fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-7675597 - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250
RasaHQ · Aug 12, 2024 · 051e268 · 051e268
1 parent 6935627
commit 051e268
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/requirements.txt b/requirements.txt
@@ -4,3 +4,5 @@ rasa==2.8.21 # NB! when updating, make sure to also update:
 -r actions/requirements-actions.txt
 pytablewriter
 python-dotenv~=0.15.0
+aiohttp>=3.10.2 # not directly required, pinned by Snyk to avoid a vulnerability
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability