fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250
RasaHQ · Jul 16, 2024 · 963a04c · 963a04c
1 parent 6935627
commit 963a04c
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/requirements.txt b/requirements.txt
@@ -4,3 +4,5 @@ rasa==2.8.21 # NB! when updating, make sure to also update:
 -r actions/requirements-actions.txt
 pytablewriter
 python-dotenv~=0.15.0
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability