From 3f84730c6d8b2cd2df4565442b9b90c32a96438f Mon Sep 17 00:00:00 2001 From: Mend Renovate Date: Sun, 26 Jul 2026 20:34:20 +0000 Subject: [PATCH 1/2] fix(deps, pyamber): update dependency pillow to v12.3.0 [security] --- amber/operator-requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/amber/operator-requirements.txt b/amber/operator-requirements.txt index 9759f624c4d..bf3e0ff96cf 100644 --- a/amber/operator-requirements.txt +++ b/amber/operator-requirements.txt @@ -18,7 +18,7 @@ wordcloud==1.9.6 plotly==5.24.1 praw==7.6.1 -pillow==12.2.0 +pillow==12.3.0 # Pin torch to the CPU wheel on Linux x86_64 to avoid the NVIDIA CUDA deps. --extra-index-url https://download.pytorch.org/whl/cpu From 103084ce7f43446c0592028f1d6465f4b38a5ba7 Mon Sep 17 00:00:00 2001 From: Xinyuan Lin Date: Mon, 27 Jul 2026 15:13:36 -0700 Subject: [PATCH 2/2] chore(pyamber): sync pillow to 12.3.0 in LICENSE-binary-python The pyamber binary-license check blocks CI when a direct dependency's claimed version drifts from the bundled one. Co-Authored-By: Claude Fable 5 --- amber/LICENSE-binary-python | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/amber/LICENSE-binary-python b/amber/LICENSE-binary-python index 0b59956f80f..f950686bd37 100644 --- a/amber/LICENSE-binary-python +++ b/amber/LICENSE-binary-python @@ -363,7 +363,7 @@ Dependencies under the MIT-CMU License -------------------------------------------------------------------------------- Python packages: - - pillow==12.2.0 + - pillow==12.3.0 Individual jars may contain their own META-INF/LICENSE and META-INF/NOTICE files that apply to their specific contents; those files continue to govern