Repository navigation
chore(deps): bump the python group across 1 directory with 4 updates - #575
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the python group with 4 updates in the / directory: [fpdf2](https://github.com/py-pdf/fpdf2), [pillow](https://github.com/python-pillow/Pillow), [pypdf](https://github.com/py-pdf/pypdf) and [ruff](https://github.com/astral-sh/ruff). Updates `fpdf2` from 2.8.8 to 2.8.9 - [Release notes](https://github.com/py-pdf/fpdf2/releases) - [Changelog](https://github.com/py-pdf/fpdf2/blob/master/CHANGELOG.md) - [Commits](py-pdf/fpdf2@2.8.8...2.8.9) Updates `pillow` from 12.3.0 to 13.0.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.3.0...13.0.0) Updates `pypdf` from 6.19.0 to 6.21.2 - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@6.19.0...6.21.2) Updates `ruff` from 0.16.9 to 0.17.2 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.9...0.17.2) --- updated-dependencies: - dependency-name: fpdf2 dependency-version: 2.8.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: pillow dependency-version: 13.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: python - dependency-name: pypdf dependency-version: 6.21.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python - dependency-name: ruff dependency-version: 0.17.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the python group with 4 updates in the / directory: fpdf2, pillow, pypdf and ruff.
Updates
fpdf2from 2.8.8 to 2.8.9Release notes
Sourced from fpdf2's releases.
Changelog
Sourced from fpdf2's changelog.
Commits
f6e67a4release fpdf2 2.8.9 (#1976)93fa00bsmall fixes (#1975)9e2caaefix: embed a /CIDSet stream in CIDFont descriptors for PDF/A-1 (#1968)06408e8fix: serialize None as null keyword in PDFArray (#1974)dd0d451fix: serialize booleans as lowercase keywords in create_dictionary_string (#1...a78182bfix: serialize booleans as lowercase keywords in PDFArray (#1969)8006f67Update github/codeql-action action to v4.38.2 (#1971)f2cad56Update crate-ci/typos action to v1.50.3 (#1972)2bd6d50add swimmingbrain as a contributor for code (#1967)e846967fix: insert rowspan placeholders in column order (#1949)Updates
pillowfrom 12.3.0 to 13.0.0Release notes
Sourced from pillow's releases.
... (truncated)
Commits
293218a13.0.0 version bump262e8e4Update release notes for Pillow 13.0.0 (#10223)af56aceValidate TIFF tag values against libtiff's own field definition before TIFFSe...570df03Validate TIFF tag values against libtiff's own field definition before TIFFSe...53318b5Take libtiff scanline geometry tags from the image, not tiffinfo/exif (#10226)0a87417Bound retained TIFF tag data by stream size (#10225)11582e5Fix heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO (#10224)8501adcFix testec5f1cbTake libtiff scanline geometry tags from the image, not tiffinfo/exif4b63dffShare TIFF tag data budget across framesUpdates
pypdffrom 6.19.0 to 6.21.2Release notes
Sourced from pypdf's releases.
... (truncated)
Changelog
Sourced from pypdf's changelog.
... (truncated)
Commits
37d05f6REL: 6.21.268a0e50SEC: Avoid repeated full file loads (#4240)a3061e3SEC: Limit size of standard xref table (#4239)b7eb7b9BUG: Decode UniGB-UTF16 CMaps as UTF-16BE (#4231)885e743ROB: Reject unsupported key lengths in the /Encrypt dictionary (#4226)b68a335TST: Enable type checking for PageRange tests (#4229)3f9c7f4ROB: Reject negative bfrange source ranges in /ToUnicode CMaps (#4225)85c46abROB: Raise PdfReadError for malformed /ObjStm /N and /First headers (#4216)a91817aBUG: Keep 8-bit DeviceRGB image mode (#4230)b32df1dROB: Validate the /Encrypt dictionary when opening an encrypted file (#4197)Updates
rufffrom 0.16.9 to 0.17.2Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
30516b4Bump version to 0.17.2 (#29637)59a9e85[ty] Generalize nested types in inferred return types (#29488)0d562aa[ty] Check inherited attribute conflicts (#28559)48dcdd0[ty] Restrict range implications from gradual equivalence (#29577)734d75a[ty] Check for unsatisfiable bodies before existentially quantifying (#29504)b0f9526[ty] Preserve checks for recursive descriptor setter types (#29148)32869b4Avoid creating deployments for automation jobs (#29626)ec891baLink the commit in pull request report footers (#29621)8958748[ty] Publish ecosystem reports from GitHub Actions (#29609)01f5394[ty] Publish typing conformance reports from GitHub Actions (#29608)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions