-
fix: update fonttools and werkzeug to address security vulnerabilities (#1214)
发布于
2025-12-03 00:10:11 +00:00 - fix: update fonttools and werkzeug to address security vulnerabilities
- fonttools 4.60.1 → 4.61.0 (fixes CVE-2025-66034, GHSA-768j-98cg-p3fv)
- werkzeug 3.1.3 → 3.1.4 (fixes CVE-2025-66221, GHSA-hgf8-39gv-g3f2)
- pdfminer-six 20251107 remains vulnerable (GHSA-f83h-ghpp-7wcc) - no patch available
- chore: auto-bump version to 1.2.28
Co-authored-by: GitHub Action action@github.com
下载附件