Repository: achimoraites/Python-Image-Converter (language: python)

Issue:
fix CVE-2024-28219

## CVE-2024-28219

Update Pillow to `10.3.0`


Discussion / hints:

Fix patch:
diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml
index bdaab28..a0a0ed8 100644
--- a/.github/workflows/python-publish.yml
+++ b/.github/workflows/python-publish.yml
@@ -25,7 +25,7 @@ jobs:
     - name: Set up Python
       uses: actions/setup-python@v3
       with:
-        python-version: '3.x'
+        python-version: '3.10'
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
diff --git a/raw_image_converter/__init__.py b/raw_image_converter/__init__.py
index f7cf951..564d33c 100644
--- a/raw_image_converter/__init__.py
+++ b/raw_image_converter/__init__.py
@@ -5,4 +5,4 @@
 """
 
 # Version of the package
-__version__ = "1.1.1"
+__version__ = "1.1.2"
diff --git a/requirements.txt b/requirements.txt
index 513eae5..21e9bb4 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,5 +1,5 @@
 imageio==2.16.2
-Pillow==10.0.1
-rawpy==0.17.1
-numpy==1.22.3
+Pillow==10.3.0
+rawpy==0.19.1
+numpy==1.26.4
 colorama==0.4.6
\ No newline at end of file
diff --git a/setup.py b/setup.py
index 1e28516..48c6156 100644
--- a/setup.py
+++ b/setup.py
@@ -10,7 +10,7 @@
 # This call to setup() does all the work
 setup(
     name="raw-image-converter",
-    version="1.1.1",
+    version="1.1.2",
     description="Batch conversions of raw images",
     long_description=README,
     long_description_content_type="text/markdown",
@@ -26,8 +26,8 @@
     ],
     keywords='cli, converter, raw, images',
     packages=["raw_image_converter"],
-    install_requires=["numpy==1.22.3", "rawpy==0.17.1",
-                      "imageio==2.16.2", "Pillow==10.0.1", "colorama==0.4.6"],
+    install_requires=["numpy==1.26.4", "rawpy==0.19.1",
+                      "imageio==2.16.2", "Pillow==10.3.0", "colorama==0.4.6"],
     entry_points={
         "console_scripts": [
             "raw_image_converter=raw_image_converter.__main__:main",


Test patch:
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
new file mode 100644
index 0000000..dfa92ca
--- /dev/null
+++ b/.github/workflows/tests.yml
@@ -0,0 +1,23 @@
+name: Tests
+
+on:
+  pull_request:
+    branches: ["master"]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: "3.10"
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install pytest
+          pip  install -r requirements.txt 
+      - name: Run pytest
+        run: python -m pytest