14:27:29 +0000 Subject: [PATCH] fix: dev_requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899 --- dev_requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/dev_requirements.txt b/dev_requirements.txt index fe57472f..0e034969 100644 --- a/dev_requirements.txt +++ b/dev_requirements.txt @@ -18,3 +18,4 @@ pytorch-lightning lightning-bolts jsonargparse[signatures]>=3.19.3 # required for Lightning CLI coverage +zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability