From 08f49cf47325eafa9c1b93448c2b6925ec66167b Mon Sep 17 00:00:00 2001 From: David del Real Sifuentes Date: Thu, 20 Aug 2026 00:03:35 +0000 Subject: [PATCH 1/2] chore(deps): bump pillow to 12.3.0 to resolve dependabot alerts Updates pillow from 12.2.0 to 12.3.0 across multiple requirements.txt files to address security vulnerabilities flagged by dependabot. --- appengine/flexible/scipy/requirements.txt | 2 +- dataflow/gpu-examples/tensorflow-landsat-prime/requirements.txt | 2 +- dataflow/gpu-examples/tensorflow-landsat/requirements.txt | 2 +- genai/bounding_box/requirements.txt | 2 +- genai/code_execution/requirements.txt | 2 +- genai/image_generation/requirements.txt | 2 +- genai/tools/requirements.txt | 2 +- generative_ai/embeddings/requirements.txt | 2 +- generative_ai/evaluation/requirements.txt | 2 +- generative_ai/extensions/requirements.txt | 2 +- generative_ai/image_generation/requirements.txt | 2 +- generative_ai/model_garden/requirements.txt | 2 +- generative_ai/model_tuning/requirements.txt | 2 +- generative_ai/prompts/requirements.txt | 2 +- generative_ai/reasoning_engine/requirements.txt | 2 +- people-and-planet-ai/image-classification/requirements.txt | 2 +- vision/snippets/crop_hints/requirements.txt | 2 +- vision/snippets/document_text/requirements.txt | 2 +- vision/snippets/face_detection/requirements.txt | 2 +- 19 files changed, 19 insertions(+), 19 deletions(-) diff --git a/appengine/flexible/scipy/requirements.txt b/appengine/flexible/scipy/requirements.txt index cd8f9c95b27..c10a69f6476 100644 --- a/appengine/flexible/scipy/requirements.txt +++ b/appengine/flexible/scipy/requirements.txt @@ -5,6 +5,6 @@ imageio==2.36.1; python_version >= '3.9' numpy==2.2.4; python_version > '3.9' numpy==1.26.4; python_version == '3.9' numpy==1.24.4; python_version == '3.8' -pillow==12.2.0; python_version >= '3.10' +pillow==12.3.0; python_version >= '3.10' scipy==1.10.1; python_version <= '3.9' scipy==1.14.1; python_version > '3.9' diff --git a/dataflow/gpu-examples/tensorflow-landsat-prime/requirements.txt b/dataflow/gpu-examples/tensorflow-landsat-prime/requirements.txt index 8020832d1f5..0c0a496e3ed 100644 --- a/dataflow/gpu-examples/tensorflow-landsat-prime/requirements.txt +++ b/dataflow/gpu-examples/tensorflow-landsat-prime/requirements.txt @@ -1,4 +1,4 @@ -pillow==12.2.0; python_version >= "3.10" +pillow==12.3.0; python_version >= "3.10" apache-beam[gcp]==2.74.0 rasterio==1.3.10 tensorflow==2.21.0 # Check TensorFlow/CUDA compatibility with Dockerfile: https://www.tensorflow.org/install/source#gpu diff --git a/dataflow/gpu-examples/tensorflow-landsat/requirements.txt b/dataflow/gpu-examples/tensorflow-landsat/requirements.txt index 8020832d1f5..0c0a496e3ed 100644 --- a/dataflow/gpu-examples/tensorflow-landsat/requirements.txt +++ b/dataflow/gpu-examples/tensorflow-landsat/requirements.txt @@ -1,4 +1,4 @@ -pillow==12.2.0; python_version >= "3.10" +pillow==12.3.0; python_version >= "3.10" apache-beam[gcp]==2.74.0 rasterio==1.3.10 tensorflow==2.21.0 # Check TensorFlow/CUDA compatibility with Dockerfile: https://www.tensorflow.org/install/source#gpu diff --git a/genai/bounding_box/requirements.txt b/genai/bounding_box/requirements.txt index cc8e5d32af3..75a39f7e582 100644 --- a/genai/bounding_box/requirements.txt +++ b/genai/bounding_box/requirements.txt @@ -1,2 +1,2 @@ google-genai==1.42.0 -pillow==12.2.0; python_version >= "3.10" +pillow==12.3.0; python_version >= "3.10" diff --git a/genai/code_execution/requirements.txt b/genai/code_execution/requirements.txt index 445a1770611..40e835cf14b 100644 --- a/genai/code_execution/requirements.txt +++ b/genai/code_execution/requirements.txt @@ -1,2 +1,2 @@ google-genai==1.60.0 -pillow==12.2.0; python_version >= "3.10" +pillow==12.3.0; python_version >= "3.10" diff --git a/genai/image_generation/requirements.txt b/genai/image_generation/requirements.txt index cc8e5d32af3..75a39f7e582 100644 --- a/genai/image_generation/requirements.txt +++ b/genai/image_generation/requirements.txt @@ -1,2 +1,2 @@ google-genai==1.42.0 -pillow==12.2.0; python_version >= "3.10" +pillow==12.3.0; python_version >= "3.10" diff --git a/genai/tools/requirements.txt b/genai/tools/requirements.txt index 43d18271a18..b82955a5518 100644 --- a/genai/tools/requirements.txt +++ b/genai/tools/requirements.txt @@ -1,3 +1,3 @@ google-genai==1.45.0 # PIl is required for tools_code_execution_with_txt_img.py -pillow==12.2.0; python_version >= "3.10" +pillow==12.3.0; python_version >= "3.10" diff --git a/generative_ai/embeddings/requirements.txt b/generative_ai/embeddings/requirements.txt index 25c94e47d55..be325f58d2b 100644 --- a/generative_ai/embeddings/requirements.txt +++ b/generative_ai/embeddings/requirements.txt @@ -1,7 +1,7 @@ pandas==2.2.3; python_version == '3.7' pandas==2.2.3; python_version == '3.8' pandas==2.2.3; python_version > '3.8' -pillow==12.2.0 +pillow==12.3.0 google-cloud-aiplatform[full]==1.157.0 sentencepiece==0.2.1 google-auth==2.29.0 diff --git a/generative_ai/evaluation/requirements.txt b/generative_ai/evaluation/requirements.txt index 18ff8773d69..7ac0ee30a69 100644 --- a/generative_ai/evaluation/requirements.txt +++ b/generative_ai/evaluation/requirements.txt @@ -1,7 +1,7 @@ pandas==2.2.3; python_version == '3.7' pandas==2.2.3; python_version == '3.8' pandas==2.2.3; python_version > '3.8' -pillow==12.2.0 +pillow==12.3.0 google-cloud-aiplatform[full]==1.157.0 sentencepiece==0.2.1 google-auth==2.38.0 diff --git a/generative_ai/extensions/requirements.txt b/generative_ai/extensions/requirements.txt index 18ff8773d69..7ac0ee30a69 100644 --- a/generative_ai/extensions/requirements.txt +++ b/generative_ai/extensions/requirements.txt @@ -1,7 +1,7 @@ pandas==2.2.3; python_version == '3.7' pandas==2.2.3; python_version == '3.8' pandas==2.2.3; python_version > '3.8' -pillow==12.2.0 +pillow==12.3.0 google-cloud-aiplatform[full]==1.157.0 sentencepiece==0.2.1 google-auth==2.38.0 diff --git a/generative_ai/image_generation/requirements.txt b/generative_ai/image_generation/requirements.txt index 18ff8773d69..7ac0ee30a69 100644 --- a/generative_ai/image_generation/requirements.txt +++ b/generative_ai/image_generation/requirements.txt @@ -1,7 +1,7 @@ pandas==2.2.3; python_version == '3.7' pandas==2.2.3; python_version == '3.8' pandas==2.2.3; python_version > '3.8' -pillow==12.2.0 +pillow==12.3.0 google-cloud-aiplatform[full]==1.157.0 sentencepiece==0.2.1 google-auth==2.38.0 diff --git a/generative_ai/model_garden/requirements.txt b/generative_ai/model_garden/requirements.txt index 18ff8773d69..7ac0ee30a69 100644 --- a/generative_ai/model_garden/requirements.txt +++ b/generative_ai/model_garden/requirements.txt @@ -1,7 +1,7 @@ pandas==2.2.3; python_version == '3.7' pandas==2.2.3; python_version == '3.8' pandas==2.2.3; python_version > '3.8' -pillow==12.2.0 +pillow==12.3.0 google-cloud-aiplatform[full]==1.157.0 sentencepiece==0.2.1 google-auth==2.38.0 diff --git a/generative_ai/model_tuning/requirements.txt b/generative_ai/model_tuning/requirements.txt index 18ff8773d69..7ac0ee30a69 100644 --- a/generative_ai/model_tuning/requirements.txt +++ b/generative_ai/model_tuning/requirements.txt @@ -1,7 +1,7 @@ pandas==2.2.3; python_version == '3.7' pandas==2.2.3; python_version == '3.8' pandas==2.2.3; python_version > '3.8' -pillow==12.2.0 +pillow==12.3.0 google-cloud-aiplatform[full]==1.157.0 sentencepiece==0.2.1 google-auth==2.38.0 diff --git a/generative_ai/prompts/requirements.txt b/generative_ai/prompts/requirements.txt index 18ff8773d69..7ac0ee30a69 100644 --- a/generative_ai/prompts/requirements.txt +++ b/generative_ai/prompts/requirements.txt @@ -1,7 +1,7 @@ pandas==2.2.3; python_version == '3.7' pandas==2.2.3; python_version == '3.8' pandas==2.2.3; python_version > '3.8' -pillow==12.2.0 +pillow==12.3.0 google-cloud-aiplatform[full]==1.157.0 sentencepiece==0.2.1 google-auth==2.38.0 diff --git a/generative_ai/reasoning_engine/requirements.txt b/generative_ai/reasoning_engine/requirements.txt index 18ff8773d69..7ac0ee30a69 100644 --- a/generative_ai/reasoning_engine/requirements.txt +++ b/generative_ai/reasoning_engine/requirements.txt @@ -1,7 +1,7 @@ pandas==2.2.3; python_version == '3.7' pandas==2.2.3; python_version == '3.8' pandas==2.2.3; python_version > '3.8' -pillow==12.2.0 +pillow==12.3.0 google-cloud-aiplatform[full]==1.157.0 sentencepiece==0.2.1 google-auth==2.38.0 diff --git a/people-and-planet-ai/image-classification/requirements.txt b/people-and-planet-ai/image-classification/requirements.txt index 4594256679e..ccfe52b49a4 100644 --- a/people-and-planet-ai/image-classification/requirements.txt +++ b/people-and-planet-ai/image-classification/requirements.txt @@ -1,3 +1,3 @@ -pillow==12.2.0 +pillow==12.3.0 apache-beam[gcp]==2.55.1 google-cloud-aiplatform==1.157.0 diff --git a/vision/snippets/crop_hints/requirements.txt b/vision/snippets/crop_hints/requirements.txt index defcaa2ab63..21a3e83ee97 100644 --- a/vision/snippets/crop_hints/requirements.txt +++ b/vision/snippets/crop_hints/requirements.txt @@ -1,2 +1,2 @@ google-cloud-vision==3.8.1 -pillow==12.2.0; python_version >= "3.10" +pillow==12.3.0; python_version >= "3.10" diff --git a/vision/snippets/document_text/requirements.txt b/vision/snippets/document_text/requirements.txt index defcaa2ab63..21a3e83ee97 100644 --- a/vision/snippets/document_text/requirements.txt +++ b/vision/snippets/document_text/requirements.txt @@ -1,2 +1,2 @@ google-cloud-vision==3.8.1 -pillow==12.2.0; python_version >= "3.10" +pillow==12.3.0; python_version >= "3.10" diff --git a/vision/snippets/face_detection/requirements.txt b/vision/snippets/face_detection/requirements.txt index defcaa2ab63..21a3e83ee97 100644 --- a/vision/snippets/face_detection/requirements.txt +++ b/vision/snippets/face_detection/requirements.txt @@ -1,2 +1,2 @@ google-cloud-vision==3.8.1 -pillow==12.2.0; python_version >= "3.10" +pillow==12.3.0; python_version >= "3.10" From 1b8ef88631bf17c414aa6f7377aeb2d3a6b97d02 Mon Sep 17 00:00:00 2001 From: David del Real Sifuentes Date: Thu, 20 Aug 2026 00:19:39 +0000 Subject: [PATCH 2/2] Fixed wrong syntax on pinned version on requriements files. --- composer/2022_airflow_summit/requirements.txt | 4 ++-- .../data-orchestration-with-composer/requirements.txt | 2 +- composer/cicd_sample/requirements.txt | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/composer/2022_airflow_summit/requirements.txt b/composer/2022_airflow_summit/requirements.txt index 5c87d9ea9b2..5b304e055a5 100644 --- a/composer/2022_airflow_summit/requirements.txt +++ b/composer/2022_airflow_summit/requirements.txt @@ -1,4 +1,4 @@ # be sure to update the constraints file to match # see https://airflow.apache.org/docs/apache-airflow/stable/installation/installing-from-pypi.html#constraints-files -apache-airflow==3.2.1; python_version >= 3.10 -apache-airflow-providers-google==21.3.0; python_version >= 3.10 +apache-airflow==3.2.1; python_version >= "3.10" +apache-airflow-providers-google==21.3.0; python_version >= "3.10" diff --git a/composer/blog/gcp-tech-blog/data-orchestration-with-composer/requirements.txt b/composer/blog/gcp-tech-blog/data-orchestration-with-composer/requirements.txt index feb5dd63b41..bf1282437f0 100644 --- a/composer/blog/gcp-tech-blog/data-orchestration-with-composer/requirements.txt +++ b/composer/blog/gcp-tech-blog/data-orchestration-with-composer/requirements.txt @@ -1,6 +1,6 @@ # be sure to update the constraints file to match # see https://airflow.apache.org/docs/apache-airflow/stable/installation/installing-from-pypi.html#constraints-files -apache-airflow[google]==3.2.1; python_version >= 3.10 +apache-airflow[google]==3.2.1; python_version >= "3.10" apache-airflow-providers-apache-beam==5.1.1 apache-airflow-providers-slack==7.3.2 apache-airflow-providers-http==4.4.2 diff --git a/composer/cicd_sample/requirements.txt b/composer/cicd_sample/requirements.txt index 3fdb3d0d76d..5217f867c57 100644 --- a/composer/cicd_sample/requirements.txt +++ b/composer/cicd_sample/requirements.txt @@ -1,3 +1,3 @@ # be sure to update the constraints file to match # see https://airflow.apache.org/docs/apache-airflow/stable/installation/installing-from-pypi.html#constraints-files -apache-airflow==3.2.1; python_version >= 3.10 +apache-airflow==3.2.1; python_version >= "3.10"