From d5dc85a20906b0bb8e0ad0912f32fd5ef2154112 Mon Sep 17 00:00:00 2001 From: rv0lt Date: Mon, 6 Nov 2023 11:23:24 +0100 Subject: [PATCH 1/2] Updated Pillow to the latest stable version --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 984882c5f..1b85e6504 100644 --- a/requirements.txt +++ b/requirements.txt @@ -42,7 +42,7 @@ MarkupSafe==2.1.1 marshmallow==3.14.1 marshmallow-sqlalchemy==0.27.0 packaging==21.3 -Pillow==9.3.0 # required by qrcode +Pillow==10.1.0 # required by qrcode pycparser==2.21 PyMySQL==1.0.2 PyNaCl==1.5.0 From 51c42c330b7b858c234ba74a54e98bf5762f1542 Mon Sep 17 00:00:00 2001 From: rv0lt Date: Mon, 6 Nov 2023 14:12:42 +0100 Subject: [PATCH 2/2] sprintlog --- SPRINTLOG.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/SPRINTLOG.md b/SPRINTLOG.md index 72938a2d6..2fdf07d9b 100644 --- a/SPRINTLOG.md +++ b/SPRINTLOG.md @@ -322,3 +322,7 @@ _Nothing merged in CLI during this sprint_ - New endpoint `AddFailedFiles` for adding failed files to database ([#1472](https://github.com/ScilifelabDataCentre/dds_web/pull/1472)) - Change the generate usage command to monthly instead of quartely, and add the command to send a usage report specifying the number of months ([#1476](https://github.com/ScilifelabDataCentre/dds_web/pull/1476)) - New ADR record regarding OKR 2024 ([#1483](https://github.com/ScilifelabDataCentre/dds_web/pull/1483)) + +# 2023-11-6 - 2023-11-17 + +- Updated Pillow package version to address vulnerabities ([#1486](https://github.com/ScilifelabDataCentre/dds_web/pull/1486))