Skip to content

Commit 2bcb9aa

Browse files
Yicong-Huangrenovate-botaglinxinyuanclaude
authored
fix(deps, pyamber, v1.2): update dependency pillow to v12.3.0 [security] (#6957)
### What changes were proposed in this PR? Automated backport of #6909 to `release/v1.2`. Source: 1b9a8c6 · [automation run](https://github.com/apache/texera/actions/runs/30315421786) ### Any related issues, documentation, discussions? Backport of #6909, which fixes multiple Pillow security advisories: CVE-2026-54058, CVE-2026-54059, CVE-2026-54060, CVE-2026-55379, CVE-2026-55798, CVE-2026-59198, CVE-2026-59199, CVE-2026-59205 (see #6909 for full details). ### How was this PR tested? Release-branch CI runs on this branch once the conflicts are resolved and this PR is marked ready for review. ### Was this PR authored or co-authored using generative AI tooling? No. --------- Signed-off-by: Yicong Huang <[email protected]> Co-authored-by: Mend Renovate <[email protected]> Co-authored-by: Xinyuan Lin <[email protected]> Co-authored-by: Claude Fable 5 <[email protected]>
1 parent b90c70a commit 2bcb9aa

2 files changed

Lines changed: 2 additions & 2 deletions

File tree

‎amber/LICENSE-binary-python‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -372,7 +372,7 @@ Dependencies under the MIT-CMU License
372372
--------------------------------------------------------------------------------
373373

374374
Python packages:
375-
- pillow==12.2.0
375+
- pillow==12.3.0
376376

377377
Individual jars may contain their own META-INF/LICENSE and META-INF/NOTICE
378378
files that apply to their specific contents; those files continue to govern

‎amber/operator-requirements.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@
1818
wordcloud==1.9.3
1919
plotly==5.24.1
2020
praw==7.6.1
21-
pillow==12.2.0
21+
pillow==12.3.0
2222
pybase64==1.3.2
2323

2424
# Pin torch to the CPU wheel on Linux x86_64 to avoid the NVIDIA CUDA deps.

0 commit comments

Comments
 (0)