From a0bdb664436fad1d82c7988d5b413c76207f5037 Mon Sep 17 00:00:00 2001
From: Albert Villanova del Moral
 <8515462+albertvillanova@users.noreply.github.com>
Date: Mon, 6 May 2024 08:02:00 +0200
Subject: [PATCH] Update tqdm >= 4.66.3 to fix vulnerability (#6870)

* Pin min required version of tqdm to fix vulnerability

* Pin min required version of tqdm in conda YAML

* Pin min required version of tqdm in overview notebook
---
 .github/conda/meta.yaml  | 4 ++--
 notebooks/Overview.ipynb | 4 ++--
 setup.py                 | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/conda/meta.yaml b/.github/conda/meta.yaml
index 05309a34379..228891dd0f0 100644
--- a/.github/conda/meta.yaml
+++ b/.github/conda/meta.yaml
@@ -20,7 +20,7 @@ requirements:
     - dill
     - pandas
     - requests >=2.19.0
-    - tqdm >=4.62.1
+    - tqdm >=4.66.3
     - dataclasses
     - multiprocess
     - fsspec
@@ -37,7 +37,7 @@ requirements:
     - dill
     - pandas
     - requests >=2.19.0
-    - tqdm >=4.62.1
+    - tqdm >=4.66.3
     - dataclasses
     - multiprocess
     - fsspec
diff --git a/notebooks/Overview.ipynb b/notebooks/Overview.ipynb
index 8633df8058c..6c31b006edf 100644
--- a/notebooks/Overview.ipynb
+++ b/notebooks/Overview.ipynb
@@ -82,7 +82,7 @@
             "Requirement already satisfied: dill<0.3.7,>=0.3.0 in /usr/local/lib/python3.10/dist-packages (from datasets) (0.3.6)\n",
             "Requirement already satisfied: pandas in /usr/local/lib/python3.10/dist-packages (from datasets) (1.5.3)\n",
             "Requirement already satisfied: requests>=2.19.0 in /usr/local/lib/python3.10/dist-packages (from datasets) (2.27.1)\n",
-            "Requirement already satisfied: tqdm>=4.62.1 in /usr/local/lib/python3.10/dist-packages (from datasets) (4.65.0)\n",
+            "Requirement already satisfied: tqdm>=4.66.3 in /usr/local/lib/python3.10/dist-packages (from datasets) (4.65.0)\n",
             "Requirement already satisfied: xxhash in /usr/local/lib/python3.10/dist-packages (from datasets) (3.2.0)\n",
             "Requirement already satisfied: multiprocess in /usr/local/lib/python3.10/dist-packages (from datasets) (0.70.14)\n",
             "Requirement already satisfied: fsspec[http]>=2021.11.1 in /usr/local/lib/python3.10/dist-packages (from datasets) (2023.4.0)\n",
@@ -2574,7 +2574,7 @@
             "Requirement already satisfied: dill in /usr/local/lib/python3.10/dist-packages (from evaluate) (0.3.6)\n",
             "Requirement already satisfied: pandas in /usr/local/lib/python3.10/dist-packages (from evaluate) (1.5.3)\n",
             "Requirement already satisfied: requests>=2.19.0 in /usr/local/lib/python3.10/dist-packages (from evaluate) (2.27.1)\n",
-            "Requirement already satisfied: tqdm>=4.62.1 in /usr/local/lib/python3.10/dist-packages (from evaluate) (4.65.0)\n",
+            "Requirement already satisfied: tqdm>=4.66.3 in /usr/local/lib/python3.10/dist-packages (from evaluate) (4.65.0)\n",
             "Requirement already satisfied: xxhash in /usr/local/lib/python3.10/dist-packages (from evaluate) (3.2.0)\n",
             "Requirement already satisfied: multiprocess in /usr/local/lib/python3.10/dist-packages (from evaluate) (0.70.14)\n",
             "Requirement already satisfied: fsspec[http]>=2021.05.0 in /usr/local/lib/python3.10/dist-packages (from evaluate) (2023.4.0)\n",
diff --git a/setup.py b/setup.py
index 46d724721a3..d433fe5b778 100644
--- a/setup.py
+++ b/setup.py
@@ -124,7 +124,7 @@
     # for downloading datasets over HTTPS
     "requests>=2.19.0",
     # progress bars in download and scripts
-    "tqdm>=4.62.1",
+    "tqdm>=4.66.3",
     # for fast hashing
     "xxhash",
     # for better multiprocessing