Skip to content

google-cloud-documentai-toolbox: Pillow dependency out of date #17510

@rosston

Description

@rosston

Determine this is the right repository

  • I determined this is the correct repository in which to report this bug.

Summary of the issue

Context
Pillow has several security vulnerabilities that are only fixed in major version 12:

But google-cloud-documentai-toolbox's version constraint is Pillow>=10.0.0, <12.0.0, keeping dependent applications from resolving those vulnerabilities.

Expected Behavior:
Pillow >= 12.0.0 is allowed with google-cloud-documentai-toolbox.

Actual Behavior:
Pillow >= 10.0.0 < 12.0.0 is allowed with google-cloud-documentai-toolbox.

API client name and version

No response

Reproduction steps: code

No response

Reproduction steps: supporting files

No response

Reproduction steps: actual results

No response

Reproduction steps: expected results

No response

OS & version + platform

No response

Python environment

No response

Python dependencies

No response

Additional context

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    triage meI really want to be triaged.type: bugError or flaw in code with unintended results or allowing sub-optimal usage patterns.

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions