dependabot[bot] opened a new pull request, #846: URL: https://github.com/apache/ranger/pull/846
Bumps [pillow](https://github.com/python-pillow/Pillow) from 10.4.0 to 12.1.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/python-pillow/Pillow/releases";>pillow's releases</a>.</em></p> <blockquote> <h2>12.1.1</h2> <p><a href="https://pillow.readthedocs.io/en/stable/releasenotes/12.1.1.html";>https://pillow.readthedocs.io/en/stable/releasenotes/12.1.1.html</a></p> <h2>Dependencies</h2> <ul> <li>Patch libavif for svt-av1 4.0 compatibility <a href="https://redirect.github.com/python-pillow/Pillow/issues/9413";>#9413</a> [<a href="https://github.com/hugovk";><code>@hugovk</code></a>]</li> </ul> <h2>Other changes</h2> <ul> <li>Fix OOB Write with invalid tile extents <a href="https://redirect.github.com/python-pillow/Pillow/issues/9427";>#9427</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> </ul> <h2>12.1.0</h2> <p><a href="https://pillow.readthedocs.io/en/stable/releasenotes/12.1.0.html";>https://pillow.readthedocs.io/en/stable/releasenotes/12.1.0.html</a></p> <h2>Deprecations</h2> <ul> <li>Deprecate getdata(), in favour of new get_flattened_data() <a href="https://redirect.github.com/python-pillow/Pillow/issues/9292";>#9292</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> </ul> <h2>Documentation</h2> <ul> <li>Specify APNG duration type when opening <a href="https://redirect.github.com/python-pillow/Pillow/issues/9368";>#9368</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> <li>Added release notes for <a href="https://redirect.github.com/python-pillow/Pillow/issues/9350";>#9350</a> <a href="https://redirect.github.com/python-pillow/Pillow/issues/9366";>#9366</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> <li>Update ImageMorph documentation <a href="https://redirect.github.com/python-pillow/Pillow/issues/9349";>#9349</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> <li>Docs: update major bump cadence <a href="https://redirect.github.com/python-pillow/Pillow/issues/9334";>#9334</a> [<a href="https://github.com/hugovk";><code>@hugovk</code></a>]</li> <li>Add release notes for <a href="https://redirect.github.com/python-pillow/Pillow/issues/9070";>#9070</a> <a href="https://redirect.github.com/python-pillow/Pillow/issues/9320";>#9320</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> <li>Updated Ubuntu version <a href="https://redirect.github.com/python-pillow/Pillow/issues/9306";>#9306</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> <li>Update macOS tested Pillow versions <a href="https://redirect.github.com/python-pillow/Pillow/issues/9265";>#9265</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> </ul> <h2>Dependencies</h2> <ul> <li>Update harfbuzz to 12.3.0 <a href="https://redirect.github.com/python-pillow/Pillow/issues/9355";>#9355</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> <li>Update xz to 5.8.2 <a href="https://redirect.github.com/python-pillow/Pillow/issues/9343";>#9343</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> <li>Updated libjpeg-turbo to 3.1.3 <a href="https://redirect.github.com/python-pillow/Pillow/issues/9333";>#9333</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> <li>Updated zlib-ng to 2.3.2 <a href="https://redirect.github.com/python-pillow/Pillow/issues/9324";>#9324</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> <li>Updated libpng to 1.6.53 <a href="https://redirect.github.com/python-pillow/Pillow/issues/9325";>#9325</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> <li>Update actions/checkout action to v6 <a href="https://redirect.github.com/python-pillow/Pillow/issues/9323";>#9323</a> [@<a href="https://github.com/apps/renovate";>renovate[bot]</a>]</li> <li>Update dependency mypy to v1.19.0 <a href="https://redirect.github.com/python-pillow/Pillow/issues/9322";>#9322</a> [@<a href="https://github.com/apps/renovate";>renovate[bot]</a>]</li> <li>Updated libpng to 1.6.51 <a href="https://redirect.github.com/python-pillow/Pillow/issues/9305";>#9305</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> <li>Updated brotli to 1.2.0 <a href="https://redirect.github.com/python-pillow/Pillow/issues/9284";>#9284</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> <li>Update libimagequant to 4.4.1 <a href="https://redirect.github.com/python-pillow/Pillow/issues/9301";>#9301</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> <li>Update zlib-ng to 2.3.1, except on manylinux2014 aarch64 <a href="https://redirect.github.com/python-pillow/Pillow/issues/9312";>#9312</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> <li>Updated harfbuzz to 12.2.0 <a href="https://redirect.github.com/python-pillow/Pillow/issues/9289";>#9289</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> <li>Update github-actions <a href="https://redirect.github.com/python-pillow/Pillow/issues/9277";>#9277</a> [@<a href="https://github.com/apps/renovate";>renovate[bot]</a>]</li> </ul> <h2>Testing</h2> <ul> <li>Replace pre-commit with prek <a href="https://redirect.github.com/python-pillow/Pillow/issues/9360";>#9360</a> [<a href="https://github.com/hugovk";><code>@hugovk</code></a>]</li> <li>Test PyQt6 on Python 3.14 on Windows <a href="https://redirect.github.com/python-pillow/Pillow/issues/9353";>#9353</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> <li>Test 32-bit Windows on Windows Server 2022 <a href="https://redirect.github.com/python-pillow/Pillow/issues/9345";>#9345</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> <li>Correct variable type <a href="https://redirect.github.com/python-pillow/Pillow/issues/9335";>#9335</a> [<a href="https://github.com/radarhere";><code>@radarhere</code></a>]</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst";>pillow's changelog</a>.</em></p> <blockquote> <h1>Changelog (Pillow)</h1> <h2>11.1.0 and newer</h2> <p>See GitHub Releases:</p> <ul> <li><a href="https://github.com/python-pillow/Pillow/releases";>https://github.com/python-pillow/Pillow/releases</a></li> </ul> <h2>11.0.0 (2024-10-15)</h2> <ul> <li> <p>Update licence to MIT-CMU <a href="https://redirect.github.com/python-pillow/Pillow/issues/8460";>#8460</a> [hugovk]</p> </li> <li> <p>Conditionally define ImageCms type hint to avoid requiring core <a href="https://redirect.github.com/python-pillow/Pillow/issues/8197";>#8197</a> [radarhere]</p> </li> <li> <p>Support writing LONG8 offsets in AppendingTiffWriter <a href="https://redirect.github.com/python-pillow/Pillow/issues/8417";>#8417</a> [radarhere]</p> </li> <li> <p>Use ImageFile.MAXBLOCK when saving TIFF images <a href="https://redirect.github.com/python-pillow/Pillow/issues/8461";>#8461</a> [radarhere]</p> </li> <li> <p>Do not close provided file handles with libtiff when saving <a href="https://redirect.github.com/python-pillow/Pillow/issues/8458";>#8458</a> [radarhere]</p> </li> <li> <p>Support ImageFilter.BuiltinFilter for I;16* images <a href="https://redirect.github.com/python-pillow/Pillow/issues/8438";>#8438</a> [radarhere]</p> </li> <li> <p>Use ImagingCore.ptr instead of ImagingCore.id <a href="https://redirect.github.com/python-pillow/Pillow/issues/8341";>#8341</a> [homm, radarhere, hugovk]</p> </li> <li> <p>Updated EPS mode when opening images without transparency <a href="https://redirect.github.com/python-pillow/Pillow/issues/8281";>#8281</a> [Yay295, radarhere]</p> </li> <li> <p>Use transparency when combining P frames from APNGs <a href="https://redirect.github.com/python-pillow/Pillow/issues/8443";>#8443</a> [radarhere]</p> </li> <li> <p>Support all resampling filters when resizing I;16* images <a href="https://redirect.github.com/python-pillow/Pillow/issues/8422";>#8422</a> [radarhere]</p> </li> <li> <p>Free memory on early return <a href="https://redirect.github.com/python-pillow/Pillow/issues/8413";>#8413</a> [radarhere]</p> </li> <li> <p>Cast int before potentially exceeding INT_MAX <a href="https://redirect.github.com/python-pillow/Pillow/issues/8402";>#8402</a> [radarhere]</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python-pillow/Pillow/commit/5158d98c807e719c5938aa3886913ef0ea6814e9";><code>5158d98</code></a> 12.1.1 version bump</li> <li><a href="https://github.com/python-pillow/Pillow/commit/9000313cc5d4a31bdcdd6d7f0781101abab553aa";><code>9000313</code></a> Fix OOB Write with invalid tile extents (<a href="https://redirect.github.com/python-pillow/Pillow/issues/9427";>#9427</a>)</li> <li><a href="https://github.com/python-pillow/Pillow/commit/cd0111849fb32c40860e3ee3d57b9b1cee4260cf";><code>cd01118</code></a> Patch libavif for svt-av1 4.0 compatibility</li> <li><a href="https://github.com/python-pillow/Pillow/commit/46f45f674d47b5d8bc54230dda8fe9e214598b87";><code>46f45f6</code></a> 12.1.0 version bump</li> <li><a href="https://github.com/python-pillow/Pillow/commit/c9ac097edb5594f63c40acd9afe6802547200379";><code>c9ac097</code></a> Simplify band splitting (<a href="https://redirect.github.com/python-pillow/Pillow/issues/9291";>#9291</a>)</li> <li><a href="https://github.com/python-pillow/Pillow/commit/3baedf264804d199bc19458d11bcff02ce7598eb";><code>3baedf2</code></a> Deprecate getdata(), in favour of new get_flattened_data() (<a href="https://redirect.github.com/python-pillow/Pillow/issues/9292";>#9292</a>)</li> <li><a href="https://github.com/python-pillow/Pillow/commit/b51a0366852c1d519d108dfec8fc2d738cd8080f";><code>b51a036</code></a> Specify APNG duration type when opening (<a href="https://redirect.github.com/python-pillow/Pillow/issues/9368";>#9368</a>)</li> <li><a href="https://github.com/python-pillow/Pillow/commit/8d08e31533065b623399a54bc92b39a756599ad4";><code>8d08e31</code></a> Add release notes for <a href="https://redirect.github.com/python-pillow/Pillow/issues/9348";>#9348</a> (<a href="https://redirect.github.com/python-pillow/Pillow/issues/9369";>#9369</a>)</li> <li><a href="https://github.com/python-pillow/Pillow/commit/432707ea810ae619e2a9e4a9737c169cacaa8eda";><code>432707e</code></a> Added release notes for <a href="https://redirect.github.com/python-pillow/Pillow/issues/9348";>#9348</a></li> <li><a href="https://github.com/python-pillow/Pillow/commit/2d589107fb3a4aba8389932a65ff771bf9b4deb1";><code>2d58910</code></a> Specify APNG duration type when opening</li> <li>Additional commits viewable in <a href="https://github.com/python-pillow/Pillow/compare/10.4.0...12.1.1";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/ranger/network/alerts). </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
