clearml >= 1.3.1 pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability