diff --git a/giza/requirements.txt b/giza/requirements.txt
index 51052ec40..326673bd4 100644
--- a/giza/requirements.txt
+++ b/giza/requirements.txt
@@ -37,4 +37,5 @@ sphinxcontrib-httpdomain==1.4.0
 tlslite==0.4.9
 uritemplate.py==0.3.0
 Wand==0.4.2
-wheel==0.29.0
+wheel==0.38.0
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability