Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump pillow from 10.0.1 to 10.1.0 #11596

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 16, 2023

Bumps pillow from 10.0.1 to 10.1.0.

Release notes

Sourced from pillow's releases.

10.1.0

https://pillow.readthedocs.io/en/stable/releasenotes/10.1.0.html

Changes

Dependencies

Documentation

... (truncated)

Changelog

Sourced from pillow's changelog.

10.1.0 (2023-10-15)

  • Added TrueType default font to allow for different sizes #7354 [radarhere]

  • Fixed invalid argument warning #7442 [radarhere]

  • Added ImageOps cover method #7412 [radarhere, hugovk]

  • Catch struct.error from truncated EXIF when reading JPEG DPI #7458 [radarhere]

  • Consider default image when selecting mode for PNG save_all #7437 [radarhere]

  • Support BGR;15, BGR;16 and BGR;24 access, unpacking and putdata #7303 [radarhere]

  • Added CMYK to RGB unpacker #7310 [radarhere]

  • Improved flexibility of XMP parsing #7274 [radarhere]

  • Support reading 8-bit YCbCr TIFF images #7415 [radarhere]

  • Allow saving I;16B images as PNG #7302 [radarhere]

  • Corrected drawing I;16 points and writing I;16 text #7257 [radarhere]

  • Set blue channel to 128 for BC5S #7413 [radarhere]

  • Increase flexibility when reading IPTC fields #7319 [radarhere]

  • Set C palette to be empty by default #7289 [radarhere]

  • Added gs_binary to control Ghostscript use on all platforms #7392 [radarhere]

  • Read bounding box information from the trailer of EPS files if specified #7382 [nopperl, radarhere]

... (truncated)

Commits
  • da59ad0 10.1.0 version bump
  • d10f802 Merge pull request #7465 from radarhere/mode
  • f50c713 Move #7307 from "Backwards Incompatible Changes" to "API Changes"
  • a1ddb4d Describe how to populate mode and size
  • 4ace56d Update CHANGES.rst [ci skip]
  • 7bf1a87 Merge pull request #7354 from radarhere/load_default
  • e154e97 Merge pull request #7463 from radarhere/libimagequant
  • c759ef2 Updated libimagequant to 4.2.2
  • 3a40816 Update CHANGES.rst [ci skip]
  • c2d5088 Added documentation
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 16, 2023
@cla-bot cla-bot bot added the cla-signed CLA Bot: community license agreement signed label Oct 16, 2023
@codecov
Copy link

codecov bot commented Oct 16, 2023

Codecov Report

Merging #11596 (30fdaa6) into master (3439e27) will increase coverage by 1.55%.
Report is 1 commits behind head on master.
The diff coverage is n/a.

Additional details and impacted files
@@            Coverage Diff             @@
##           master   #11596      +/-   ##
==========================================
+ Coverage   61.39%   62.95%   +1.55%     
==========================================
  Files         875      875              
  Lines       52548    52548              
  Branches     6605     6605              
==========================================
+ Hits        32263    33079     +816     
+ Misses      18786    17946     -840     
- Partials     1499     1523      +24     

@gitguardian
Copy link

gitguardian bot commented Oct 16, 2023

️✅ There are no secrets present in this pull request anymore.

If these secrets were true positive and are still valid, we highly recommend you to revoke them.
Once a secret has been leaked into a git repository, you should consider it compromised, even if it was deleted immediately.
Find here more information about risks.


🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.

Our GitHub checks need improvements? Share your feedbacks!

@dependabot dependabot bot force-pushed the dependabot/pip/pillow-10.1.0 branch 2 times, most recently from 09e42da to 48c2d7f Compare October 19, 2023 12:36
@afabiani afabiani added this to the 4.2.0 milestone Nov 8, 2023
@dependabot dependabot bot force-pushed the dependabot/pip/pillow-10.1.0 branch 3 times, most recently from c7e1765 to bfe08df Compare November 13, 2023 09:09
Bumps [pillow](https://github.com/python-pillow/Pillow) from 10.0.1 to 10.1.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@10.0.1...10.1.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/pillow-10.1.0 branch from bfe08df to 30fdaa6 Compare November 13, 2023 11:18
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 8, 2024

Superseded by #11800.

@dependabot dependabot bot closed this Jan 8, 2024
@dependabot dependabot bot deleted the dependabot/pip/pillow-10.1.0 branch January 8, 2024 00:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cla-signed CLA Bot: community license agreement signed dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant