⬆️(backend) upgrade dependencies to fix Pillow CVE-2026-40192

Run `uv lock --upgrade` to update transitive dependencies and
resolve the vulnerability in Pillow.

Upgrade Pillow from 12.1.1 to 12.2.0 to address the FITS GZIP
decompression bomb issue.
This commit is contained in:
lebaudantoine
2026-04-16 11:41:20 +02:00
committed by aleb_the_flash
parent 451be40bb7
commit b80c46da54
2 changed files with 250 additions and 233 deletions
+1
View File
@@ -33,6 +33,7 @@ and this project adheres to
- 🔒(backend) rely on backend to allow participant update their metadata
- 🐛(summary) fix failure webhook notification #1233
- 🐛(summary) relax whisperX payload format #1233
- ⬆️(backend) upgrade dependencies to fix Pillow CVE-2026-40192
## [1.13.0] - 2026-03-31