From d48f827dd54332d733f7590b676c40d9854727bc Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Sat, 3 May 2025 01:16:27 +0000
Subject: [PATCH] fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-9964606
- https://snyk.io/vuln/SNYK-PYTHON-TRANSFORMERS-9904725
---
 requirements.txt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 2080e1d..261ffd2 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -32,8 +32,9 @@ tokenizers==0.13.2
 torch==1.13.1
 torchaudio==0.13.1
 tqdm==4.64.1
-transformers==4.26.1
+transformers==4.50.0
 typing_extensions==4.5.0
 urllib3==1.26.14
 Werkzeug==2.2.3
 zipp==3.14.0
+setuptools>=78.1.1 # not directly required, pinned by Snyk to avoid a vulnerability