fix: gpt4all-training/requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6043904
abdulrahman305 · Nov 3, 2023 · 368c098 · 368c098
1 parent a04306e
commit 368c098
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/gpt4all-training/requirements.txt b/gpt4all-training/requirements.txt
@@ -12,4 +12,5 @@ sentencepiece
 jsonlines
 nomic
 scikit-learn
-matplotlib
+matplotlib
+pillow>=10.0.0 # not directly required, pinned by Snyk to avoid a vulnerability