From f95a09529f5f9857e8b5570a8cfc89fbf17fc40a Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 29 Jul 2024 17:50:54 +0000
Subject: [PATCH] fix: requirements-dev.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-ANYIO-7361842
- https://snyk.io/vuln/SNYK-PYTHON-BLACK-6256273
- https://snyk.io/vuln/SNYK-PYTHON-FONTTOOLS-6133203
- https://snyk.io/vuln/SNYK-PYTHON-IPYTHON-3318382
- https://snyk.io/vuln/SNYK-PYTHON-JUPYTERLAB-6182923
- https://snyk.io/vuln/SNYK-PYTHON-JUPYTERSERVER-5862881
- https://snyk.io/vuln/SNYK-PYTHON-JUPYTERSERVER-5862882
- https://snyk.io/vuln/SNYK-PYTHON-JUPYTERSERVER-6099119
- https://snyk.io/vuln/SNYK-PYTHON-JUPYTERSERVER-7217832
- https://snyk.io/vuln/SNYK-PYTHON-KERAS-6615954
- https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321964
- https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321966
- https://snyk.io/vuln/SNYK-PYTHON-NUMPY-2321970
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-5918878
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6043904
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6182918
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219984
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219986
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6514866
- https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867
- https://snyk.io/vuln/SNYK-PYTHON-SCIKITLEARN-7217830
- https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412
- https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-1315149
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3136280
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3372984
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3372987
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3372990
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3372993
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3372996
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3372999
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3373002
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3373005
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3373008
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3373011
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3373014
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3373017
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3373020
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3373023
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3373026
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3373029
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3373032
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3373035
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3373038
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-3373041
- https://snyk.io/vuln/SNYK-PYTHON-TENSORFLOW-5291376
- https://snyk.io/vuln/SNYK-PYTHON-TORNADO-5537286
- https://snyk.io/vuln/SNYK-PYTHON-TORNADO-5840803
- https://snyk.io/vuln/SNYK-PYTHON-TORNADO-6041512
- https://snyk.io/vuln/SNYK-PYTHON-TORNADO-7217828
- https://snyk.io/vuln/SNYK-PYTHON-TORNADO-7217829
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250
- https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6035177
- https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-6808933
- https://snyk.io/vuln/SNYK-PYTHON-WHEEL-3180413
- https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899
---
 requirements-dev.txt | 22 ++++++++++++++++++----
 1 file changed, 18 insertions(+), 4 deletions(-)

diff --git a/requirements-dev.txt b/requirements-dev.txt
index 3f0437f..793c987 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -2,13 +2,27 @@
 pytest==7.1.2
 pytest-cov==3.0.0
 codecov==2.1.12
-tensorflow==2.9.3
+tensorflow==2.12.0rc1
 python-dotenv==0.20.0
-scikit-learn==1.0.2
-jupyterlab==3.4.2
+scikit-learn==1.5.0
+jupyterlab==3.6.7
 seaborn==0.11.2
 pre-commit==2.19.0
-black==22.3.0
+black==24.3.0
 doc8==0.11.2
 rope==1.1.1
 mypy==0.960
+anyio>=4.4.0 # not directly required, pinned by Snyk to avoid a vulnerability
+fonttools>=4.43.0 # not directly required, pinned by Snyk to avoid a vulnerability
+ipython>=8.10.0 # not directly required, pinned by Snyk to avoid a vulnerability
+jupyter-server>=2.14.1 # not directly required, pinned by Snyk to avoid a vulnerability
+keras>=2.13.1rc0 # not directly required, pinned by Snyk to avoid a vulnerability
+numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability
+pillow>=10.3.0 # not directly required, pinned by Snyk to avoid a vulnerability
+requests>=2.32.2 # not directly required, pinned by Snyk to avoid a vulnerability
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability
+tornado>=6.4.1 # not directly required, pinned by Snyk to avoid a vulnerability
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability
+wheel>=0.38.0 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability