fix: reqs_optional/requirements_optional_langchain.metrics.txt to red…

…uce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-AIOHTTP-8383923
h2oai · Nov 21, 2024 · e45a972 · e45a972
1 parent 2e830cc
commit e45a972
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/reqs_optional/requirements_optional_langchain.metrics.txt b/reqs_optional/requirements_optional_langchain.metrics.txt
@@ -6,3 +6,4 @@ nltk
 rouge_score>=0.1.2
 # below install tensorflow and downgrades numpy, so heavy dependency
 git+https://github.com/google-research/bleurt.git
+aiohttp>=3.10.11 # not directly required, pinned by Snyk to avoid a vulnerability