Fix dependency vulnerabilites (#1723)

* Bump pyspark to 3.4.1 * Bump vulnerable dependencies in requirements.txt * Bump sphinx to reduce vulnerabilities
snorkel-team · Nov 17, 2023 · 7300db7 · 7300db7
1 parent 05c3cc1
commit 7300db7
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 5 deletions.
diff --git a/docs/requirements-doc.txt b/docs/requirements-doc.txt
@@ -1,4 +1,4 @@
-sphinx==2.1.2
+sphinx==2.4.5
 sphinx_autodoc_typehints==1.7.0
 sphinx_rtd_theme==0.4.3
 https://download.pytorch.org/whl/cpu/torch-1.4.0%2Bcpu-cp36-cp36m-linux_x86_64.whl
diff --git a/requirements-pyspark.txt b/requirements-pyspark.txt
@@ -1,3 +1,3 @@
 # Note: we don't include PySpark in the normal required installs.
 # Installing a new version may overwrite your existing system install.
-pyspark==3.2.2
+pyspark==3.4.1
diff --git a/requirements.txt b/requirements.txt
@@ -10,7 +10,7 @@
 
 # General scientific computing
 
-numpy>=1.16.5
+numpy>=1.25.1
 scipy>=1.2.0
 
 # Data storage and function application
@@ -26,7 +26,7 @@ munkres>=1.0.6
 networkx>=2.2
 
 # Model introspection tools
-tensorboard>=2.9.1
+tensorboard>=2.13.0
 
 #### EXTRA/TEST LIBRARIES
 
@@ -36,7 +36,7 @@ blis>=0.3.0
 
 # Dask (parallelism)
 dask[dataframe]>=2020.12.0
-distributed>=2020.12.0
+distributed>=2023.7.0
 
 # Dill (serialization)
 dill>=0.3.0