Bump pillow from 5.2.0 to 8.3.2 in /pneumoRL#8
Bumps [pillow](https://github.com/python-pillow/Pillow) from 5.2.0 to 8.3.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/python-pillow/Pillow/releases">pillow's releases</a>.</em></p> <blockquote> <h2>8.3.2</h2> <p><a href="https://pillow.readthedocs.io/en/stable/releasenotes/8.3.2.html">https://pillow.readthedocs.io/en/stable/releasenotes/8.3.2.html</a></p> <h2>Security</h2> <ul> <li> <p>CVE-2021-23437 Raise ValueError if color specifier is too long [hugovk, radarhere]</p> </li> <li> <p>Fix 6-byte OOB read in FliDecode [wiredfool]</p> </li> </ul> <h2>Python 3.10 wheels</h2> <ul> <li>Add support for Python 3.10 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5569">#5569</a>, <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5570">#5570</a> [hugovk, radarhere]</li> </ul> <h2>Fixed regressions</h2> <ul> <li> <p>Ensure TIFF <code>RowsPerStrip</code> is multiple of 8 for JPEG compression <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5588">#5588</a> [kmilos, radarhere]</p> </li> <li> <p>Updates for <code>ImagePalette</code> channel order <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5599">#5599</a> [radarhere]</p> </li> <li> <p>Hide FriBiDi shim symbols to avoid conflict with real FriBiDi library <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5651">#5651</a> [nulano]</p> </li> </ul> <h2>8.3.1</h2> <p><a href="https://pillow.readthedocs.io/en/stable/releasenotes/8.3.1.html">https://pillow.readthedocs.io/en/stable/releasenotes/8.3.1.html</a></p> <h2>Changes</h2> <ul> <li>Catch OSError when checking if fp is sys.stdout <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5585">#5585</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Handle removing orientation from alternate types of EXIF data <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5584">#5584</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Make Image.<strong>array</strong> take optional dtype argument <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5572">#5572</a> [<a href="https://github.com/t-vi"><code>@t-vi</code></a>]</li> </ul> <h2>8.3.0</h2> <p><a href="https://pillow.readthedocs.io/en/stable/releasenotes/8.3.0.html">https://pillow.readthedocs.io/en/stable/releasenotes/8.3.0.html</a></p> <h2>Changes</h2> <ul> <li>Use snprintf instead of sprintf <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5567">#5567</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Limit TIFF strip size when saving with LibTIFF <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5514">#5514</a> [<a href="https://github.com/kmilos"><code>@kmilos</code></a>]</li> <li>Allow ICNS save on all operating systems <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/4526">#4526</a> [<a href="https://github.com/newpanjing"><code>@newpanjing</code></a>]</li> <li>De-zigzag JPEG's DQT when loading; deprecate convert_dict_qtables <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/4989">#4989</a> [<a href="https://github.com/gofr"><code>@gofr</code></a>]</li> <li>Do not use background or transparency index for new color <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5564">#5564</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Simplified code <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5315">#5315</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> <li>Replaced xml.etree.ElementTree <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5565">#5565</a> [<a href="https://github.com/radarhere"><code>@radarhere</code></a>]</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/python-pillow/Pillow/blob/master/CHANGES.rst">pillow's changelog</a>.</em></p> <blockquote> <h2>8.3.2 (2021-09-02)</h2> <ul> <li> <p>CVE-2021-23437 Raise ValueError if color specifier is too long [hugovk, radarhere]</p> </li> <li> <p>Fix 6-byte OOB read in FliDecode [wiredfool]</p> </li> <li> <p>Add support for Python 3.10 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5569">#5569</a>, <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5570">#5570</a> [hugovk, radarhere]</p> </li> <li> <p>Ensure TIFF <code>RowsPerStrip</code> is multiple of 8 for JPEG compression <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5588">#5588</a> [kmilos, radarhere]</p> </li> <li> <p>Updates for <code>ImagePalette</code> channel order <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5599">#5599</a> [radarhere]</p> </li> <li> <p>Hide FriBiDi shim symbols to avoid conflict with real FriBiDi library <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5651">#5651</a> [nulano]</p> </li> </ul> <h2>8.3.1 (2021-07-06)</h2> <ul> <li> <p>Catch OSError when checking if fp is sys.stdout <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5585">#5585</a> [radarhere]</p> </li> <li> <p>Handle removing orientation from alternate types of EXIF data <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5584">#5584</a> [radarhere]</p> </li> <li> <p>Make Image.<strong>array</strong> take optional dtype argument <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5572">#5572</a> [t-vi, radarhere]</p> </li> </ul> <h2>8.3.0 (2021-07-01)</h2> <ul> <li> <p>Use snprintf instead of sprintf. CVE-2021-34552 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5567">#5567</a> [radarhere]</p> </li> <li> <p>Limit TIFF strip size when saving with LibTIFF <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5514">#5514</a> [kmilos]</p> </li> <li> <p>Allow ICNS save on all operating systems <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/4526">#4526</a> [baletu, radarhere, newpanjing, hugovk]</p> </li> <li> <p>De-zigzag JPEG's DQT when loading; deprecate convert_dict_qtables <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/4989">#4989</a> [gofr, radarhere]</p> </li> <li> <p>Replaced xml.etree.ElementTree <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5565">#5565</a> [radarhere]</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python-pillow/Pillow/commit/8013f130a5077b238a4346b73e149432b180a8ea"><code>8013f13</code></a> 8.3.2 version bump</li> <li><a href="https://github.com/python-pillow/Pillow/commit/23c7ca82f09df6ba1047d2d96714eb825f0d7948"><code>23c7ca8</code></a> Update CHANGES.rst</li> <li><a href="https://github.com/python-pillow/Pillow/commit/8450366be331762ae327036e3c6658c517b05638"><code>8450366</code></a> Update release notes</li> <li><a href="https://github.com/python-pillow/Pillow/commit/a0afe89990f5ba40a019afc2f22e1b656f8cfd03"><code>a0afe89</code></a> Update test case</li> <li><a href="https://github.com/python-pillow/Pillow/commit/9e08eb8f78fdfd2f476e1b20b7cf38683754866b"><code>9e08eb8</code></a> Raise ValueError if color specifier is too long</li> <li><a href="https://github.com/python-pillow/Pillow/commit/bd5cf7db87c6abf7c3510a50170851af5538249f"><code>bd5cf7d</code></a> FLI tests for Oss-fuzz crash.</li> <li><a href="https://github.com/python-pillow/Pillow/commit/94a0cf1b14f09626c7403af83fa9fef0dfc9bb47"><code>94a0cf1</code></a> Fix 6-byte OOB read in FliDecode</li> <li><a href="https://github.com/python-pillow/Pillow/commit/cece64f4be10ab28b12a83a3555af579dad343a5"><code>cece64f</code></a> Add 8.3.2 (2021-09-02) [CI skip]</li> <li><a href="https://github.com/python-pillow/Pillow/commit/e42238637651f191c2fc6e3f4024348c126e0ccc"><code>e422386</code></a> Add release notes for Pillow 8.3.2</li> <li><a href="https://github.com/python-pillow/Pillow/commit/08dcbb873217874eee0830fc5aaa1f231c5af4fa"><code>08dcbb8</code></a> Pillow 8.3.2 supports Python 3.10 [ci skip]</li> <li>Additional commits viewable in <a href="https://github.com/python-pillow/Pillow/compare/5.2.0...8.3.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/richielo/Medical_Localization_RL/network/alerts). </details>
This issue appears to be discussing a feature request or bug report related to the repository. Based on the content, it seems to be resolved. The issue was opened by dependabot[bot] and has received 1 comments.