Skip to content

chore(deps): update certifi and pillow to fix versions - #888

Merged
BJacksonONS merged 2 commits into
mainfrom
chore/dependency-security-updates-no-jira
Oct 21, 2026
Merged

BJacksonONS merged 2 commits into
mainfrom
chore/dependency-security-updates-no-jira

Conversation

@BJacksonONS

Copy link
Copy Markdown
Contributor

What is the context of this PR?

Update to security fixed versions of pillow and certifi flagged by osv-scanner.
Update patches for wagtail and django.

How to review

Check megalinter passes.

Review changelog for version updates
django: https://docs.djangoproject.com/en/6.1/releases/6.0.9/
wagtail: https://docs.wagtail.org/en/stable/releases/7.4.4.html
certifi: https://github.com/certifi/python-certifi
pillow: https://pillow.readthedocs.io/en/stable/releasenotes/13.0.0.html

Deployment Safety

Bleed and Sandbox deploy automatically on merge, so PRs should be safe to deploy immediately.

Please select one:

  • Safe to auto-deploy
  • Not safe to auto-deploy

Follow-up Actions

List any follow-up actions (if applicable), like needed documentation updates or additional testing.

@BJacksonONS BJacksonONS self-assigned this Oct 21, 2026
@BJacksonONS
BJacksonONS requested a review from a team as a code owner October 21, 2026 12:08
@BJacksonONS BJacksonONS added component: Dependencies 🕸️ Pull requests that update a dependency file Security labels Oct 21, 2026
@BJacksonONS
BJacksonONS merged commit b2ec6bc into main Oct 21, 2026
22 of 25 checks passed
@BJacksonONS
BJacksonONS deleted the chore/dependency-security-updates-no-jira branch October 21, 2026 14:01

@sanjeevz3009 sanjeevz3009 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! Thank you for this @BJacksonONS

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

component: Dependencies 🕸️ Pull requests that update a dependency file Security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants