fix: CI failures — QR test timeout and Python dependency CVEs

- Increase QR generate max-size test timeout to 120s (10000x10000
  PNG generation exceeds 30s default on CI runners)
- Update Pillow 11.1.0 → >=12.2.0 (CVE-2026-25990, CVE-2026-40192)
- Update rembg 2.0.62 → >=2.0.75 (CVE-2026-40086)
- Update opencv-python-headless to flexible range >=4.10,<4.12
- Ignore CVE-2024-27763 in pip-audit (basicsr transitive dep from
  realesrgan, no fix available upstream)
- Align requirements-gpu.txt and Dockerfile with same versions
This commit is contained in:
SnapOtter
2026-04-27 01:19:25 +08:00
parent b2a1769c8f
commit b926e5d1be
5 changed files with 10 additions and 10 deletions
+3 -3
View File
@@ -1,10 +1,10 @@
rembg==2.0.62
rembg>=2.0.75,<2.1.0
realesrgan==0.3.0
paddleocr==2.9.1
paddlepaddle-gpu==3.0.0
mediapipe==0.10.21
onnxruntime-gpu==1.20.1
numpy==1.26.4
Pillow==11.1.0
opencv-python-headless==4.10.0.84
Pillow>=12.2.0,<13.0.0
opencv-python-headless>=4.10.0,<4.12.0
codeformer-pip==0.0.4
+3 -3
View File
@@ -1,10 +1,10 @@
rembg[cpu]==2.0.62
rembg[cpu]>=2.0.75,<2.1.0
realesrgan==0.3.0
paddleocr[doc-parser]>=3.4.0,<3.5.0
paddlepaddle>=3.0.0,<3.1.0
mediapipe==0.10.21
onnxruntime==1.20.1
numpy==1.26.4
Pillow==11.1.0
opencv-python-headless==4.10.0.84
Pillow>=12.2.0,<13.0.0
opencv-python-headless>=4.10.0,<4.12.0
codeformer-pip==0.0.4