fix: updated pip dependencies

allenai / allenact

An open source framework for research in Embodied-AI from AI2.

https://www.allenact.org

Other

308 stars 49 forks source link

fix: updated pip dependencies #334

Closed Aakash-Roy closed 2 years ago

Aakash-Roy commented 2 years ago

This PR is to fix one or more vulnerable packages in the pip dependencies of this project.

Changes included in this PR

Changes to the following files to upgrade the vulnerable dependencies to a fixed version: requirements.txt and dev_requirements.txt

Vulnerabilities that will be fixed

Issue	Upgrade
NETWORKX	`2.5 -> 2.6`
NUMPY	`1.19.5 -> 1.22.2`
PILLOW	`8.2.0 -> 9.0.1`
mkdocs	`1.1.2 -> 1.2.3`

jordis-ai2 commented 2 years ago

Thanks for the PR, @Aakash-Roy. In order for the PR to be complete, I would prefer to also modify the conda environment entries ad setup files under allenact and allenact_plugins. In any case, thank you so much for the initiative! I'll be happy to review and merge these changes once it's complete .

Aakash-Roy commented 2 years ago

I'll make a new PR with the said improvements. Thanks!

Aakash-Roy commented 2 years ago

See #335 @jordis-ai2