From c9594a4a5fc2b052f3cef07afec28f982d7dbdb6 Mon Sep 17 00:00:00 2001 From: "James R. Barlow" Date: Fri, 19 Mar 2021 00:31:27 -0700 Subject: [PATCH] Update pinned versions to avoid Pillow vulnerabilties See https://github.com/python-pillow/Pillow/blob/master/CHANGES.rst --- requirements/main.txt | 12 ++++++------ requirements/test.txt | 6 +++--- requirements/watcher.txt | 2 +- 3 files changed, 10 insertions(+), 10 deletions(-) diff --git a/requirements/main.txt b/requirements/main.txt index fde1197e..63ca302a 100644 --- a/requirements/main.txt +++ b/requirements/main.txt @@ -1,12 +1,12 @@ # requirements.txt can be used to replicate the developer's build environment # setup.py lists a separate set of requirements that are looser to simplify # installation -cffi == 1.14.3 -coloredlogs == 14.0 # technically optional +cffi == 1.14.5 +coloredlogs == 15.0 # technically optional img2pdf == 0.4.0 pdfminer.six == 20201018 -pikepdf == 2.0.0 +pikepdf == 2.9.0 pluggy == 0.13.1 -Pillow == 8.0.1 -reportlab == 3.5.55 -tqdm == 4.51.0 +Pillow == 8.1.2 +reportlab == 3.5.65 +tqdm == 4.59.0 diff --git a/requirements/test.txt b/requirements/test.txt index 8bdf1fe6..fea870d7 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -1,7 +1,7 @@ -pytest >= 5.0.0 +pytest >= 6.0.0 pytest-helpers-namespace >= 2019.1.8 -pytest-xdist >= 1.31.0 -pytest-cov >= 2.10.0 +pytest-xdist >= 2.2.0 +pytest-cov >= 2.11.1 python-xmp-toolkit == 2.0.1 # requires apt-get install libexempi3 # or brew install exempi #PyMuPDF == 1.13.4 # optional diff --git a/requirements/watcher.txt b/requirements/watcher.txt index cdbc5325..660d7af4 100644 --- a/requirements/watcher.txt +++ b/requirements/watcher.txt @@ -1 +1 @@ -watchdog == 0.10.2 +watchdog == 1.0.2