Upgrade dependencies to address security issues (#40)

marqo-ai · Jan 9, 2025 · d8d530b · d8d530b
1 parent f822301
commit d8d530b
Show file tree

Hide file tree

Showing 3 changed files with 20 additions and 20 deletions.
diff --git a/requirements/amd64-gpu-requirements.txt b/requirements/amd64-gpu-requirements.txt
@@ -13,7 +13,7 @@ aiohttp==3.10.9
     #   -r requirements.in
     #   datasets
     #   fsspec
-aiosignal==1.3.1
+aiosignal==1.3.2
     # via aiohttp
 anyio==3.7.1
     # via
@@ -25,7 +25,7 @@ async-timeout==4.0.3
     # via
     #   aiohttp
     #   redis
-attrs==24.2.0
+attrs==24.3.0
     # via
     #   aiohttp
     #   jsonschema
@@ -44,7 +44,7 @@ botocore==1.28.4
     #   s3transfer
 cachetools==5.3.1
     # via -r requirements.in
-certifi==2019.11.28
+certifi==2023.7.22
     # via
     #   -r requirements.in
     #   httpcore
@@ -54,7 +54,7 @@ cffi==1.17.1
     # via soundfile
 charset-normalizer==2.1.1
     # via requests
-click==8.1.7
+click==8.1.8
     # via
     #   nltk
     #   uvicorn
@@ -330,7 +330,7 @@ pyyaml==6.0.2
     #   yacs
 readerwriterlock==1.0.9
     # via -r requirements.in
-redis==4.4.2
+redis==4.4.4
     # via -r requirements.in
 regex==2024.9.11
     # via
@@ -451,7 +451,7 @@ transformers==4.41.2
     #   multilingual-clip
     #   optimum
     #   sentence-transformers
-typing-extensions==4.5.0
+typing-extensions==4.8.0
     # via
     #   -r requirements.in
     #   huggingface-hub
@@ -465,7 +465,7 @@ typing-extensions==4.5.0
     #   torch
     #   torchvision
     #   uvicorn
-urllib3==1.26.16
+urllib3==1.26.17
     # via
     #   -r requirements.in
     #   botocore

diff --git a/requirements/arm64-requirements.txt b/requirements/arm64-requirements.txt
@@ -13,7 +13,7 @@ aiohttp==3.10.9
     #   -r requirements.in
     #   datasets
     #   fsspec
-aiosignal==1.3.1
+aiosignal==1.3.2
     # via aiohttp
 anyio==3.7.1
     # via
@@ -25,7 +25,7 @@ async-timeout==4.0.3
     # via
     #   aiohttp
     #   redis
-attrs==24.2.0
+attrs==24.3.0
     # via
     #   aiohttp
     #   jsonschema
@@ -44,7 +44,7 @@ botocore==1.28.4
     #   s3transfer
 cachetools==5.3.1
     # via -r requirements.in
-certifi==2019.11.28
+certifi==2023.7.22
     # via
     #   -r requirements.in
     #   httpcore
@@ -54,7 +54,7 @@ cffi==1.17.1
     # via soundfile
 charset-normalizer==2.1.1
     # via requests
-click==8.1.7
+click==8.1.8
     # via
     #   nltk
     #   uvicorn
@@ -318,7 +318,7 @@ pyyaml==6.0.2
     #   yacs
 readerwriterlock==1.0.9
     # via -r requirements.in
-redis==4.4.2
+redis==4.4.4
     # via -r requirements.in
 regex==2024.9.11
     # via
@@ -438,7 +438,7 @@ transformers==4.41.2
     #   multilingual-clip
     #   optimum
     #   sentence-transformers
-typing-extensions==4.5.0
+typing-extensions==4.8.0
     # via
     #   -r requirements.in
     #   huggingface-hub
@@ -452,7 +452,7 @@ typing-extensions==4.5.0
     #   torch
     #   torchvision
     #   uvicorn
-urllib3==1.26.16
+urllib3==1.26.17
     # via
     #   -r requirements.in
     #   botocore

diff --git a/requirements/requirements.in b/requirements/requirements.in
@@ -4,7 +4,7 @@ fastapi==0.86.0
 uvicorn==0.31.0
 fastapi-utils==0.2.1
 jsonschema==4.17.1
-redis==4.4.2
+redis==4.4.4
 more_itertools==10.4.0
 boto3==1.25.4
 botocore==1.28.4
@@ -25,11 +25,11 @@ psutil==5.9.4
 multilingual-clip==1.0.10
 safetensors==0.4.1
 flatbuffers==23.5.9
-certifi==2019.11.28
+certifi==2023.7.22
 idna==2.8
 six==1.14.0
-typing-extensions==4.5.0
-urllib3==1.26.16
+typing-extensions==4.8.0
+urllib3==1.26.17
 timm==1.0.8
 transformers==4.41.2
 einops==0.6.1
@@ -50,6 +50,7 @@ kazoo==2.10.0
 pycurl==7.45.3
 huggingface-hub==0.25.0
 jinja2==3.1.4
+hf-transfer==0.1.8
 
 # AMD Specific packages
 --extra-index-url https://download.pytorch.org/whl/cu113
@@ -96,5 +97,4 @@ watchfiles==0.24.0
 websockets==13.1
 zipp==3.20.2
 yarl==1.13.1
-portalocker==2.10.1
-hf-transfer==0.1.8
+portalocker==2.10.1