Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RDISCROWD-6713 Pillow 10.1.0 #895

Merged
merged 19 commits into from
Jan 8, 2024
Merged

RDISCROWD-6713 Pillow 10.1.0 #895

merged 19 commits into from
Jan 8, 2024

Conversation

kbecker42
Copy link

@kbecker42 kbecker42 commented Jan 8, 2024

  • Bump Pillow from 10.2.0 to 10.1.0 for compatibility.

Re: #890

dependabot bot and others added 19 commits May 23, 2023 03:08
Bumps [requests](https://github.com/psf/requests) from 2.26.0 to 2.31.0.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.26.0...v2.31.0)

---
updated-dependencies:
- dependency-name: requests
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [cryptography](https://github.com/pyca/cryptography) from 3.4.8 to 41.0.2.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@3.4.8...41.0.2)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [certifi](https://github.com/certifi/python-certifi) from 2021.5.30 to 2023.7.22.
- [Commits](certifi/python-certifi@2021.05.30...2023.07.22)

---
updated-dependencies:
- dependency-name: certifi
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
…phy-41.0.2' into RDISCROWD-6713

# Conflicts:
#	setup.py
@kbecker42 kbecker42 requested a review from dchhabda January 8, 2024 15:44
@coveralls
Copy link

Pull Request Test Coverage Report for Build 7449704472

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 93.943%

Totals Coverage Status
Change from base Build 7424194134: 0.0%
Covered Lines: 17122
Relevant Lines: 18226

💛 - Coveralls

@kbecker42 kbecker42 merged commit a7dc939 into security-updates Jan 8, 2024
4 checks passed
kbecker42 added a commit that referenced this pull request Jan 2, 2025
* RDISCROWD-6713 Lib upgrades to fix Critical and High severity alerts (#890)

* Bump requests from 2.26.0 to 2.31.0

Bumps [requests](https://github.com/psf/requests) from 2.26.0 to 2.31.0.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.26.0...v2.31.0)

---
updated-dependencies:
- dependency-name: requests
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump cryptography from 3.4.8 to 41.0.2

Bumps [cryptography](https://github.com/pyca/cryptography) from 3.4.8 to 41.0.2.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@3.4.8...41.0.2)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump certifi from 2021.5.30 to 2023.7.22

Bumps [certifi](https://github.com/certifi/python-certifi) from 2021.5.30 to 2023.7.22.
- [Commits](certifi/python-certifi@2021.05.30...2023.07.22)

---
updated-dependencies:
- dependency-name: certifi
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* Updated libs to address all Critical and High severity alerts.

* up

* up

* up

* Updated libs.

* fix

* up

* up

* up

* up

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* RDISCROWD-6713 Pillow 10.1.0 (#895)

* Bump requests from 2.26.0 to 2.31.0

Bumps [requests](https://github.com/psf/requests) from 2.26.0 to 2.31.0.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.26.0...v2.31.0)

---
updated-dependencies:
- dependency-name: requests
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump cryptography from 3.4.8 to 41.0.2

Bumps [cryptography](https://github.com/pyca/cryptography) from 3.4.8 to 41.0.2.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@3.4.8...41.0.2)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump certifi from 2021.5.30 to 2023.7.22

Bumps [certifi](https://github.com/certifi/python-certifi) from 2021.5.30 to 2023.7.22.
- [Commits](certifi/python-certifi@2021.05.30...2023.07.22)

---
updated-dependencies:
- dependency-name: certifi
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* Updated libs to address all Critical and High severity alerts.

* up

* up

* up

* Updated libs.

* fix

* up

* up

* up

* up

* Pillow 10.1.0

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* pyOpenSSL==22.1.0

* Updated libs.

* Minimum updates per depend bot.

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants