search

robail-yasrab / RootNav-2.0

Plant Phenotyping APP
BSD 3-Clause "New" or "Revised" License
41 stars 18 forks source link

Bump pillow from 5.4.1 to 6.2.2 #4

Closed dependabot[bot] closed 3 years ago

dependabot[bot] commented 4 years ago

Bumps pillow from 5.4.1 to 6.2.2.

Release notes

Sourced from pillow's releases.

6.2.2

https://pillow.readthedocs.io/en/stable/releasenotes/6.2.2.html

6.2.1

https://pillow.readthedocs.io/en/stable/releasenotes/6.2.1.html

6.2.0

https://pillow.readthedocs.io/en/stable/releasenotes/6.2.0.html

6.1.0

https://pillow.readthedocs.io/en/stable/releasenotes/6.1.0.html

6.0.0

No release notes provided.

Changelog

Sourced from pillow's changelog.

6.2.2 (2020-01-02)

  • This is the last Pillow release to support Python 2.7 #3642

  • Overflow checks for realloc for tiff decoding. CVE-2020-5310 [wiredfool, radarhere]

  • Catch SGI buffer overrun. CVE-2020-5311 [radarhere]

  • Catch PCX P mode buffer overrun. CVE-2020-5312 [radarhere]

  • Catch FLI buffer overrun. CVE-2020-5313 [radarhere]

  • Raise an error for an invalid number of bands in FPX image. CVE-2019-19911 [wiredfool, radarhere]

6.2.1 (2019-10-21)

  • Add support for Python 3.8 #4141 [hugovk]

6.2.0 (2019-10-01)

  • Catch buffer overruns #4104 [radarhere]

  • Initialize rows_per_strip when RowsPerStrip tag is missing #4034 [cgohlke, radarhere]

  • Raise error if TIFF dimension is a string #4103 [radarhere]

  • Added decompression bomb checks #4102 [radarhere]

  • Fix ImageGrab.grab DPI scaling on Windows 10 version 1607+ #4000 [nulano, radarhere]

  • Corrected negative seeks #4101 [radarhere]

  • Added argument to capture all screens on Windows #3950 [nulano, radarhere]

Commits
  • a45c858 Release notes for 6.2.2
  • 83efad4 6.2.2 version bump
  • 4820f79 Added release notes [ci skip]
  • 4e2def2 Overflow checks for realloc for tiff decoding
  • a79b65c Catch SGI buffer overruns
  • 93b22b8 Catch PCX P mode buffer overrun
  • a09acd0 Catch FLI buffer overrun
  • 774e53b Raise an error for an invalid number of bands in FPX image
  • 8892aec Added security notes [ci skip]
  • 46c35f0 Updated copyright year
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/robail-yasrab/RootNav-2.0/network/alerts).
dependabot[bot] commented 3 years ago

Superseded by #5.