fix: requirements.txt to reduce vulnerabilities

The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250 - https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899
RasaHQ · Jul 10, 2024 · 1432889 · 1432889
1 parent 6935627
commit 1432889
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/requirements.txt b/requirements.txt
@@ -4,3 +4,5 @@ rasa==2.8.21 # NB! when updating, make sure to also update:
 -r actions/requirements-actions.txt
 pytablewriter
 python-dotenv~=0.15.0
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability