fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-SCIKITLEARN-7217830
- https://snyk.io/vuln/SNYK-PYTHON-TORNADO-7217828
- https://snyk.io/vuln/SNYK-PYTHON-TORNADO-7217829

requirements.txt

@@ -24,4 +24,5 @@ tqdm
 # otherwise librosa breaks, which fucking dcase-util requires
 numba==0.48
 #numba>=0.49.0 # not directly required, pinned by Snyk to avoid a vulnerability
-scikit-learn>=0.24.2 # not directly required, pinned by Snyk to avoid a vulnerability
+scikit-learn>=1.5.0 # not directly required, pinned by Snyk to avoid a vulnerability
+tornado>=6.4.1 # not directly required, pinned by Snyk to avoid a vulnerability