Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Oct 24, 2024

Updates the requirements on pillow, python-multipart and black to permit the latest version.
Updates pillow to 10.4.0

Release notes

Sourced from pillow's releases.

10.4.0

https://pillow.readthedocs.io/en/stable/releasenotes/10.4.0.html

Changes

... (truncated)

Changelog

Sourced from pillow's changelog.

10.4.0 (2024-07-01)

  • Raise FileNotFoundError if show_file() path does not exist #8178 [radarhere]

  • Improved reading 16-bit TGA images with colour #7965 [Yay295, radarhere]

  • Deprecate non-image ImageCms modes #8031 [radarhere]

  • Fixed processing multiple JPEG EXIF markers #8127 [radarhere]

  • Do not preserve EXIFIFD tag by default when saving TIFF images #8110 [radarhere]

  • Added ImageFont.load_default_imagefont() #8086 [radarhere]

  • Added Image.WARN_POSSIBLE_FORMATS #8063 [radarhere]

  • Remove zero-byte end padding when parsing any XMP data #8171 [radarhere]

  • Do not detect Ultra HDR images as MPO #8056 [radarhere]

  • Raise SyntaxError specific to JP2 #8146 [Yay295, radarhere]

  • Do not use first frame duration for other frames when saving APNG images #8104 [radarhere]

  • Consider I;16 pixel size when using a 1 mode mask #8112 [radarhere]

  • When saving multiple PNG frames, convert to mode rather than raw mode #8087 [radarhere]

  • Added byte support to FreeTypeFont #8141 [radarhere]

  • Allow float center for rotate operations #8114 [radarhere]

  • Do not read layers immediately when opening PSD images #8039 [radarhere]

... (truncated)

Commits
  • 9b4fae7 10.4.0 version bump
  • b55d74b Update CHANGES.rst [ci skip]
  • 8daf550 Merge pull request #8178 from radarhere/imageshow
  • c6d8c58 Merge pull request #7965 from Yay295/patch-3
  • c9ec76a Raise FileNotFoundError if show_file() path does not exist
  • b48d175 Update CHANGES.rst [ci skip]
  • 4d6dff3 Merge pull request #8031 from radarhere/imagingcms_modes
  • 70b3815 Merge pull request #8127 from radarhere/multiple_exif_markers
  • 88cd6d4 Rearranged comments
  • 41426a6 Merge pull request #8110 from radarhere/exififd
  • Additional commits viewable in compare view

Updates python-multipart to 0.0.12

Release notes

Sourced from python-multipart's releases.

Version 0.0.12

What's Changed


Full Changelog: Kludex/python-multipart@0.0.11...0.0.12

Changelog

Sourced from python-multipart's changelog.

0.0.12 (2024-09-29)

  • Improve error message when boundary character does not match #124.
  • Add mypy strict typing #140.
  • Enforce 100% coverage #159.

0.0.11 (2024-09-28)

  • Improve performance, especially in data with many CR-LF #137.
  • Handle invalid CRLF in header name #141.

0.0.10 (2024-09-21)

  • Support on_header_begin #103.
  • Improve type hints on FormParser #104.
  • Fix OnFileCallback type #106.
  • Improve type hints #110.
  • Improve type hints on File #111.
  • Add type hint to helper functions #112.
  • Minor fix for Field.repr #114.
  • Fix use of chunk_size parameter #136.
  • Allow digits and valid token chars in headers #134.
  • Fix headers being carried between parts #135.

0.0.9 (2024-02-10)

  • Add support for Python 3.12 #85.
  • Drop support for Python 3.7 #95.
  • Add MultipartState(IntEnum) #96.
  • Add QuerystringState #97.
  • Add TypedDict callbacks #98.
  • Add config TypedDicts #99.

0.0.8 (2024-02-09)

  • Check if Message.get_params return 3-tuple instead of str on parse_options_header #79.
  • Cleanup unused regex patterns #82.

0.0.7 (2024-02-03)

  • Refactor header option parser to use the standard library instead of a custom RegEx #75.

0.0.6 (2023-02-27)

  • Migrate package installation to pyproject.toml (PEP 621) #54.
  • Use yaml.safe_load instead of yaml.load #46.
  • Add support for Python 3.11, drop EOL 3.6 #51.
  • Add support for Python 3.8-3.10, drop EOL 2.7-3.5 #42.
  • QuerystringParser: don't raise an AttributeError in __repr__ #30.
Commits

Updates black to 24.8.0

Release notes

Sourced from black's releases.

24.8.0

Stable style

  • Fix crash when # fmt: off is used before a closing parenthesis or bracket. (#4363)

Packaging

  • Packaging metadata updated: docs are explictly linked, the issue tracker is now also linked. This improves the PyPI listing for Black. (#4345)

Parser

  • Fix regression where Black failed to parse a multiline f-string containing another multiline string (#4339)
  • Fix regression where Black failed to parse an escaped single quote inside an f-string (#4401)
  • Fix bug with Black incorrectly parsing empty lines with a backslash (#4343)
  • Fix bugs with Black's tokenizer not handling \{ inside f-strings very well (#4422)
  • Fix incorrect line numbers in the tokenizer for certain tokens within f-strings (#4423)

Performance

  • Improve performance when a large directory is listed in .gitignore (#4415)

Blackd

  • Fix blackd (and all extras installs) for docker container (#4357)
Changelog

Sourced from black's changelog.

24.8.0

Stable style

  • Fix crash when # fmt: off is used before a closing parenthesis or bracket. (#4363)

Packaging

  • Packaging metadata updated: docs are explictly linked, the issue tracker is now also linked. This improves the PyPI listing for Black. (#4345)

Parser

  • Fix regression where Black failed to parse a multiline f-string containing another multiline string (#4339)
  • Fix regression where Black failed to parse an escaped single quote inside an f-string (#4401)
  • Fix bug with Black incorrectly parsing empty lines with a backslash (#4343)
  • Fix bugs with Black's tokenizer not handling \{ inside f-strings very well (#4422)
  • Fix incorrect line numbers in the tokenizer for certain tokens within f-strings (#4423)

Performance

  • Improve performance when a large directory is listed in .gitignore (#4415)

Blackd

  • Fix blackd (and all extras installs) for docker container (#4357)

24.4.2

This is a bugfix release to fix two regressions in the new f-string parser introduced in 24.4.1.

Parser

  • Fix regression where certain complex f-strings failed to parse (#4332)

Performance

  • Fix bad performance on certain complex string literals (#4331)

24.4.1

Highlights

  • Add support for the new Python 3.12 f-string syntax introduced by PEP 701 (#3822)

Stable style

... (truncated)

Commits
  • b965c2a Prepare release 24.8.0 (#4426)
  • 9ccf279 Document find_project_root ignoring pyproject.toml without [tool.black]...
  • 14b6e61 fix: Enhace black efficiently to skip directories listed in .gitignore (#4415)
  • b1c4dd9 fix: respect braces better in f-string parsing (#4422)
  • 4b4ae43 Fix incorrect linenos on fstring tokens with escaped newlines (#4423)
  • 7fa1faf docs: fix the installation command of extra for blackd (#4413)
  • 8827acc Bump sphinx from 7.3.7 to 7.4.0 in /docs (#4404)
  • b0da11d Bump furo from 2024.5.6 to 2024.7.18 in /docs (#4409)
  • 721dff5 fix: avoid formatting backslash strings inside f-strings (#4401)
  • 7e2afc9 Update actions/checkout to v4 to stop node deprecation warnings (#4379)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Updates the requirements on [pillow](https://github.com/python-pillow/Pillow), [python-multipart](https://github.com/Kludex/python-multipart) and [black](https://github.com/psf/black) to permit the latest version.

Updates `pillow` to 10.4.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@9.0.1...10.4.0)

Updates `python-multipart` to 0.0.12
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md)
- [Commits](Kludex/python-multipart@0.0.5...0.0.12)

Updates `black` to 24.8.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@21.12b0...24.8.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: python-multipart
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: black
  dependency-type: direct:development
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants