update setuptools and pip to resolve trivy vulnerabilities (#380)

Signed-off-by: Srikanth Ramakrishna <srikanth.ramakrishna@intel.com>

Author: sramakintel

pytorch/Dockerfile

@@ -229,7 +229,13 @@ RUN apt-get update -y && apt-get install -y --no-install-recommends --fix-missin
     python3-venv && \
     rm -rf /var/lib/apt/lists/*
 
-RUN python3 -m venv /home/venv
+WORKDIR /
+COPY venv-requirements.txt .
+
+RUN python3 -m venv /home/venv && \
+    /home/venv/bin/python -m pip install --no-cache-dir --upgrade pip && \
+    /home/venv/bin/python -m pip install --no-cache-dir -r venv-requirements.txt && \
+    rm -rf venv-requirements.txt
 
 ENV PATH="/home/venv/bin:$PATH"
 

pytorch/serving/torchserve-xpu-requirements.txt

@@ -3,7 +3,7 @@ torchvision==0.18.1+cxx11.abi
 torchaudio==2.3.1+cxx11.abi
 intel_extension_for_pytorch==2.3.110+xpu
 --extra-index-url https://pytorch-extension.intel.com/release-whl/stable/xpu/us
-numpy==1.26.4
+numpy==2.1.1
 captum>=0.7.0
 cython>=3.0.10
 pynvml>=11.5.0

pytorch/venv-requirements.txt

@@ -0,0 +1,5 @@
+setuptools>=70.0.0
+psutil==6.0.0
+mkl==2024.2.1
+mkl-include==2024.2.1
+intel-openmp==2024.2.1