clearml >= 1.1.6
xgboost

pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability