Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bump pillow version, drop Python 3.7 support, add 3.11 support #213

Merged
merged 2 commits into from
Nov 27, 2023

Conversation

aerispaha
Copy link
Member

@aerispaha aerispaha commented Nov 22, 2023

This PR bumps the pillow version to resolve a security issue, and updates references to its api were necessary. Because Pillow (and the Python Foundation) no longer supports Python 3.7, this PR also proposes to drop support for 3.7 and add test coverage for Python 3.11.

Closes #212

@aerispaha aerispaha changed the title bump pillow version and update reference to its api were necessary bump pillow version, drop Python 3.7 support, add 3.11 support Nov 22, 2023
@aerispaha
Copy link
Member Author

Hey @bemcdonnell! Any qualms with this little PR? I know we want to drop Pillow in the future, but for now, this change handles a security issue in older Pillow versions.

@bemcdonnell
Copy link
Member

@aerispaha I don't mind at all. Gives us something to rest our heads on... we can ponder the deprecation later. For PySWMM we are finding ways to drop dependencies as often as possible.

@aerispaha aerispaha merged commit b09a001 into master Nov 27, 2023
13 checks passed
@aerispaha aerispaha deleted the fix/212 branch November 27, 2023 23:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

bump Pillow version to address Denial of Service vulnerability
2 participants