#4382: fix GH reported vulnerabilities

infra/requirements-infra.txt

@@ -1,3 +1,3 @@
-ansible==6.0.0
+ansible==8.5.0
 ansible-lint==6.7.0
 check-copyright @ git+https://github.com/espressif/check-copyright.git@master

pyproject.toml

@@ -14,13 +14,13 @@ authors = [
     {email = "[email protected]"},
 ]
 dependencies = [
-  "pyyaml==5.3.1",
+  "pyyaml>=5.4",
   "numpy>=1.24.4",
   "loguru==0.6.0",
   "toolz==0.12.0",
   "matplotlib==3.7.1",
   "Pillow==10.3.0",
-  "jupyterlab==4.0.7",
+  "jupyterlab==4.0.11",
   "ipywidgets==8.1.1",
 
   # extra index required https://download.pytorch.org/whl/cpu

tt_metal/python_env/requirements-dev.txt

@@ -7,7 +7,7 @@
 # requires <4.0.0 platformdirs, so we're pinning platformdirs here
 platformdirs<4.0.0
 pre-commit==3.0.4
-black==23.10.1
+black==24.3.0
 clang-format==18.1.5
 build==0.10.0
 twine==4.0.2
@@ -28,10 +28,10 @@ networkx==3.1
 torchvision==0.17.1+cpu
 torchmetrics==1.3.1
 torch-fidelity==0.3.0
-transformers==4.37.2
+transformers==4.38.0
 xlsxwriter==3.0.8
 tiktoken==0.3.3
-tqdm==4.65.0
+tqdm==4.66.3
 enlighten==1.12.4
 sentencepiece==0.1.97
 numba>=0.58.1
@@ -41,7 +41,7 @@ opencv-python-headless==4.8.0.74
 diffusers==0.12.1
 accelerate==0.27.2
 ftfy==6.1.1
-gitpython==3.1.32
+gitpython==3.1.41
 einops==0.6.1
 # Pin to this because evaluate 0.4.0 will download the latest multiprocess as a
 # transitive dep, which uses dill >=0.3.7, however many packages require