Workaround to override zope sub-dependency

[edwintorres]

Description

As mentioned in #1658 (comment) a sub-dependency is raising a flag on Snyk review.

For the record, forcing a pass for the snyk check since the vulnerability is in setuptools, which is already at the latest version -- indeed, the explicit fix is to Pin setuptools to version 65.5.1 ; iow, zope.event here is a false positive.

Introduced through [email protected]
Fixed in [email protected]

Tock use pipenv which do not provide a way to override that sub-dependency. But the maintainer offered a workaround.

This PR uses that workaround. A long-term fix to this issue could be the use of pyproject.toml, a new unified Python project settings file. But that option requires more exploratory work.

[codecov-commenter]

Codecov Report

Merging #1660 (6e8e811) into main (254be87) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main    #1660   +/-   ##
=======================================
  Coverage   94.17%   94.17%           
=======================================
  Files          66       66           
  Lines        4158     4158           
=======================================
  Hits         3916     3916           
  Misses        242      242           

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[cantsin]

amazing work @edwintorres !!