Pin sm version as auto-dependency

Author: aviruthen

sagemaker-serve/src/sagemaker/serve/detector/dependency_manager.py

@@ -66,11 +66,11 @@ def capture_dependencies(dependencies: dict, work_dir: Path, capture_all: bool =
 
         with open(path, "r") as f:
             autodetect_depedencies = f.read().splitlines()
-        # autodetect_depedencies.append("sagemaker[huggingface]>=2.199")
-        # autodetect_depedencies = []
+        # Pin sagemaker to 3.4.0+ to ensure SHA256 hashing is used for integrity checks
+        autodetect_depedencies.append("sagemaker[huggingface]>=3.4.0,<4.0.0")
     else:
-        autodetect_depedencies = []
-        # autodetect_depedencies = ["sagemaker[huggingface]>=2.199"]
+        # Pin sagemaker to 3.4.0+ to ensure SHA256 hashing is used for integrity checks
+        autodetect_depedencies = ["sagemaker[huggingface]>=3.4.0,<4.0.0"]
 
     module_version_dict = _parse_dependency_list(autodetect_depedencies)