Merge pull request #668 from biigle/patch-1

Update vulnerable Pillow version
biigle · Oct 4, 2023 · e5e8b40 · e5e8b40
2 parents 8ec8322 + ad9d554
commit e5e8b40
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/.docker/worker.dockerfile b/.docker/worker.dockerfile
@@ -114,7 +114,7 @@ RUN apk add --no-cache --virtual .build-deps \
         libpng-dev \
     && pip3 install --no-cache-dir \
         PyExcelerate==0.6.7 \
-        Pillow==9.3.* \
+        Pillow==10.0.1 \
     && apk del --purge .build-deps \
     && rm -rf /var/cache/apk/*
 

diff --git a/requirements.txt b/requirements.txt
@@ -1,10 +1,10 @@
 # This file is just used to get security alerts from GitHub. Make sure the versions match
-# in .docker/app.dockerfile and .docker/worker.dockerfile.
+# in .docker/worker.dockerfile.
 numpy==1.22.*
 opencv-contrib-python-headless==4.6.0
 scipy==1.10.0
 scikit-learn
 matplotlib==3.5.2
 PyExcelerate==0.6.7
-Pillow==9.3.*
+Pillow==10.0.1
 Shapely==1.8.1