fix: sdk/python/kubeflow/trainer/requirements.txt to reduce vulnerabi…

…lities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482
red-hat-data-services · Jul 15, 2024 · 06e5c3f · 06e5c3f
1 parent 20c6ede
commit 06e5c3f
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/sdk/python/kubeflow/trainer/requirements.txt b/sdk/python/kubeflow/trainer/requirements.txt
@@ -1,3 +1,4 @@
 peft==0.3.0
 datasets==2.15.0
 transformers==4.37.2
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability