From 6bc2b0e1ca0cdfd0afe1f454a5ee2ddf7b1d1f49 Mon Sep 17 00:00:00 2001
From: Shaojun Liu <61072813+liu-shaojun@users.noreply.github.com>
Date: Wed, 4 Sep 2024 16:05:36 +0800
Subject: [PATCH] fix dependabot alerts (#5202)

* fix dependabot alerts

* update
---
 .github/workflows/llm-harness-evaluation.yml    | 2 +-
 python/requirements/nano/requirements_torch.txt | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/llm-harness-evaluation.yml b/.github/workflows/llm-harness-evaluation.yml
index 77c688376b0..6ade033e27c 100644
--- a/.github/workflows/llm-harness-evaluation.yml
+++ b/.github/workflows/llm-harness-evaluation.yml
@@ -214,7 +214,7 @@ jobs:
           pip install --upgrade pip
           pip install jsonlines  pytablewriter regex
       - name: Download all results
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@4.1.7
         with:
           name: harness_results
           path: results          
diff --git a/python/requirements/nano/requirements_torch.txt b/python/requirements/nano/requirements_torch.txt
index 9227053fe33..c902f4e25ed 100644
--- a/python/requirements/nano/requirements_torch.txt
+++ b/python/requirements/nano/requirements_torch.txt
@@ -11,4 +11,4 @@ torchmetrics==0.11.0
 opencv-python-headless
 PyTurboJPEG
 opencv-transforms
-cryptography==41.0.6
+cryptography>=43.0.1