From aca64e06bfc6509942c87a3cf44189e808e3e4e7 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 17 Dec 2025 08:43:28 +0000 Subject: [PATCH] fix: requirements/optional_m1_1.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-FONTTOOLS-14151621 --- requirements/optional_m1_1.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements/optional_m1_1.txt b/requirements/optional_m1_1.txt index ab6bae4466981..675b56b667bd8 100644 --- a/requirements/optional_m1_1.txt +++ b/requirements/optional_m1_1.txt @@ -12,3 +12,4 @@ tensorflow-macos # mod_name=tensorflow_macos tensorflow-probability # mod_name=tensorflow_probability torch paddlepaddle # unpinned , mod_name=paddle +fonttools>=4.61.0 # not directly required, pinned by Snyk to avoid a vulnerability