Added comment on why pinning aiohttp

cfpb · Dec 11, 2024 · 841a7dd · 841a7dd
1 parent 620a575
commit 841a7dd
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/pyproject.toml b/pyproject.toml
@@ -22,6 +22,7 @@ fsspec = "^2024.6.1"
 polars-lts-cpu = "^1.16.0"
 pyarrow = "^18.1.0"
 boto3 = "~1.34.0"
+#pinning due to snyk high vulnerability find
 s3fs = { version = "^2024.9.0", extras = ["aiohttp=^3.11.10"] }
 
 [tool.poetry.group.dev.dependencies]