You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Attention: 2 lines in your changes are missing coverage. Please review.
Comparison is base (6f00efc) 79.71% compared to head (a312b6a) 79.31%.
Report is 2 commits behind head on master.
❗ Current head a312b6a differs from pull request most recent head c67b9b1. Consider uploading reports for the commit c67b9b1 to get more accurate results
The reason for the failed CI runs is that Pillow >=10.0 only supports Python >= 3.8 but these CIs use Python 3.7.
What to do here? Keep using a vulnerable and unmaintained version of Pillow, clearly seems like not a solution.
The reason for the failed CI runs is that Pillow >=10.0 only supports Python >= 3.8 but these CIs use Python 3.7. What to do here? Keep using a vulnerable and unmaintained version of Pillow, clearly seems like not a solution.
True, python 3.7 has reached it's EOL, so it's time to drop it and support 3.11
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Pillow < 10.0.1 is affected by CVE-2023-4863, see https://pillow.readthedocs.io/en/stable/releasenotes/10.0.1.html .
ADDITIONAL INFORMATION