From 50adc13516c6261060b8d68b0a82772548b27f2b Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 24 Jul 2025 09:38:56 +0000 Subject: [PATCH] fix: subtask4/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-10742466 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-1584144 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-5798483 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6057352 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6057353 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091621 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091622 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6091623 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6209406 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6209407 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6645291 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-6808823 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-7675597 - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-8383923 - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-3164749 - https://snyk.io/vuln/SNYK-PYTHON-CERTIFI-5805047 - https://snyk.io/vuln/SNYK-PYTHON-FUTURE-3180414 - https://snyk.io/vuln/SNYK-PYTHON-GRPCIO-5834443 - https://snyk.io/vuln/SNYK-PYTHON-GRPCIO-9486468 - https://snyk.io/vuln/SNYK-PYTHON-GRPCIO-9486469 - https://snyk.io/vuln/SNYK-PYTHON-IDNA-6597975 - https://snyk.io/vuln/SNYK-PYTHON-JOBLIB-3027033 - https://snyk.io/vuln/SNYK-PYTHON-NETWORKX-1062709 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321964 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321966 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321969 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321970 - https://snyk.io/vuln/SNYK-PYTHON-PROTOBUF-10364902 - https://snyk.io/vuln/SNYK-PYTHON-PROTOBUF-3031740 - https://snyk.io/vuln/SNYK-PYTHON-PYMONGO-7172112 - https://snyk.io/vuln/SNYK-PYTHON-PYTORCHLIGHTNING-2325279 - https://snyk.io/vuln/SNYK-PYTHON-PYTORCHLIGHTNING-2419028 - https://snyk.io/vuln/SNYK-PYTHON-PYTORCHLIGHTNING-7218866 - https://snyk.io/vuln/SNYK-PYTHON-PYTORCHLIGHTNING-7411413 - https://snyk.io/vuln/SNYK-PYTHON-PYTORCHLIGHTNING-9510928 - https://snyk.io/vuln/SNYK-PYTHON-PYTORCHLIGHTNING-9510929 - https://snyk.io/vuln/SNYK-PYTHON-PYYAML-590151 - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-10305723 - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-5595532 - https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867 - https://snyk.io/vuln/SNYK-PYTHON-SCIKITLEARN-7217830 - https://snyk.io/vuln/SNYK-PYTHON-SCIPY-5756497 - https://snyk.io/vuln/SNYK-PYTHON-SCIPY-5759266 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-9964606 - https://snyk.io/vuln/SNYK-PYTHON-TORCH-6619806 - https://snyk.io/vuln/SNYK-PYTHON-TORCH-6649934 - https://snyk.io/vuln/SNYK-PYTHON-TORCH-9634167 - https://snyk.io/vuln/SNYK-PYTHON-TORCH-9788071 - https://snyk.io/vuln/SNYK-PYTHON-TQDM-6807582 - https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-10185677 - https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-10247398 - https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-10658536 - https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-3092483 - https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-5563628 - https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-6134594 - https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-6135747 - https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-6220003 - https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-6239525 - https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-8400820 - https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-8400822 - https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-8400823 - https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-9510923 - https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-9904725 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-10390193 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-10390194 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-1533435 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-5926907 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-6002459 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250 - https://snyk.io/vuln/SNYK-PYTHON-WEBSOCKETS-1297182 - https://snyk.io/vuln/SNYK-PYTHON-WEBSOCKETS-1582792 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-3319935 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-3319936 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6035177 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6808933 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-8309091 - https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-8309092 - https://snyk.io/vuln/SNYK-PYTHON-WHEEL-3180413 - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899 --- subtask4/requirements.txt | 46 ++++++++++++++++++++------------------- 1 file changed, 24 insertions(+), 22 deletions(-) diff --git a/subtask4/requirements.txt b/subtask4/requirements.txt index 480402f..5cee7ae 100644 --- a/subtask4/requirements.txt +++ b/subtask4/requirements.txt @@ -1,10 +1,10 @@ absl-py==0.12.0 -aiohttp==3.7.4.post0 +aiohttp==3.12.14 astor==0.8.1 async-timeout==3.0.1 attrs==20.3.0 cachetools==4.2.2 -certifi==2020.12.5 +certifi==2023.7.22 chardet==4.0.0 click==7.1.2 colorama==0.4.4 @@ -12,36 +12,36 @@ contextlib2==0.6.0.post1 decorator==4.4.2 filelock==3.0.12 fsspec==2021.4.0 -future==0.18.2 +future==0.18.3 google-auth==1.30.0 google-auth-oauthlib==0.4.4 -grpcio==1.37.1 +grpcio==1.58.3 hyperopt==0.1.2 -idna==2.10 +idna==3.7 importlib-metadata==4.0.1 -joblib==1.0.1 +joblib==1.1.1 json-tricks==3.15.5 Markdown==3.3.4 multidict==5.1.0 netifaces==0.10.9 -networkx==2.5.1 +networkx==2.6 nni==2.1 -numpy==1.20.2 +numpy==1.22.2 oauthlib==3.1.0 packaging==20.9 prettytable==2.1.0 -protobuf==3.15.8 +protobuf==4.25.8 psutil==5.8.0 pyasn1==0.4.8 pyasn1-modules==0.2.8 pyDeprecate==0.3.0 -pymongo==3.11.4 +pymongo==4.6.3 pyparsing==2.4.7 PythonWebHDFS==0.2.3 -pytorch-lightning==1.3.0 -PyYAML==5.3.1 +pytorch-lightning==2.4.0 +PyYAML==5.4 regex==2021.4.4 -requests==2.25.1 +requests==2.32.4 requests-oauthlib==1.3.0 responses==0.13.3 rsa==4.7.2 @@ -49,8 +49,8 @@ ruamel.yaml==0.17.4 ruamel.yaml.clib==0.2.2 sacremoses==0.0.45 schema==0.7.4 -scikit-learn==0.24.2 -scipy==1.6.3 +scikit-learn==1.5.0 +scipy==1.10.0rc1 simplejson==3.17.2 six==1.15.0 sklearn==0.0 @@ -58,14 +58,16 @@ tensorboard==2.4.1 tensorboard-plugin-wit==1.8.0 threadpoolctl==2.1.0 tokenizers==0.10.2 -torch==1.7.1+cu101 +torch==2.7.1+cu101 torchmetrics==0.2.0 -tqdm==4.60.0 -transformers==4.5.1 +tqdm==4.66.3 +transformers==4.52.0 typing-extensions==3.7.4.3 -urllib3==1.26.4 +urllib3==2.5.0 wcwidth==0.2.5 -websockets==9.0.1 -Werkzeug==1.0.1 +websockets==10.0 +Werkzeug==3.0.6 yarl==1.6.3 -zipp==3.4.1 +zipp==3.19.1 +setuptools>=78.1.1 # not directly required, pinned by Snyk to avoid a vulnerability +wheel>=0.38.0 # not directly required, pinned by Snyk to avoid a vulnerability