Skip to content

Bump Pillow to >=12.2.0 to fix GHSA-pwv6-vv43-88gr (gated for Python …#4575

Merged
LiliDeng merged 3 commits into
mainfrom
fix/pillow-ghsa-pwv6-vv43-88gr
Jul 3, 2026
Merged

Bump Pillow to >=12.2.0 to fix GHSA-pwv6-vv43-88gr (gated for Python …#4575
LiliDeng merged 3 commits into
mainfrom
fix/pillow-ghsa-pwv6-vv43-88gr

Conversation

@LiliDeng

@LiliDeng LiliDeng commented Jul 2, 2026

Copy link
Copy Markdown
Collaborator

…>=3.10)

Description

Related Issue

Type of Change

  • Bug fix
  • New feature
  • Breaking change
  • Refactoring
  • Documentation update

Checklist

  • Description is filled in above
  • No credentials, secrets, or internal details are included
  • Peer review requested (if not, add required peer reviewers after raising PR)
  • Tests executed and results posted below

Test Validation

Key Test Cases:

Impacted LISA Features:

Tested Azure Marketplace Images:

Test Results

Image VM Size Result
PASSED / FAILED / SKIPPED

Copilot AI review requested due to automatic review settings July 2, 2026 09:37
@LiliDeng LiliDeng requested a review from johnsongeorge-w as a code owner July 2, 2026 09:37
Copilot AI reviewed Jul 2, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the azure optional dependency set to address GHSA-pwv6-vv43-88gr by moving Pillow to a non-vulnerable version range.

Changes:

  • Replace the previous Pillow <= 12.1.1 cap with a new set of environment-marked Pillow requirements intended to ensure a fixed version is used.
  • Introduce Python-version gating for Pillow within the azure extras.

Comment thread pyproject.toml
@LiliDeng
Potential fix for pull request finding
8e61895 
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Copilot AI review requested due to automatic review settings July 2, 2026 11:13
Copilot AI reviewed Jul 2, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.

Comment thread pyproject.toml Outdated
@LiliDeng

LiliDeng commented Jul 2, 2026

Copy link
Copy Markdown
Collaborator Author

@copilot revert 8e61895

Copilot AI commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

@copilot revert 8e61895

Done in b190152 — commit 8e61895 has been reverted for /home/runner/work/lisa/lisa/pyproject.toml.

@LiliDeng LiliDeng merged commit f869a27 into main Jul 3, 2026
58 checks passed
@LiliDeng LiliDeng deleted the fix/pillow-ghsa-pwv6-vv43-88gr branch July 3, 2026 07:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments
@johnsongeorge-w johnsongeorge-w johnsongeorge-w approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@LiliDeng @johnsongeorge-w