Repository navigation

Commit 546fcfd

authored

security : bump pillow to 13.0.0 and storybook to 10.6.2 (#444)

* mtmd : bump pillow to 13.0.0 (GHSA-8g5g-8vmr-9782) pillow~=12.3.0 resolves to 12.3.0, which is in the affected range (<=12.3.0). 13.0.0 is the patched version. Assisted-by: Claude Opus 5.5 * ui : bump storybook to 10.6.3 (GHSA-f2ph-cmg5-wxc8) storybook and @storybook/addon-vitest 10.5.6 are in the affected range (>=10.0.0 <10.6.2). Move the 10.5.6 storybook packages to 10.6.3. Assisted-by: Claude Opus 5.5 * ui : pin storybook to 10.6.2 (GHSA-f2ph-cmg5-wxc8, GHSA-px85-f4q5-jh77) 10.6.2 is the first patched version for both advisories. Assisted-by: Claude Opus 5.5

1 parent 17810f3 commit 546fcfdCopy full SHA for 546fcfd

3 files changed

tools
- mtmd
  - requirements.txt
- ui
  - package-lock.json
  - package.json

`‎tools/mtmd/requirements.txt‎`

-Original file line number
+Diff line change
@@ @@ -1,6 +1,6 @@ @@
 -r ../../requirements/requirements-convert_legacy_llama.txt
 --extra-index-url https://download.pytorch.org/whl/cpu
 -pillow~=12.3.0
 +pillow~=13.0.0
 torch==2.11.0 # check_requirements: ignore "=="
 torchvision==0.26.0; platform_machine != "s390x" # check_requirements: ignore "=="

Comments

(0)