clearml >= 1.1.6
xgboost
pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability