Skip to content

build(deps): bump pillow from 12.3.0 to 13.0.0 in /docs in the pip group across 1 directory - #489

Merged
konih merged 1 commit into
mainfrom
dependabot/pip/docs/pip-bbf36862e1
Oct 29, 2026
Merged

konih merged 1 commit into
mainfrom
dependabot/pip/docs/pip-bbf36862e1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the pip group with 1 update in the /docs directory: pillow.

Updates pillow from 12.3.0 to 13.0.0

Release notes

Sourced from pillow's releases.

13.0.0

https://pillow.readthedocs.io/en/stable/releasenotes/13.0.0.html

Removals

Deprecations

Documentation

Dependencies

... (truncated)

Commits
  • 293218a 13.0.0 version bump
  • 262e8e4 Update release notes for Pillow 13.0.0 (#10223)
  • af56ace Validate TIFF tag values against libtiff's own field definition before TIFFSe...
  • 570df03 Validate TIFF tag values against libtiff's own field definition before TIFFSe...
  • 53318b5 Take libtiff scanline geometry tags from the image, not tiffinfo/exif (#10226)
  • 0a87417 Bound retained TIFF tag data by stream size (#10225)
  • 11582e5 Fix heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO (#10224)
  • 8501adc Fix test
  • ec5f1cb Take libtiff scanline geometry tags from the image, not tiffinfo/exif
  • 4b63dff Share TIFF tag data budget across frames
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from konih as a code owner October 23, 2026 16:28
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 23, 2026
konih added a commit that referenced this pull request Oct 28, 2026
Pillow 13.0.0 (docs-site build only) is licensed MIT-CMU, a permissive HPND-style licence, so Dependabot #489 fails dependency-review. Allow the licence alongside the other permissive ones.
@konih

konih commented Oct 28, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/pip/docs/pip-bbf36862e1 branch from 4139808 to daf8a28 Compare October 28, 2026 11:38
@konih

konih commented Oct 29, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

Bumps the pip group with 1 update in the /docs directory: [pillow](https://github.com/python-pillow/Pillow).


Updates `pillow` from 12.3.0 to 13.0.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@12.3.0...13.0.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-version: 13.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/docs/pip-bbf36862e1 branch from daf8a28 to 9a127e5 Compare October 29, 2026 20:32
@konih
konih merged commit 3772071 into main Oct 29, 2026
36 checks passed
@konih
konih deleted the dependabot/pip/docs/pip-bbf36862e1 branch October 29, 2026 20:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant