snorkel-team / snorkel

A system for quickly generating training data with weak supervision
https://snorkel.org
Apache License 2.0
5.82k stars 857 forks source link

Fix dependency vulnerabilites #1723

Closed MLobo1997 closed 1 year ago

MLobo1997 commented 1 year ago

Description of proposed changes

The security score on Snyk is very low

Related issue(s)

Fixes # (issue)

Test plan

Checklist

Need help on these? Just ask!

bhancock8 commented 1 year ago

Thanks for the requested dependency upgrades, @MLobo1997! We'll wait to approve until you mark this PR as no longer in draft, but then we'd be happy to merge in changes like these.

MLobo1997 commented 1 year ago

Hey @bhancock8, what's happened with the CI of this repo? There seem to be no longer any builds on circleci

bhancock8 commented 1 year ago

Hmm, interesting. 🤔 We'll take a look. Thanks for flagging @MLobo1997.

MLobo1997 commented 1 year ago

That would be great, thanks @bhancock8! If you need anything let me know. I'll polish this PR once the builds are back in place.

bhancock8 commented 1 year ago

Sounds good. I see that we intentionally migrated from Travis to Circle back in Dec 2021 (https://github.com/snorkel-team/snorkel/pull/1685). Not sure where the Circle config file went though since then. @fpoms is going to take a look.

fpoms commented 1 year ago

@MLobo1997 Thanks for flagging this—from what I can tell, there seems to be something amiss on the CircleCI side of things. I’ve contacted them and am working toward a resolution. Will update you when I’ve heard back!

fpoms commented 1 year ago

@MLobo1997 Builds should be working again! The CircleCI auth keys had expired just recently, so CircleCI wasn't able to pickup the config. Let me know if it isn't working for you still.

github-actions[bot] commented 1 year ago

This pull request is stale because it has been open 90 days with no activity. Remove stale label or comment or this will be closed in 7 days.