This is an automated email from the ASF dual-hosted git repository.
Yicong-Huang pushed a commit to branch release/v1.2
in repository https://gitbox.apache.org/repos/asf/texera.git
The following commit(s) were added to refs/heads/release/v1.2 by this push:
new 2bcb9aa7a0 fix(deps, pyamber, v1.2): update dependency pillow to
v12.3.0 [security] (#6957)
2bcb9aa7a0 is described below
commit 2bcb9aa7a0280abfd39daa987e16bca0279191a7
Author: Yicong Huang <[email protected]>
AuthorDate: Mon Jul 27 20:50:50 2026 -0700
fix(deps, pyamber, v1.2): update dependency pillow to v12.3.0 [security]
(#6957)
### What changes were proposed in this PR?
Automated backport of #6909 to `release/v1.2`.
Source: 1b9a8c6ee84f96e9c70712171f99b2a209d8709b ยท [automation
run](https://github.com/apache/texera/actions/runs/30315421786)
### Any related issues, documentation, discussions?
Backport of #6909, which fixes multiple Pillow security advisories:
CVE-2026-54058, CVE-2026-54059, CVE-2026-54060, CVE-2026-55379,
CVE-2026-55798, CVE-2026-59198, CVE-2026-59199, CVE-2026-59205 (see
#6909 for full details).
### How was this PR tested?
Release-branch CI runs on this branch once the conflicts are resolved
and this PR is marked ready for review.
### Was this PR authored or co-authored using generative AI tooling?
No.
---------
Signed-off-by: Yicong Huang <[email protected]>
Co-authored-by: Mend Renovate <[email protected]>
Co-authored-by: Xinyuan Lin <[email protected]>
Co-authored-by: Claude Fable 5 <[email protected]>
---
amber/LICENSE-binary-python | 2 +-
amber/operator-requirements.txt | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/amber/LICENSE-binary-python b/amber/LICENSE-binary-python
index 0751e4f76c..3eca875a35 100644
--- a/amber/LICENSE-binary-python
+++ b/amber/LICENSE-binary-python
@@ -372,7 +372,7 @@ Dependencies under the MIT-CMU License
--------------------------------------------------------------------------------
Python packages:
- - pillow==12.2.0
+ - pillow==12.3.0
Individual jars may contain their own META-INF/LICENSE and META-INF/NOTICE
files that apply to their specific contents; those files continue to govern
diff --git a/amber/operator-requirements.txt b/amber/operator-requirements.txt
index 5caa56921a..de5df43598 100644
--- a/amber/operator-requirements.txt
+++ b/amber/operator-requirements.txt
@@ -18,7 +18,7 @@
wordcloud==1.9.3
plotly==5.24.1
praw==7.6.1
-pillow==12.2.0
+pillow==12.3.0
pybase64==1.3.2
# Pin torch to the CPU wheel on Linux x86_64 to avoid the NVIDIA CUDA deps.
