fix: requirements/test.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321964 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321966 - https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321970 - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-8400708 - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899
adamlaska · Nov 25, 2024 · 2adadb8 · 2adadb8
1 parent 7c66485
commit 2adadb8
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/requirements/test.txt b/requirements/test.txt
@@ -21,3 +21,6 @@ didkit==0.2.1
 datar==0.8.6
 pdtypes==0.0.4
 importlib-metadata==4.13.0
+numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability
+tornado>=6.4.2 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability