fix codeql workflow failure

[rshraga]

The CodeQL workflow has started failing 3 weeks ago. I traced the issue to a change in how setuptools handles warnings in virtualenvs pypa/setuptools#3772 Reverting to an older setuptools package fixes the issue, but I am not sure how to address properly

[rshraga]

I traced this issue to the setuptools package: pypa/setuptools#3772 Seems this warning has been thrown forever, but starting with setuptools 66 the warning starts throwing an actual exception. The back and forth on that decision is spicy and I am not sure it will get fixed since installation using the setup.py command is not recommended. Workaround is to revert setup tools to 65.7.0 but I am not sure this is wise long term.

[joecummings]

If we just need to get this passing in time for the release, this seems fine as it only affects the setuptools used for running codeql.

How important is codeql to our health signals? @osalpekar ?

[osalpekar]

If we just need to get this passing in time for the release, this seems fine as it only affects the setuptools used for running codeql.

How important is codeql to our health signals? @osalpekar ?

@joecummings It's a good security check, but likely not the most critical since many other ecosystem libraries and pytorch core don't have this.