Update dependency pillow to >=12.3.0 #589

Merged

tobru merged 1 commit from renovate/pillow-12.x into main

2026-07-02 08:47:37 +00:00

renovate commented

2026-07-02 03:01:25 +00:00

Member

This PR contains the following updates:

Package	Change	Age	Confidence
pillow (changelog)	`>=12.2.0` → `>=12.3.0`

Release Notes

python-pillow/Pillow (pillow)

`v12.3.0`

Compare Source

https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html

Removals

Remove non-image ImageCms modes #9697 [@radarhere]

Documentation

Add release notes for SBOM and performance improvements #9747 [@radarhere]
Add security release notes #9741 [@radarhere]
Add release notes for Python 3.15 beta wheels #9696 [@radarhere]
ImageFont can also be used with ImageText #9597 [@radarhere]
Additional guidelines for security reports #9659 [@wiredfool]
Fixed typo #9636 [@radarhere]
Added CVEs to 12.2.0 release notes #9591 [@radarhere]
Revise development support information in README #9583 [@aclark4life]
Add INCIDENT_RESPONSE.md #9555 [@aclark4life]
Add STRIDE threat model to security docs #9562 [@aclark4life]
Add CVEs to 12.2.0 release notes #9556 [@radarhere]
Update README with revised security policy #9553 [@radarhere]
Update security policy #9552 [@aclark4life]
Update macOS tested Python versions #9534 [@radarhere]

Dependencies

Update dependency harfbuzz to v14.2.1 #9720 [@renovate[bot]]
Update dependency mypy to v2 #9653 [@renovate[bot]]
Update dependency cibuildwheel to v4 #9665 [@renovate[bot]]
Update github-actions #9655 [@renovate[bot]]
Update dependency libavif to v1.4.2 #9652 [@renovate[bot]]
Update dependency lcms2 to v2.19.1 #9651 [@renovate[bot]]
Update dependency check-jsonschema to v0.37.2 #9650 [@renovate[bot]]
Update google/oss-fuzz digest to d872252 #9614 [@renovate[bot]]
Update dependency lcms2 to v2.19 #9609 [@renovate[bot]]
Update dependency libpng to v1.6.58 - autoclosed #9608 [@renovate[bot]]
Update dependency harfbuzz to v14 #9610 [@renovate[bot]]
Update dependency mypy to v1.20.2 #9599 [@renovate[bot]]
Update github-actions #9611 [@renovate[bot]]
Update dependency cibuildwheel to v3.4.1 #9607 [@renovate[bot]]
Move dependency versions to single JSON and enable Renovate #9559 [@hugovk]
Updated raqm to 0.10.5 #9557 [@radarhere]
Update dependency cibuildwheel to v3.4.0 #9532 [@renovate[bot]]

Testing

Remove matrix.os from benchmark #9735 [@radarhere]
Remove references to libavif patch #9734 [@radarhere]
Add benchmark tests #9654 [@akx]
Use reshape() instead of setting NumPy array shape directly #9728 [@radarhere]
Add dependencies.json to Windows cache key #9721 [@radarhere]
Increase AVIF test epsilon for loong64 #9714 [@wszqkzqk]
Add colour to Linux and Windows wheel build logs #9677 [@hugovk]
Do not test NumPy against Python 3.15 Windows AMD64 wheels #9674 [@radarhere]
Run pyroma in tox -e lint instead of pytest #9670 [@hugovk]
Update Ghostscript to 10.7.1 #9634 [@radarhere]
Update free-threading CI #9625 [@hugovk]
Increase AVIF test epsilon for riscv64 #9606 [@radarhere]
Add Fedora 44 #9594 [@radarhere]
Test Ubuntu 26.04 LTS (Resolute Raccoon) #9587 [@hugovk]
Skip EPS test_1 for Ghostscript 10.06.0 #9588 [@radarhere]
Catch subprocess.CalledProcessError in test_grab_x11 #9578 [@radarhere]
Correct feature name #9542 [@radarhere]
Skip test if FreeType is not available #9540 [@radarhere]
Remove type hint ignore #9538 [@radarhere]
Update macOS tested Python versions #9534 [@radarhere]
Remove Debian 12 and Fedora 42 from CI #9530 [@hugovk]
Remove manylinux2014 and Amazon Linux 2 #9528 [@radarhere]

Type hints

Use NumPy 2.4.6 for mypy #9705 [@radarhere]
Update dependency mypy to v2 #9653 [@renovate[bot]]
Update putpixel type hint to allow lists in xy #9585 [@radarhere]
Remove type hint ignore #9538 [@radarhere]

Other changes

Speed up ImageChops operations #9738 [@akx]
Speed up Image.filter() #9736 [@akx]
Speed up Image.getchannel(), Image.merge(), Image.putalpha() and Image.split() #9675 [@akx]
Speed up Image.fill(), Image.linear_gradient() and Image.radial_gradient(). #9737 [@akx]
Speed up Image.resample() #9739 [@akx]
Speed up alpha_composite, matrix, negative, quantize #9740 [@akx]
Remove PyErr_Clear() of "weird" exceptions #9730 [@radarhere]
Check realloc return value #9722 [@radarhere]
Add max_length to PdfStream decode() #9718 [@radarhere]
Return early when there is no fill region #9732 [@radarhere]
Allow error to be raised if PyDict_SetItemString fails #9731 [@radarhere]
Speed up Image.blend() #9649 [@akx]
Raise OverflowError if number of vertices is too large for Path #9729 [@radarhere]
Remove unused HSV and LAB matrix conversion from C #9724 [@radarhere]
Prevent reusing ImagingDecoderObject.setimage #9656 [@Serotav]
Raise ValueError if FPX tile size is not 64px by 64px #9660 [@radarhere]
Only clear error if it is BufferError #9727 [@radarhere]
Apply XOR mask to 1 and L mode CUR images #9641 [@radarhere]
Do not raise error from unknown channel ID when parsing PSD layers #9644 [@radarhere]
Raise ValueError if P;2L or P;4L data is truncated in frombytes() #9725 [@radarhere]
Embed SBOM into wheels #9679 [@hugovk]
Do not set eval() globals in ImageMath.unsafe_eval() #9576 [@radarhere]
Add Tcl/Tk license to wheels #9663 [@radarhere]
Ensure map stride is at least one full row of pixels #9719 [@radarhere]
Raise OverflowError if text width exceeds INT_MAX #9717 [@radarhere]
Raise error if image modes do not match ImageCms transform modes #9715 [@radarhere]
Use int64_t for text height #9716 [@radarhere]
Return if error occurs in Py_mod_exec slot #9712 [@radarhere]
Add decompression bomb checks to FontFile classes #9711 [@radarhere]
If C error is raised, return NULL #9706 [@radarhere]
Prevent saving 1 mode images as TGA with run-length encoding #9709 [@radarhere]
Raise ValueError if EPS BeginBinary bytecount is negative #9708 [@radarhere]
Do not DECREF tuple until tuple items are no longer used #9707 [@radarhere]
Do not update NumPy automatically #9713 [@radarhere]
Simplified code #9642 [@radarhere]
If realloc fails, do not reduce block size #9702 [@radarhere]
DECREF PyDict_GetItemRef result #9701 [@radarhere]
Use int64_t to calculate paste box dimensions #9703 [@radarhere]
Calculate JPEG2000 total_component_width for each tile in isolation #9704 [@radarhere]
Raise ValueError if value is not bytes for TIFF_BYTE or TIFF_ASCII tag #9699 [@radarhere]
Release Py_Buffer on error #9698 [@radarhere]
Use os.startfile() in WindowsViewer show_file() #9692 [@radarhere]
Validate large filter sizes when initializing RankFilter #9695 [@radarhere]
Add decompression bomb check to GdImageFile #9693 [@radarhere]
Free image bands when an error occurs while splitting an image #9694 [@radarhere]
Check PyList_Append return value #9690 [@radarhere]
Check WebPMuxNew return value #9689 [@radarhere]
Check PyCapsule_New return value #9691 [@radarhere]
Do not return negative width for text length #9623 [@radarhere]
Add args argument to METH_NOARGS methods #9687 [@radarhere]
Check ImagingNewDirty return value #9688 [@radarhere]
Use int64_t for text width #9686 [@radarhere]
Move PyDateTime_IMPORT inside Py_mod_exec slot #9580 [@radarhere]
Validate size and rank when initializing RankFilter #9661 [@radarhere]
Raise ValueError if insufficient data is read from DDS RGB file #9405 [@radarhere]
Correct IFDRational.__float__() return value #9676 [@nyxst4ck]
Correct length when accessing ImagePath.Path subscript #9685 [@radarhere]
Release reference on non-flattened sequence error #9684 [@radarhere]
Do not release Py_buffer until buf is no longer in use #9683 [@radarhere]
Do not resize macOS retina screenshots by default #9266 [@radarhere]
Add abstract BaseImageFont class #9595 [@radarhere]
Cast before multiplying #9678 [@radarhere]
Limit radius to half width or height of rounded rectangle #9561 [@radarhere]
linesize is always xsize multiplied by pixelsize #9647 [@radarhere]
Check annotate_hash_table return value #9572 [@radarhere]
Catch KeyError when checking mode from PNG IHDR chunk #9604 [@radarhere]
Only pass one argument to C expand #9664 [@radarhere]
Raise error if declared JPEG2000 marker length is too small #9666 [@radarhere]
In _dump(), use Python PPM save, instead of C #9566 [@radarhere]
Raise error consistently from inside ImagingNewArrow #9571 [@radarhere]
Simplify RankFilter.c check #9662 [@radarhere]
Support opening and saving L mode AVIF images with libavif >= 1.3.0 #9471 [@radarhere]
[pre-commit.ci] pre-commit autoupdate #9648 [@pre-commit-ci[bot]]
Apply libtiff patch to fix CVE-2026-4775 #9646 [@radarhere]
Remove duplicate code #9640 [@radarhere]
Switch iOS back to macos-26-intel #9631 [@radarhere]
Don't use list as default in PdfParser read_prev_trailer #9629 [@danigm]
Add support for Python 3.15 #9624 [@radarhere]
Do not draw line or arc if width is zero #9589 [@radarhere]
Use _accept check in WebP _open #9605 [@radarhere]
Compare dist sizes vs latest PyPI release #9621 [@hugovk]
Do not generate SBOM in scheduled run on fork #9620 [@radarhere]
Use plugin method directly when saving PDFs #9547 [@radarhere]
[pre-commit.ci] pre-commit autoupdate #9617 [@pre-commit-ci[bot]]
Set Renovate prCreation to not-pending #9616 [@radarhere]
Raise error if PNG transparency has incorrect type or length when saving #9536 [@radarhere]
If PdfParser buffer is memoryview, release it when closing #9596 [@radarhere]
Correct integer overflow in 16-bit resampling #9480 [@hayatoikoma]
SBOM: Use real versions from dependencies.json #9593 [@hugovk]
Restrict SBOM upload to only Pillow JSON #9598 [@radarhere]
Generate CycloneDX SBOM at release time via CI #9550 [@aclark4life]
Raise ValueError if ImageOps border has unsupported format #9426 [@veeceey]
Unsafe pointer dereference from unchecked Python integer in Tk initialization #9548 [@barttran2k]
Reorder renovate.json #9565 [@radarhere]
Add python-pillow GitHub Sponsors to FUNDING.yml #9563 [@aclark4life]
Correct environment URL #9558 [@radarhere]
Remove or protect secrets in Actions #9544 [@pre-commit-ci[bot]]
Move Homebrew dependencies into Brewfile #9546 [@hugovk]
Do not precompute horizontal coefficients if not horizontal resizing #9543 [@radarhere]
Fix comparison warnings #9541 [@radarhere]
Close PdfParser if error occurs during init #9539 [@radarhere]
Drop experimental Python 3.13 free-threaded wheels #9535 [@radarhere]
Update github-actions #9533 [@renovate[bot]]

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [pillow](https://github.com/python-pillow/Pillow) ([changelog](https://github.com/python-pillow/Pillow/releases)) | `>=12.2.0` → `>=12.3.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/pillow/12.3.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/pillow/12.2.0/12.3.0?slim=true) | --- ### Release Notes <details> <summary>python-pillow/Pillow (pillow)</summary> ### [`v12.3.0`](https://github.com/python-pillow/Pillow/releases/tag/12.3.0) [Compare Source](https://github.com/python-pillow/Pillow/compare/12.2.0...12.3.0) <https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html> #### Removals - Remove non-image ImageCms modes [#9697](https://github.com/python-pillow/Pillow/issues/9697) \[[@radarhere](https://github.com/radarhere)] #### Documentation - Add release notes for SBOM and performance improvements [#9747](https://github.com/python-pillow/Pillow/issues/9747) \[[@radarhere](https://github.com/radarhere)] - Add security release notes [#9741](https://github.com/python-pillow/Pillow/issues/9741) \[[@radarhere](https://github.com/radarhere)] - Add release notes for Python 3.15 beta wheels [#9696](https://github.com/python-pillow/Pillow/issues/9696) \[[@radarhere](https://github.com/radarhere)] - ImageFont can also be used with ImageText [#9597](https://github.com/python-pillow/Pillow/issues/9597) \[[@radarhere](https://github.com/radarhere)] - Additional guidelines for security reports [#9659](https://github.com/python-pillow/Pillow/issues/9659) \[[@wiredfool](https://github.com/wiredfool)] - Fixed typo [#9636](https://github.com/python-pillow/Pillow/issues/9636) \[[@radarhere](https://github.com/radarhere)] - Added CVEs to 12.2.0 release notes [#9591](https://github.com/python-pillow/Pillow/issues/9591) \[[@radarhere](https://github.com/radarhere)] - Revise development support information in README [#9583](https://github.com/python-pillow/Pillow/issues/9583) \[[@aclark4life](https://github.com/aclark4life)] - Add INCIDENT\_RESPONSE.md [#9555](https://github.com/python-pillow/Pillow/issues/9555) \[[@aclark4life](https://github.com/aclark4life)] - Add STRIDE threat model to security docs [#9562](https://github.com/python-pillow/Pillow/issues/9562) \[[@aclark4life](https://github.com/aclark4life)] - Add CVEs to 12.2.0 release notes [#9556](https://github.com/python-pillow/Pillow/issues/9556) \[[@radarhere](https://github.com/radarhere)] - Update README with revised security policy [#9553](https://github.com/python-pillow/Pillow/issues/9553) \[[@radarhere](https://github.com/radarhere)] - Update security policy [#9552](https://github.com/python-pillow/Pillow/issues/9552) \[[@aclark4life](https://github.com/aclark4life)] - Update macOS tested Python versions [#9534](https://github.com/python-pillow/Pillow/issues/9534) \[[@radarhere](https://github.com/radarhere)] #### Dependencies - Update dependency harfbuzz to v14.2.1 [#9720](https://github.com/python-pillow/Pillow/issues/9720) \[@[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency mypy to v2 [#9653](https://github.com/python-pillow/Pillow/issues/9653) \[@[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency cibuildwheel to v4 [#9665](https://github.com/python-pillow/Pillow/issues/9665) \[@[renovate\[bot\]](https://github.com/apps/renovate)] - Update github-actions [#9655](https://github.com/python-pillow/Pillow/issues/9655) \[@[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency libavif to v1.4.2 [#9652](https://github.com/python-pillow/Pillow/issues/9652) \[@[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency lcms2 to v2.19.1 [#9651](https://github.com/python-pillow/Pillow/issues/9651) \[@[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency check-jsonschema to v0.37.2 [#9650](https://github.com/python-pillow/Pillow/issues/9650) \[@[renovate\[bot\]](https://github.com/apps/renovate)] - Update google/oss-fuzz digest to [`d872252`](https://github.com/python-pillow/Pillow/commit/d872252) [#9614](https://github.com/python-pillow/Pillow/issues/9614) \[@[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency lcms2 to v2.19 [#9609](https://github.com/python-pillow/Pillow/issues/9609) \[@[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency libpng to v1.6.58 - autoclosed [#9608](https://github.com/python-pillow/Pillow/issues/9608) \[@[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency harfbuzz to v14 [#9610](https://github.com/python-pillow/Pillow/issues/9610) \[@[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency mypy to v1.20.2 [#9599](https://github.com/python-pillow/Pillow/issues/9599) \[@[renovate\[bot\]](https://github.com/apps/renovate)] - Update github-actions [#9611](https://github.com/python-pillow/Pillow/issues/9611) \[@[renovate\[bot\]](https://github.com/apps/renovate)] - Update dependency cibuildwheel to v3.4.1 [#9607](https://github.com/python-pillow/Pillow/issues/9607) \[@[renovate\[bot\]](https://github.com/apps/renovate)] - Move dependency versions to single JSON and enable Renovate [#9559](https://github.com/python-pillow/Pillow/issues/9559) \[[@hugovk](https://github.com/hugovk)] - Updated raqm to 0.10.5 [#9557](https://github.com/python-pillow/Pillow/issues/9557) \[[@radarhere](https://github.com/radarhere)] - Update dependency cibuildwheel to v3.4.0 [#9532](https://github.com/python-pillow/Pillow/issues/9532) \[@[renovate\[bot\]](https://github.com/apps/renovate)] #### Testing - Remove matrix.os from benchmark [#9735](https://github.com/python-pillow/Pillow/issues/9735) \[[@radarhere](https://github.com/radarhere)] - Remove references to libavif patch [#9734](https://github.com/python-pillow/Pillow/issues/9734) \[[@radarhere](https://github.com/radarhere)] - Add benchmark tests [#9654](https://github.com/python-pillow/Pillow/issues/9654) \[[@akx](https://github.com/akx)] - Use reshape() instead of setting NumPy array shape directly [#9728](https://github.com/python-pillow/Pillow/issues/9728) \[[@radarhere](https://github.com/radarhere)] - Add dependencies.json to Windows cache key [#9721](https://github.com/python-pillow/Pillow/issues/9721) \[[@radarhere](https://github.com/radarhere)] - Increase AVIF test epsilon for loong64 [#9714](https://github.com/python-pillow/Pillow/issues/9714) \[[@wszqkzqk](https://github.com/wszqkzqk)] - Add colour to Linux and Windows wheel build logs [#9677](https://github.com/python-pillow/Pillow/issues/9677) \[[@hugovk](https://github.com/hugovk)] - Do not test NumPy against Python 3.15 Windows AMD64 wheels [#9674](https://github.com/python-pillow/Pillow/issues/9674) \[[@radarhere](https://github.com/radarhere)] - Run pyroma in `tox -e lint` instead of pytest [#9670](https://github.com/python-pillow/Pillow/issues/9670) \[[@hugovk](https://github.com/hugovk)] - Update Ghostscript to 10.7.1 [#9634](https://github.com/python-pillow/Pillow/issues/9634) \[[@radarhere](https://github.com/radarhere)] - Update free-threading CI [#9625](https://github.com/python-pillow/Pillow/issues/9625) \[[@hugovk](https://github.com/hugovk)] - Increase AVIF test epsilon for riscv64 [#9606](https://github.com/python-pillow/Pillow/issues/9606) \[[@radarhere](https://github.com/radarhere)] - Add Fedora 44 [#9594](https://github.com/python-pillow/Pillow/issues/9594) \[[@radarhere](https://github.com/radarhere)] - Test Ubuntu 26.04 LTS (Resolute Raccoon) [#9587](https://github.com/python-pillow/Pillow/issues/9587) \[[@hugovk](https://github.com/hugovk)] - Skip EPS test\_1 for Ghostscript 10.06.0 [#9588](https://github.com/python-pillow/Pillow/issues/9588) \[[@radarhere](https://github.com/radarhere)] - Catch subprocess.CalledProcessError in test\_grab\_x11 [#9578](https://github.com/python-pillow/Pillow/issues/9578) \[[@radarhere](https://github.com/radarhere)] - Correct feature name [#9542](https://github.com/python-pillow/Pillow/issues/9542) \[[@radarhere](https://github.com/radarhere)] - Skip test if FreeType is not available [#9540](https://github.com/python-pillow/Pillow/issues/9540) \[[@radarhere](https://github.com/radarhere)] - Remove type hint ignore [#9538](https://github.com/python-pillow/Pillow/issues/9538) \[[@radarhere](https://github.com/radarhere)] - Update macOS tested Python versions [#9534](https://github.com/python-pillow/Pillow/issues/9534) \[[@radarhere](https://github.com/radarhere)] - Remove Debian 12 and Fedora 42 from CI [#9530](https://github.com/python-pillow/Pillow/issues/9530) \[[@hugovk](https://github.com/hugovk)] - Remove manylinux2014 and Amazon Linux 2 [#9528](https://github.com/python-pillow/Pillow/issues/9528) \[[@radarhere](https://github.com/radarhere)] #### Type hints - Use NumPy 2.4.6 for mypy [#9705](https://github.com/python-pillow/Pillow/issues/9705) \[[@radarhere](https://github.com/radarhere)] - Update dependency mypy to v2 [#9653](https://github.com/python-pillow/Pillow/issues/9653) \[@[renovate\[bot\]](https://github.com/apps/renovate)] - Update putpixel type hint to allow lists in xy [#9585](https://github.com/python-pillow/Pillow/issues/9585) \[[@radarhere](https://github.com/radarhere)] - Remove type hint ignore [#9538](https://github.com/python-pillow/Pillow/issues/9538) \[[@radarhere](https://github.com/radarhere)] #### Other changes - Speed up ImageChops operations [#9738](https://github.com/python-pillow/Pillow/issues/9738) \[[@akx](https://github.com/akx)] - Speed up `Image.filter()` [#9736](https://github.com/python-pillow/Pillow/issues/9736) \[[@akx](https://github.com/akx)] - Speed up `Image.getchannel()`, `Image.merge()`, `Image.putalpha()` and `Image.split()` [#9675](https://github.com/python-pillow/Pillow/issues/9675) \[[@akx](https://github.com/akx)] - Speed up `Image.fill()`, `Image.linear_gradient()` and `Image.radial_gradient()`. [#9737](https://github.com/python-pillow/Pillow/issues/9737) \[[@akx](https://github.com/akx)] - Speed up `Image.resample()` [#9739](https://github.com/python-pillow/Pillow/issues/9739) \[[@akx](https://github.com/akx)] - Speed up `alpha_composite`, `matrix`, `negative`, `quantize` [#9740](https://github.com/python-pillow/Pillow/issues/9740) \[[@akx](https://github.com/akx)] - Remove PyErr\_Clear() of "weird" exceptions [#9730](https://github.com/python-pillow/Pillow/issues/9730) \[[@radarhere](https://github.com/radarhere)] - Check realloc return value [#9722](https://github.com/python-pillow/Pillow/issues/9722) \[[@radarhere](https://github.com/radarhere)] - Add max\_length to PdfStream decode() [#9718](https://github.com/python-pillow/Pillow/issues/9718) \[[@radarhere](https://github.com/radarhere)] - Return early when there is no fill region [#9732](https://github.com/python-pillow/Pillow/issues/9732) \[[@radarhere](https://github.com/radarhere)] - Allow error to be raised if PyDict\_SetItemString fails [#9731](https://github.com/python-pillow/Pillow/issues/9731) \[[@radarhere](https://github.com/radarhere)] - Speed up `Image.blend()` [#9649](https://github.com/python-pillow/Pillow/issues/9649) \[[@akx](https://github.com/akx)] - Raise OverflowError if number of vertices is too large for Path [#9729](https://github.com/python-pillow/Pillow/issues/9729) \[[@radarhere](https://github.com/radarhere)] - Remove unused HSV and LAB matrix conversion from C [#9724](https://github.com/python-pillow/Pillow/issues/9724) \[[@radarhere](https://github.com/radarhere)] - Prevent reusing ImagingDecoderObject.setimage [#9656](https://github.com/python-pillow/Pillow/issues/9656) \[[@Serotav](https://github.com/Serotav)] - Raise ValueError if FPX tile size is not 64px by 64px [#9660](https://github.com/python-pillow/Pillow/issues/9660) \[[@radarhere](https://github.com/radarhere)] - Only clear error if it is BufferError [#9727](https://github.com/python-pillow/Pillow/issues/9727) \[[@radarhere](https://github.com/radarhere)] - Apply XOR mask to 1 and L mode CUR images [#9641](https://github.com/python-pillow/Pillow/issues/9641) \[[@radarhere](https://github.com/radarhere)] - Do not raise error from unknown channel ID when parsing PSD layers [#9644](https://github.com/python-pillow/Pillow/issues/9644) \[[@radarhere](https://github.com/radarhere)] - Raise ValueError if P;2L or P;4L data is truncated in frombytes() [#9725](https://github.com/python-pillow/Pillow/issues/9725) \[[@radarhere](https://github.com/radarhere)] - Embed SBOM into wheels [#9679](https://github.com/python-pillow/Pillow/issues/9679) \[[@hugovk](https://github.com/hugovk)] - Do not set eval() globals in ImageMath.unsafe\_eval() [#9576](https://github.com/python-pillow/Pillow/issues/9576) \[[@radarhere](https://github.com/radarhere)] - Add Tcl/Tk license to wheels [#9663](https://github.com/python-pillow/Pillow/issues/9663) \[[@radarhere](https://github.com/radarhere)] - Ensure map stride is at least one full row of pixels [#9719](https://github.com/python-pillow/Pillow/issues/9719) \[[@radarhere](https://github.com/radarhere)] - Raise OverflowError if text width exceeds INT\_MAX [#9717](https://github.com/python-pillow/Pillow/issues/9717) \[[@radarhere](https://github.com/radarhere)] - Raise error if image modes do not match ImageCms transform modes [#9715](https://github.com/python-pillow/Pillow/issues/9715) \[[@radarhere](https://github.com/radarhere)] - Use int64\_t for text height [#9716](https://github.com/python-pillow/Pillow/issues/9716) \[[@radarhere](https://github.com/radarhere)] - Return if error occurs in Py\_mod\_exec slot [#9712](https://github.com/python-pillow/Pillow/issues/9712) \[[@radarhere](https://github.com/radarhere)] - Add decompression bomb checks to FontFile classes [#9711](https://github.com/python-pillow/Pillow/issues/9711) \[[@radarhere](https://github.com/radarhere)] - If C error is raised, return NULL [#9706](https://github.com/python-pillow/Pillow/issues/9706) \[[@radarhere](https://github.com/radarhere)] - Prevent saving 1 mode images as TGA with run-length encoding [#9709](https://github.com/python-pillow/Pillow/issues/9709) \[[@radarhere](https://github.com/radarhere)] - Raise ValueError if EPS BeginBinary bytecount is negative [#9708](https://github.com/python-pillow/Pillow/issues/9708) \[[@radarhere](https://github.com/radarhere)] - Do not DECREF tuple until tuple items are no longer used [#9707](https://github.com/python-pillow/Pillow/issues/9707) \[[@radarhere](https://github.com/radarhere)] - Do not update NumPy automatically [#9713](https://github.com/python-pillow/Pillow/issues/9713) \[[@radarhere](https://github.com/radarhere)] - Simplified code [#9642](https://github.com/python-pillow/Pillow/issues/9642) \[[@radarhere](https://github.com/radarhere)] - If realloc fails, do not reduce block size [#9702](https://github.com/python-pillow/Pillow/issues/9702) \[[@radarhere](https://github.com/radarhere)] - DECREF PyDict\_GetItemRef result [#9701](https://github.com/python-pillow/Pillow/issues/9701) \[[@radarhere](https://github.com/radarhere)] - Use int64\_t to calculate paste box dimensions [#9703](https://github.com/python-pillow/Pillow/issues/9703) \[[@radarhere](https://github.com/radarhere)] - Calculate JPEG2000 total\_component\_width for each tile in isolation [#9704](https://github.com/python-pillow/Pillow/issues/9704) \[[@radarhere](https://github.com/radarhere)] - Raise ValueError if value is not bytes for TIFF\_BYTE or TIFF\_ASCII tag [#9699](https://github.com/python-pillow/Pillow/issues/9699) \[[@radarhere](https://github.com/radarhere)] - Release Py\_Buffer on error [#9698](https://github.com/python-pillow/Pillow/issues/9698) \[[@radarhere](https://github.com/radarhere)] - Use os.startfile() in WindowsViewer show\_file() [#9692](https://github.com/python-pillow/Pillow/issues/9692) \[[@radarhere](https://github.com/radarhere)] - Validate large filter sizes when initializing RankFilter [#9695](https://github.com/python-pillow/Pillow/issues/9695) \[[@radarhere](https://github.com/radarhere)] - Add decompression bomb check to GdImageFile [#9693](https://github.com/python-pillow/Pillow/issues/9693) \[[@radarhere](https://github.com/radarhere)] - Free image bands when an error occurs while splitting an image [#9694](https://github.com/python-pillow/Pillow/issues/9694) \[[@radarhere](https://github.com/radarhere)] - Check PyList\_Append return value [#9690](https://github.com/python-pillow/Pillow/issues/9690) \[[@radarhere](https://github.com/radarhere)] - Check WebPMuxNew return value [#9689](https://github.com/python-pillow/Pillow/issues/9689) \[[@radarhere](https://github.com/radarhere)] - Check PyCapsule\_New return value [#9691](https://github.com/python-pillow/Pillow/issues/9691) \[[@radarhere](https://github.com/radarhere)] - Do not return negative width for text length [#9623](https://github.com/python-pillow/Pillow/issues/9623) \[[@radarhere](https://github.com/radarhere)] - Add args argument to METH\_NOARGS methods [#9687](https://github.com/python-pillow/Pillow/issues/9687) \[[@radarhere](https://github.com/radarhere)] - Check ImagingNewDirty return value [#9688](https://github.com/python-pillow/Pillow/issues/9688) \[[@radarhere](https://github.com/radarhere)] - Use int64\_t for text width [#9686](https://github.com/python-pillow/Pillow/issues/9686) \[[@radarhere](https://github.com/radarhere)] - Move PyDateTime\_IMPORT inside Py\_mod\_exec slot [#9580](https://github.com/python-pillow/Pillow/issues/9580) \[[@radarhere](https://github.com/radarhere)] - Validate size and rank when initializing RankFilter [#9661](https://github.com/python-pillow/Pillow/issues/9661) \[[@radarhere](https://github.com/radarhere)] - Raise ValueError if insufficient data is read from DDS RGB file [#9405](https://github.com/python-pillow/Pillow/issues/9405) \[[@radarhere](https://github.com/radarhere)] - Correct `IFDRational.__float__()` return value [#9676](https://github.com/python-pillow/Pillow/issues/9676) \[[@nyxst4ck](https://github.com/nyxst4ck)] - Correct length when accessing ImagePath.Path subscript [#9685](https://github.com/python-pillow/Pillow/issues/9685) \[[@radarhere](https://github.com/radarhere)] - Release reference on non-flattened sequence error [#9684](https://github.com/python-pillow/Pillow/issues/9684) \[[@radarhere](https://github.com/radarhere)] - Do not release Py\_buffer until buf is no longer in use [#9683](https://github.com/python-pillow/Pillow/issues/9683) \[[@radarhere](https://github.com/radarhere)] - Do not resize macOS retina screenshots by default [#9266](https://github.com/python-pillow/Pillow/issues/9266) \[[@radarhere](https://github.com/radarhere)] - Add abstract BaseImageFont class [#9595](https://github.com/python-pillow/Pillow/issues/9595) \[[@radarhere](https://github.com/radarhere)] - Cast before multiplying [#9678](https://github.com/python-pillow/Pillow/issues/9678) \[[@radarhere](https://github.com/radarhere)] - Limit radius to half width or height of rounded rectangle [#9561](https://github.com/python-pillow/Pillow/issues/9561) \[[@radarhere](https://github.com/radarhere)] - linesize is always xsize multiplied by pixelsize [#9647](https://github.com/python-pillow/Pillow/issues/9647) \[[@radarhere](https://github.com/radarhere)] - Check annotate\_hash\_table return value [#9572](https://github.com/python-pillow/Pillow/issues/9572) \[[@radarhere](https://github.com/radarhere)] - Catch KeyError when checking mode from PNG IHDR chunk [#9604](https://github.com/python-pillow/Pillow/issues/9604) \[[@radarhere](https://github.com/radarhere)] - Only pass one argument to C expand [#9664](https://github.com/python-pillow/Pillow/issues/9664) \[[@radarhere](https://github.com/radarhere)] - Raise error if declared JPEG2000 marker length is too small [#9666](https://github.com/python-pillow/Pillow/issues/9666) \[[@radarhere](https://github.com/radarhere)] - In \_dump(), use Python PPM save, instead of C [#9566](https://github.com/python-pillow/Pillow/issues/9566) \[[@radarhere](https://github.com/radarhere)] - Raise error consistently from inside ImagingNewArrow [#9571](https://github.com/python-pillow/Pillow/issues/9571) \[[@radarhere](https://github.com/radarhere)] - Simplify `RankFilter.c` check [#9662](https://github.com/python-pillow/Pillow/issues/9662) \[[@radarhere](https://github.com/radarhere)] - Support opening and saving L mode AVIF images with libavif >= 1.3.0 [#9471](https://github.com/python-pillow/Pillow/issues/9471) \[[@radarhere](https://github.com/radarhere)] - \[pre-commit.ci] pre-commit autoupdate [#9648](https://github.com/python-pillow/Pillow/issues/9648) \[@[pre-commit-ci\[bot\]](https://github.com/apps/pre-commit-ci)] - Apply libtiff patch to fix CVE-2026-4775 [#9646](https://github.com/python-pillow/Pillow/issues/9646) \[[@radarhere](https://github.com/radarhere)] - Remove duplicate code [#9640](https://github.com/python-pillow/Pillow/issues/9640) \[[@radarhere](https://github.com/radarhere)] - Switch iOS back to macos-26-intel [#9631](https://github.com/python-pillow/Pillow/issues/9631) \[[@radarhere](https://github.com/radarhere)] - Don't use list as default in PdfParser read\_prev\_trailer [#9629](https://github.com/python-pillow/Pillow/issues/9629) \[[@danigm](https://github.com/danigm)] - Add support for Python 3.15 [#9624](https://github.com/python-pillow/Pillow/issues/9624) \[[@radarhere](https://github.com/radarhere)] - Do not draw line or arc if width is zero [#9589](https://github.com/python-pillow/Pillow/issues/9589) \[[@radarhere](https://github.com/radarhere)] - Use \_accept check in WebP \_open [#9605](https://github.com/python-pillow/Pillow/issues/9605) \[[@radarhere](https://github.com/radarhere)] - Compare dist sizes vs latest PyPI release [#9621](https://github.com/python-pillow/Pillow/issues/9621) \[[@hugovk](https://github.com/hugovk)] - Do not generate SBOM in scheduled run on fork [#9620](https://github.com/python-pillow/Pillow/issues/9620) \[[@radarhere](https://github.com/radarhere)] - Use plugin method directly when saving PDFs [#9547](https://github.com/python-pillow/Pillow/issues/9547) \[[@radarhere](https://github.com/radarhere)] - \[pre-commit.ci] pre-commit autoupdate [#9617](https://github.com/python-pillow/Pillow/issues/9617) \[@[pre-commit-ci\[bot\]](https://github.com/apps/pre-commit-ci)] - Set Renovate prCreation to not-pending [#9616](https://github.com/python-pillow/Pillow/issues/9616) \[[@radarhere](https://github.com/radarhere)] - Raise error if PNG transparency has incorrect type or length when saving [#9536](https://github.com/python-pillow/Pillow/issues/9536) \[[@radarhere](https://github.com/radarhere)] - If PdfParser buffer is memoryview, release it when closing [#9596](https://github.com/python-pillow/Pillow/issues/9596) \[[@radarhere](https://github.com/radarhere)] - Correct integer overflow in 16-bit resampling [#9480](https://github.com/python-pillow/Pillow/issues/9480) \[[@hayatoikoma](https://github.com/hayatoikoma)] - SBOM: Use real versions from dependencies.json [#9593](https://github.com/python-pillow/Pillow/issues/9593) \[[@hugovk](https://github.com/hugovk)] - Restrict SBOM upload to only Pillow JSON [#9598](https://github.com/python-pillow/Pillow/issues/9598) \[[@radarhere](https://github.com/radarhere)] - Generate CycloneDX SBOM at release time via CI [#9550](https://github.com/python-pillow/Pillow/issues/9550) \[[@aclark4life](https://github.com/aclark4life)] - Raise ValueError if ImageOps border has unsupported format [#9426](https://github.com/python-pillow/Pillow/issues/9426) \[[@veeceey](https://github.com/veeceey)] - Unsafe pointer dereference from unchecked Python integer in Tk initialization [#9548](https://github.com/python-pillow/Pillow/issues/9548) \[[@barttran2k](https://github.com/barttran2k)] - Reorder renovate.json [#9565](https://github.com/python-pillow/Pillow/issues/9565) \[[@radarhere](https://github.com/radarhere)] - Add python-pillow GitHub Sponsors to FUNDING.yml [#9563](https://github.com/python-pillow/Pillow/issues/9563) \[[@aclark4life](https://github.com/aclark4life)] - Correct environment URL [#9558](https://github.com/python-pillow/Pillow/issues/9558) \[[@radarhere](https://github.com/radarhere)] - Remove or protect secrets in Actions [#9544](https://github.com/python-pillow/Pillow/issues/9544) \[@[pre-commit-ci\[bot\]](https://github.com/apps/pre-commit-ci)] - Move Homebrew dependencies into Brewfile [#9546](https://github.com/python-pillow/Pillow/issues/9546) \[[@hugovk](https://github.com/hugovk)] - Do not precompute horizontal coefficients if not horizontal resizing [#9543](https://github.com/python-pillow/Pillow/issues/9543) \[[@radarhere](https://github.com/radarhere)] - Fix comparison warnings [#9541](https://github.com/python-pillow/Pillow/issues/9541) \[[@radarhere](https://github.com/radarhere)] - Close PdfParser if error occurs during init [#9539](https://github.com/python-pillow/Pillow/issues/9539) \[[@radarhere](https://github.com/radarhere)] - Drop experimental Python 3.13 free-threaded wheels [#9535](https://github.com/python-pillow/Pillow/issues/9535) \[[@radarhere](https://github.com/radarhere)] - Update github-actions [#9533](https://github.com/python-pillow/Pillow/issues/9533) \[@[renovate\[bot\]](https://github.com/apps/renovate)] </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate added the

dependencies

label

2026-07-02 03:01:25 +00:00

renovate added 1 commit

2026-07-02 03:01:25 +00:00