linkbook

linkbook copied to clipboard

Bumps [pillow](https://github.com/python-pillow/Pillow) from 6.2.1 to 9.3.0. Release notes Sourced from pillow's releases. 9.3.0 https://pillow.readthedocs.io/en/stable/releasenotes/9.3.0.html Changes Initialize libtiff buffer when saving #6699 [@​radarhere] Limit SAMPLESPERPIXEL to avoid runtime DOS #6700 [@​wiredfool]...

dependabot[bot]

Bumps [protobuf](https://github.com/protocolbuffers/protobuf) from 3.11.2 to 3.18.3. Release notes Sourced from protobuf's releases. Protocol Buffers v3.18.3 C++ Reduce memory consumption of MessageSet parsing This release addresses a Security Advisory for C++...

dependabot[bot]

Bumps [python-jwt](https://github.com/davedoesdev/python-jwt) from 2.0.1 to 3.3.4. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

Bumps [lxml](https://github.com/lxml/lxml) from 4.4.2 to 4.9.1. Changelog Sourced from lxml's changelog. 4.9.1 (2022-07-01) Bugs fixed A crash was resolved when using iterwalk() (or canonicalize()) after parsing certain incorrect input. Note...

dependabot[bot]

Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.25.7 to 1.26.5. Release notes Sourced from urllib3's releases. 1.26.5 :warning: IMPORTANT: urllib3 v2.0 will drop support for Python 2: Read more in the v2.0 Roadmap Fixed...

dependabot[bot]

Bumps [rsa](https://github.com/sybrenstuvel/python-rsa) from 4.0 to 4.7. Changelog Sourced from rsa's changelog. Version 4.7 - released 2021-01-10 Fix #165: CVE-2020-25658 - Bleichenbacher-style timing oracle in PKCS#1 v1.5 decryption code Add padding...

dependabot[bot]

Bumps [pyyaml](https://github.com/yaml/pyyaml) from 5.2 to 5.4. Changelog Sourced from pyyaml's changelog. 5.4 (2021-01-19) yaml/pyyaml#407 -- Build modernization, remove distutils, fix metadata, build wheels, CI to GHA yaml/pyyaml#472 -- Fix for...

dependabot[bot]

Bumps [jinja2](https://github.com/pallets/jinja) from 2.10.3 to 2.11.3. Release notes Sourced from jinja2's releases. 2.11.3 This contains a fix for a speed issue with the urlize filter. urlize is likely to be...

dependabot[bot]

Bumps [httplib2](https://github.com/httplib2/httplib2) from 0.15.0 to 0.19.0. Changelog Sourced from httplib2's changelog. 0.19.0 auth: parse headers using pyparsing instead of regexp httplib2/httplib2#182 auth: WSSE token needs to be string not bytes...

dependabot[bot]