From c4283a269a3c5a42df4ef144ebdbfadab2450afd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 17 Jul 2026 14:34:03 +0000 Subject: [PATCH] chore(deps): Update reportlab requirement in /services/data Updates the requirements on [reportlab](https://www.reportlab.com/) to permit the latest version. --- updated-dependencies: - dependency-name: reportlab dependency-version: 5.0.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- services/data/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/data/requirements.txt b/services/data/requirements.txt index d7aa56e7..c50aff0d 100644 --- a/services/data/requirements.txt +++ b/services/data/requirements.txt @@ -8,7 +8,7 @@ manifold3d>=2.0 # boolean intersection engine for trimesh scipy>=1.11 # trimesh path assembly (section drawings) networkx>=3.0 # trimesh path traversal (section drawings) shapely>=2.0 # trimesh planar paths -reportlab>=4.0 # PDF sheet composition +reportlab>=5.0.0 # PDF sheet composition pillow>=12.3.0 # reportlab's image dep — floor over 8 CVEs in 12.2.x (PYSEC-2026-2253..3453) defusedxml>=0.7 # XXE-safe parser for untrusted P6 (PMXML) schedule uploads — schedule.py # svglib (SVG→PNG for docs gallery) is a dev-only tool — it pulls pycairo/cairo and is not