six==1.10.0
requests==2.20.0
gTTS==2.0.1
gTTS-token==1.1.3
PyAudio==0.2.11
pyee==1.0.1
SpeechRecognition==3.8.1
tornado==4.5.3
websocket-client==0.32.0
requests-futures==0.9.5
pyyaml==3.13
pyalsaaudio==0.8.2
xmlrunner==1.7.7
pyserial==3.0
psutil==5.2.1
pocketsphinx==0.1.0
inflection==0.3.1
pillow==4.1.1
python-dateutil==2.6.0
pychromecast==0.7.7
python-vlc==1.1.2
pulsectl==17.7.4
google-api-python-client==1.6.4
fasteners==0.14.1

msm==0.6.3
msk==0.3.12
adapt-parser==0.3.0
padatious==0.4.5
fann2==1.0.7
padaos==0.1.8
precise-runner==0.2.1
petact==0.1.2

# dev setup tools
pep8==1.7.0

six==1.10.0
requests==2.20.0
gTTS==2.0.1
gTTS-token==1.1.3
PyAudio==0.2.11
pyee==1.0.1
SpeechRecognition==3.8.1
tornado==4.5.3
websocket-client==0.32.0
requests-futures==0.9.5
pyalsaaudio==0.8.2
xmlrunner==1.7.7
pyserial==3.0
psutil==5.2.1
pocketsphinx==0.1.0
inflection==0.3.1
pillow==4.1.1
python-dateutil==2.6.0
pychromecast==0.7.7
python-vlc==1.1.2
pulsectl==17.7.4
google-api-python-client==1.6.4
fasteners==0.14.1

msm==0.6.3
msk==0.3.12
adapt-parser==0.3.0
padatious==0.4.5
fann2==1.0.7
padaos==0.1.8
precise-runner==0.2.1
petact==0.1.2

# dev setup tools
pep8==1.7.0

Remove pyyaml as a dependency
Remove pyyaml as a dependency

==== Fixed Issues ====
CVE-2017-18342
https://nvd.nist.gov/vuln/detail/CVE-2017-18342
high severity
Vulnerable versions: < 4.2b1
Patched version: 4.2b1
In PyYAML before 4.1, the yaml.load() API could execute arbitrary code.
In other words, yaml.safe_load is not used.

====  Tech Notes ====
NONE - explain new algorithms in detail, tool changes, etc.

====  Documentation Notes ====
NONE - description of a new feature or notes on behavior changes

==== Localization Notes ====
NONE - point to new strings, language specific functions, etc.

==== Environment Notes ====
NONE - new package requirements, new files being written to disk, etc.

==== Protocol Notes ====
NONE - message types added or changed, new signals, APIs, etc.
