Merge pull request #34 from achimoraites/fix/CVE-2024-28219

fix: CVE-2024-28219

Author: achimoraites

.github/workflows/python-publish.yml

@@ -25,7 +25,7 @@ jobs:
     - name: Set up Python
       uses: actions/setup-python@v3
       with:
-        python-version: '3.x'
+        python-version: '3.10'
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip

.github/workflows/tests.yml

@@ -0,0 +1,23 @@
+name: Tests
+
+on:
+  pull_request:
+    branches: ["master"]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+      - name: Set up Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: "3.10"
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install pytest
+          pip  install -r requirements.txt 
+      - name: Run pytest
+        run: python -m pytest

raw_image_converter/__init__.py

@@ -5,4 +5,4 @@
 """
 
 # Version of the package
-__version__ = "1.1.1"
+__version__ = "1.1.2"

requirements.txt

@@ -1,5 +1,5 @@
 imageio==2.16.2
-Pillow==10.0.1
-rawpy==0.17.1
-numpy==1.22.3
+Pillow==10.3.0
+rawpy==0.19.1
+numpy==1.26.4
 colorama==0.4.6

setup.py

@@ -10,7 +10,7 @@
 # This call to setup() does all the work
 setup(
     name="raw-image-converter",
-    version="1.1.1",
+    version="1.1.2",
     description="Batch conversions of raw images",
     long_description=README,
     long_description_content_type="text/markdown",
@@ -26,8 +26,8 @@
     ],
     keywords='cli, converter, raw, images',
     packages=["raw_image_converter"],
-    install_requires=["numpy==1.22.3", "rawpy==0.17.1",
-                      "imageio==2.16.2", "Pillow==10.0.1", "colorama==0.4.6"],
+    install_requires=["numpy==1.26.4", "rawpy==0.19.1",
+                      "imageio==2.16.2", "Pillow==10.3.0", "colorama==0.4.6"],
     entry_points={
         "console_scripts": [
             "raw_image_converter=raw_image_converter.__main__:main",