fix: requirements/requirements-binaries.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482 - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899
oleksis · Aug 15, 2024 · b7e055a · b7e055a
1 parent 574ed2e
commit b7e055a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/requirements/requirements-binaries.txt b/requirements/requirements-binaries.txt
@@ -5,3 +5,5 @@ pyinstaller-hooks-contrib==2022.15
 
 # The following packages are considered to be unsafe in a requirements file:
 # setuptools
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability