Skip to content

LCORE-1487: fixed CVE in pillow package#1339

Merged
tisnik merged 1 commit intolightspeed-core:mainfrom
tisnik:lcore-1487-fixed-cve-in-pillow-package
Mar 17, 2026
Merged

LCORE-1487: fixed CVE in pillow package#1339
tisnik merged 1 commit intolightspeed-core:mainfrom
tisnik:lcore-1487-fixed-cve-in-pillow-package

Conversation

@tisnik
Copy link
Copy Markdown
Contributor

@tisnik tisnik commented Mar 17, 2026

Description

LCORE-1487: fixed CVE in pillow package

Type of change

  • Refactor
  • New feature
  • Bug fix
  • CVE fix
  • Optimization
  • Documentation Update
  • Configuration Update
  • Bump-up service version
  • Bump-up dependent library
  • Bump-up library or tool used for development (does not change the final image)
  • CI configuration change
  • Konflux configuration change
  • Unit tests improvement
  • Integration tests improvement
  • End to end tests improvement
  • Benchmarks improvement

Tools used to create PR

  • Assisted-by: N/A
  • Generated by: N/A

Related Tickets & Documents

  • Related Issue #LCORE-1487

Summary by CodeRabbit

  • Chores
    • Updated pillow dependency to version 12.1.1.

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai bot commented Mar 17, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 745c4497-b40f-44e1-a5d7-246af062049e

📥 Commits

Reviewing files that changed from the base of the PR and between 664b44a and 813794c.

📒 Files selected for processing (2)
  • requirements.hashes.wheel.txt
  • requirements.overrides.txt

Walkthrough

Updated the pillow package dependency from version 12.1.0 to 12.1.1 across multiple requirement files, including updated hash values for the wheel package variant.

Changes

Cohort / File(s) Summary
Pillow version update
requirements.hashes.wheel.txt, requirements.overrides.txt
Bumped pillow from 12.1.0 to 12.1.1 with corresponding hash updates in the wheel requirements file.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and specifically summarizes the main change: updating the pillow package to fix a CVE vulnerability, which aligns with the file changes showing pillow version updates.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
📝 Coding Plan
  • Generate coding plan for human review comments

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@tisnik tisnik merged commit b4928e1 into lightspeed-core:main Mar 17, 2026
24 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant