**Describe the bug** https://github.com/advisories/GHSA-v68g-wm8c-6x7j As we pinned the dependency to an earlier version of `transformers`, there are some known security vulnerabilities that cannot be easily resolve. Can we consider unpinning the version of `transformers`? Thanks!