build(deps): Move setuptools to requirements.txt (from dev reqs) (#4291)

cpswan · terriko · web-flow · commit c442751a33b5 · 2024-07-30T11:26:28.000-07:00
* build(deps): Move setuptools from dev-requirements.txt to requirements.txt

* fix: correct entry for setuptools

---------

Co-authored-by: Terri Oda &lt;terri.oda@intel.com&gt;
diff --git a/dev-requirements.txt b/dev-requirements.txt
@@ -22,4 +22,3 @@ types-PyYAML
 types-requests
 types-setuptools
 types-toml
-setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability
diff --git a/requirements.csv b/requirements.csv
@@ -24,3 +24,4 @@ anthonyharrison_not_in_db,lib4sbom
 anthonyharrison_not_in_db,lib4vex
 the_purl_authors_not_in_db,packageurl-python
 h2non,filetype
+python,setuptools
diff --git a/requirements.txt b/requirements.txt
@@ -19,6 +19,7 @@ pyyaml>=5.4
 requests>=2.32.0
 rich
 rpmfile>=1.0.6
+setuptools>=65.5.1 # pinned by Snyk to avoid a vulnerability
 toml; python_version < "3.11"
 urllib3>=1.26.5 # dependency of requests added explictly to avoid CVEs
 xmlschema
