From 5415bcf8bf4fa8dcb25a65890b1bfecb50b7d2fc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 26 Jul 2026 16:42:34 +0000 Subject: [PATCH] chore(deps): update pillow requirement in /backend Updates the requirements on [pillow](https://github.com/python-pillow/Pillow) to permit the latest version. - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](https://github.com/python-pillow/Pillow/compare/12.2.0...12.3.0) --- updated-dependencies: - dependency-name: pillow dependency-version: 12.3.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- backend/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/requirements.txt b/backend/requirements.txt index e36217a..9013590 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -12,7 +12,7 @@ PyJWT>=2.13.0 google-auth>=2.0.0 psycopg2-binary>=2.9.12 # Pillow < 10.3 has multiple image-parsing CVEs (buffer overflow). -Pillow>=12.2.0 +Pillow>=12.3.0 # Jinja2 < 3.1.6 has sandbox-escape / template CVEs. jinja2>=3.1.6 pytest>=8.0.0