Bump the pip group across 2 directories with 5 updates
Bumps the pip group with 1 update in the /biggan_imagenet directory: tensorflow-gpu. Bumps the pip group with 5 updates in the /stylegan2 directory:
| Package | From | To |
|---|---|---|
| tensorflow-gpu | 1.14 |
2.12.0 |
| tqdm | 4.49.0 |
4.66.3 |
| scipy | 1.3.3 |
1.11.1 |
| requests | 2.22.0 |
2.31.0 |
| pillow | 6.2.1 |
10.3.0 |
Updates tensorflow-gpu from 1.14 to 2.12.0
Release notes
Sourced from tensorflow-gpu's releases.
TensorFlow 2.12.0
Release 2.12.0
TensorFlow
Breaking Changes
Build, Compilation and Packaging
- Removed redundant packages
tensorflow-gpuandtf-nightly-gpu. These packages were removed and replaced with packages that direct users to switch totensorflowortf-nightlyrespectively. Since TensorFlow 2.1, the only difference between these two sets of packages was their names, so there is no loss of functionality or GPU support. See https://pypi.org/project/tensorflow-gpu for more details.
tf.function:
tf.functionnow uses the Python inspect library directly for parsing the signature of the Python function it is decorated on. This change may break code where the function signature is malformed, but was ignored previously, such as:
- Using
functools.wrapson a function with different signature- Using
functools.partialwith an invalidtf.functioninputtf.functionnow enforces input parameter names to be valid Python identifiers. Incompatible names are automatically sanitized similarly to existing SavedModel signature behavior.- Parameterless
tf.functions are assumed to have an emptyinput_signatureinstead of an undefined one even if theinput_signatureis unspecified.tf.types.experimental.TraceTypenow requires an additionalplaceholder_valuemethod to be defined.tf.functionnow traces with placeholder values generated by TraceType instead of the value itself.Experimental APIs
tf.config.experimental.enable_mlir_graph_optimizationandtf.config.experimental.disable_mlir_graph_optimizationwere removed.Major Features and Improvements
Support for Python 3.11 has been added.
Support for Python 3.7 has been removed. We are not releasing any more patches for Python 3.7.
tf.lite:
- Add 16-bit float type support for built-in op
fill.- Transpose now supports 6D tensors.
- Float LSTM now supports diagonal recurrent tensors: https://arxiv.org/abs/1903.08023
tf.experimental.dtensor:
- Coordination service now works with
dtensor.initialize_accelerator_system, and enabled by default.- Add
tf.experimental.dtensor.is_dtensorto check if a tensor is a DTensor instance.
tf.data:
- Added support for alternative checkpointing protocol which makes it possible to checkpoint the state of the input pipeline without having to store the contents of internal buffers. The new functionality can be enabled through the
experimental_symbolic_checkpointoption oftf.data.Options().- Added a new
rerandomize_each_iterationargument for thetf.data.Dataset.random()operation, which controls whether the sequence of generated random numbers should be re-randomized every epoch or not (the default behavior). Ifseedis set andrerandomize_each_iteration=True, therandom()operation will produce a different (deterministic) sequence of numbers every epoch.- Added a new
rerandomize_each_iterationargument for thetf.data.Dataset.sample_from_datasets()operation, which controls whether the sequence of generated random numbers used for sampling should be re-randomized every epoch or not. Ifseedis set andrerandomize_each_iteration=True, thesample_from_datasets()operation will use a different (deterministic) sequence of numbers every epoch.
tf.test:
- Added
tf.test.experimental.sync_devices, which is useful for accurately measuring performance in benchmarks.
tf.experimental.dtensor:
... (truncated)
Changelog
Sourced from tensorflow-gpu's changelog.
Release 2.12.0
Breaking Changes
Build, Compilation and Packaging
- Removed redundant packages
tensorflow-gpuandtf-nightly-gpu. These packages were removed and replaced with packages that direct users to switch totensorflowortf-nightlyrespectively. Since TensorFlow 2.1, the only difference between these two sets of packages was their names, so there is no loss of functionality or GPU support. See https://pypi.org/project/tensorflow-gpu for more details.
tf.function:
tf.functionnow uses the Python inspect library directly for parsing the signature of the Python function it is decorated on. This change may break code where the function signature is malformed, but was ignored previously, such as:
- Using
functools.wrapson a function with different signature- Using
functools.partialwith an invalidtf.functioninputtf.functionnow enforces input parameter names to be valid Python identifiers. Incompatible names are automatically sanitized similarly to existing SavedModel signature behavior.- Parameterless
tf.functions are assumed to have an emptyinput_signatureinstead of an undefined one even if theinput_signatureis unspecified.tf.types.experimental.TraceTypenow requires an additionalplaceholder_valuemethod to be defined.tf.functionnow traces with placeholder values generated by TraceType instead of the value itself.Experimental APIs
tf.config.experimental.enable_mlir_graph_optimizationandtf.config.experimental.disable_mlir_graph_optimizationwere removed.Major Features and Improvements
Support for Python 3.11 has been added.
Support for Python 3.7 has been removed. We are not releasing any more patches for Python 3.7.
tf.lite:
- Add 16-bit float type support for built-in op
fill.- Transpose now supports 6D tensors.
- Float LSTM now supports diagonal recurrent tensors: https://arxiv.org/abs/1903.08023
tf.experimental.dtensor:
- Coordination service now works with
dtensor.initialize_accelerator_system, and enabled by default.- Add
tf.experimental.dtensor.is_dtensorto check if a tensor is a DTensor instance.
tf.data:
- Added support for alternative checkpointing protocol which makes it possible to checkpoint the state of the input pipeline without having to store the contents of internal buffers. The new functionality can be enabled through the
experimental_symbolic_checkpointoption oftf.data.Options().- Added a new
rerandomize_each_iterationargument for thetf.data.Dataset.random()operation, which controls whether the sequence of generated random numbers should be re-randomized every epoch or not (the default behavior). Ifseedis set andrerandomize_each_iteration=True, therandom()operation will produce a different (deterministic) sequence of numbers every epoch.- Added a new
rerandomize_each_iterationargument for thetf.data.Dataset.sample_from_datasets()operation, which controls whether the sequence of generated random numbers used for sampling should be re-randomized every epoch or not. Ifseedis set andrerandomize_each_iteration=True, thesample_from_datasets()operation will use a different (deterministic) sequence of numbers every epoch.
tf.test:
- Added
tf.test.experimental.sync_devices, which is useful for accurately measuring performance in benchmarks.
tf.experimental.dtensor:
- Added experimental support to ReduceScatter fuse on GPU (NCCL).
... (truncated)
Commits
0db597dMerge pull request #60051 from tensorflow/venkat2469-patch-11a12f59Update RELEASE.mdaa4d558Merge pull request #60050 from tensorflow/venkat-patch-6bd1ab8aUpdate the security section in RELEASE.md4905be0Merge pull request #60049 from tensorflow/venkat-patch-59f96caaUpdate setup.py on TF release branch with released version of Estimator and k...e719b6bUpdate Relese.md (#60033)64a9d54Merge pull request #60017 from tensorflow/joefernandez-patch-2.12-release-notes7a4ebfdUpdate RELEASE.mde0e10a9Merge pull request #59988 from tensorflow-jenkins/version-numbers-2.12.0-8756- Additional commits viewable in compare view
Updates tensorflow-gpu from 1.14 to 2.12.0
Release notes
Sourced from tensorflow-gpu's releases.
TensorFlow 2.12.0
Release 2.12.0
TensorFlow
Breaking Changes
Build, Compilation and Packaging
- Removed redundant packages
tensorflow-gpuandtf-nightly-gpu. These packages were removed and replaced with packages that direct users to switch totensorflowortf-nightlyrespectively. Since TensorFlow 2.1, the only difference between these two sets of packages was their names, so there is no loss of functionality or GPU support. See https://pypi.org/project/tensorflow-gpu for more details.
tf.function:
tf.functionnow uses the Python inspect library directly for parsing the signature of the Python function it is decorated on. This change may break code where the function signature is malformed, but was ignored previously, such as:
- Using
functools.wrapson a function with different signature- Using
functools.partialwith an invalidtf.functioninputtf.functionnow enforces input parameter names to be valid Python identifiers. Incompatible names are automatically sanitized similarly to existing SavedModel signature behavior.- Parameterless
tf.functions are assumed to have an emptyinput_signatureinstead of an undefined one even if theinput_signatureis unspecified.tf.types.experimental.TraceTypenow requires an additionalplaceholder_valuemethod to be defined.tf.functionnow traces with placeholder values generated by TraceType instead of the value itself.Experimental APIs
tf.config.experimental.enable_mlir_graph_optimizationandtf.config.experimental.disable_mlir_graph_optimizationwere removed.Major Features and Improvements
Support for Python 3.11 has been added.
Support for Python 3.7 has been removed. We are not releasing any more patches for Python 3.7.
tf.lite:
- Add 16-bit float type support for built-in op
fill.- Transpose now supports 6D tensors.
- Float LSTM now supports diagonal recurrent tensors: https://arxiv.org/abs/1903.08023
tf.experimental.dtensor:
- Coordination service now works with
dtensor.initialize_accelerator_system, and enabled by default.- Add
tf.experimental.dtensor.is_dtensorto check if a tensor is a DTensor instance.
tf.data:
- Added support for alternative checkpointing protocol which makes it possible to checkpoint the state of the input pipeline without having to store the contents of internal buffers. The new functionality can be enabled through the
experimental_symbolic_checkpointoption oftf.data.Options().- Added a new
rerandomize_each_iterationargument for thetf.data.Dataset.random()operation, which controls whether the sequence of generated random numbers should be re-randomized every epoch or not (the default behavior). Ifseedis set andrerandomize_each_iteration=True, therandom()operation will produce a different (deterministic) sequence of numbers every epoch.- Added a new
rerandomize_each_iterationargument for thetf.data.Dataset.sample_from_datasets()operation, which controls whether the sequence of generated random numbers used for sampling should be re-randomized every epoch or not. Ifseedis set andrerandomize_each_iteration=True, thesample_from_datasets()operation will use a different (deterministic) sequence of numbers every epoch.
tf.test:
- Added
tf.test.experimental.sync_devices, which is useful for accurately measuring performance in benchmarks.
tf.experimental.dtensor:
... (truncated)
Changelog
Sourced from tensorflow-gpu's changelog.
Release 2.12.0
Breaking Changes
Build, Compilation and Packaging
- Removed redundant packages
tensorflow-gpuandtf-nightly-gpu. These packages were removed and replaced with packages that direct users to switch totensorflowortf-nightlyrespectively. Since TensorFlow 2.1, the only difference between these two sets of packages was their names, so there is no loss of functionality or GPU support. See https://pypi.org/project/tensorflow-gpu for more details.
tf.function:
tf.functionnow uses the Python inspect library directly for parsing the signature of the Python function it is decorated on. This change may break code where the function signature is malformed, but was ignored previously, such as:
- Using
functools.wrapson a function with different signature- Using
functools.partialwith an invalidtf.functioninputtf.functionnow enforces input parameter names to be valid Python identifiers. Incompatible names are automatically sanitized similarly to existing SavedModel signature behavior.- Parameterless
tf.functions are assumed to have an emptyinput_signatureinstead of an undefined one even if theinput_signatureis unspecified.tf.types.experimental.TraceTypenow requires an additionalplaceholder_valuemethod to be defined.tf.functionnow traces with placeholder values generated by TraceType instead of the value itself.Experimental APIs
tf.config.experimental.enable_mlir_graph_optimizationandtf.config.experimental.disable_mlir_graph_optimizationwere removed.Major Features and Improvements
Support for Python 3.11 has been added.
Support for Python 3.7 has been removed. We are not releasing any more patches for Python 3.7.
tf.lite:
- Add 16-bit float type support for built-in op
fill.- Transpose now supports 6D tensors.
- Float LSTM now supports diagonal recurrent tensors: https://arxiv.org/abs/1903.08023
tf.experimental.dtensor:
- Coordination service now works with
dtensor.initialize_accelerator_system, and enabled by default.- Add
tf.experimental.dtensor.is_dtensorto check if a tensor is a DTensor instance.
tf.data:
- Added support for alternative checkpointing protocol which makes it possible to checkpoint the state of the input pipeline without having to store the contents of internal buffers. The new functionality can be enabled through the
experimental_symbolic_checkpointoption oftf.data.Options().- Added a new
rerandomize_each_iterationargument for thetf.data.Dataset.random()operation, which controls whether the sequence of generated random numbers should be re-randomized every epoch or not (the default behavior). Ifseedis set andrerandomize_each_iteration=True, therandom()operation will produce a different (deterministic) sequence of numbers every epoch.- Added a new
rerandomize_each_iterationargument for thetf.data.Dataset.sample_from_datasets()operation, which controls whether the sequence of generated random numbers used for sampling should be re-randomized every epoch or not. Ifseedis set andrerandomize_each_iteration=True, thesample_from_datasets()operation will use a different (deterministic) sequence of numbers every epoch.
tf.test:
- Added
tf.test.experimental.sync_devices, which is useful for accurately measuring performance in benchmarks.
tf.experimental.dtensor:
- Added experimental support to ReduceScatter fuse on GPU (NCCL).
... (truncated)
Commits
0db597dMerge pull request #60051 from tensorflow/venkat2469-patch-11a12f59Update RELEASE.mdaa4d558Merge pull request #60050 from tensorflow/venkat-patch-6bd1ab8aUpdate the security section in RELEASE.md4905be0Merge pull request #60049 from tensorflow/venkat-patch-59f96caaUpdate setup.py on TF release branch with released version of Estimator and k...e719b6bUpdate Relese.md (#60033)64a9d54Merge pull request #60017 from tensorflow/joefernandez-patch-2.12-release-notes7a4ebfdUpdate RELEASE.mde0e10a9Merge pull request #59988 from tensorflow-jenkins/version-numbers-2.12.0-8756- Additional commits viewable in compare view
Updates tqdm from 4.49.0 to 4.66.3
Release notes
Sourced from tqdm's releases.
tqdm v4.66.3 stable
cli:evalsafety (fixes CVE-2024-34062, GHSA-g7vv-2v7x-gj9p)tqdm v4.66.2 stable
pandas: addDataFrame.progress_map(#1549)notebook: fix HTML padding (#1506)keras: fix resuming training whenverbose>=2(#1508)- fix
format_numnegative fractions missing leading zero (#1548)- fix Python 3.12
DeprecationWarningonimport(#1519)- linting: use f-strings (#1549)
- update tests (#1549)
- fix
pandaswarnings- fix
asv(airspeed-velocity/asv#1323)- fix macos
notebookdocstring indentation- CI: bump actions (#1549)
tqdm v4.66.1 stable
- fix
utils.envwraptypes (#1493 <- #1491, #1320 <- #966, #1319)
- e.g. cloudwatch & kubernetes workaround:
export TQDM_POSITION=-1- drop mentions of unsupported Python versions
tqdm v4.66.0 stable
- environment variables to override defaults (
TQDM_*) (#1491 <- #1061, #950 <- #614, #1318, #619, #612, #370)
- e.g. in CI jobs,
export TQDM_MININTERVAL=5to avoid log spam- add tests & docs for
tqdm.utils.envwrap- fix & update CLI completion
- fix & update API docs
- minor code tidy: replace
os.path=>pathlib.Path- fix docs image hosting
- release with CI bot account again (cli/cli#6680)
tqdm v4.65.2 stable
- exclude
examplesfrom distributed wheel (#1492)tqdm v4.65.1 stable
- migrate
setup.{cfg,py}=>pyproject.toml(#1490)
- fix
asvbenchmarks- update docs
- fix snap build (#1490)
- fix & update tests (#1490)
- fix flaky notebook tests
- bump
pre-commit- bump workflow actions
tqdm v4.65.0 stable
- add Python 3.11 and drop Python 3.6 support (#1439, #1419, #502 <- #720, #620)
- misc code & docs tidy
- fix & update CI workflows & tests
tqdm v4.64.1 stable
... (truncated)
Commits
4e613f8Merge pull request from GHSA-g7vv-2v7x-gj9pb53348ccli: eval safetycc372d0bump version, merge pull request #1549 from tqdm/devele9f0c05use PyPI trusted publishing7323d5bslight makefile clean5306125tests: bump pre-commit4a6fd4ffix datetime.utcfromtimestamp py3.12 warning (#1519)6f13759tests: fix macos notebook indentation3abcd2atests: fix asva4d15c8tests: fix pandas warnings- Additional commits viewable in compare view
Updates scipy from 1.3.3 to 1.11.1
Release notes
Sourced from scipy's releases.
SciPy 1.11.1 Release Notes
SciPy
1.11.1is a bug-fix release with no new features compared to1.11.0. In particular, a licensing issue discovered after the release of1.11.0has been addressed.Authors
- Name (commits)
- h-vetinari (1)
- Robert Kern (1)
- Ilhan Polat (4)
- Tyler Reddy (8)
A total of 4 people contributed to this release. People with a "+" by their names contributed a patch for the first time. This list of names is automatically generated, and may not be fully complete.
SciPy 1.11.0 Release Notes
SciPy
1.11.0is the culmination of 6 months of hard work. It contains many new features, numerous bug-fixes, improved test coverage and better documentation. There have been a number of deprecations and API changes in this release, which are documented below. All users are encouraged to upgrade to this release, as there are a large number of bug-fixes and optimizations. Before upgrading, we recommend that users check that their own code does not use deprecated SciPy functionality (to do so, run your code withpython -Wdand check forDeprecationWarnings). Our development attention will now shift to bug-fix releases on the 1.11.x branch, and on adding new features on the main branch.This release requires Python
3.9+and NumPy1.21.6or greater.For running on PyPy, PyPy3
6.0+is required.Highlights of this release
- Several
scipy.sparsearray API improvements, includingsparse.sparray, a new public base class distinct from the oldersparse.spmatrixclass, proper 64-bit index support, and numerous deprecations paving the way to a modern sparse array experience.scipy.statsadded tools for survival analysis, multiple hypothesis testing, sensitivity analysis, and working with censored data.
... (truncated)
Commits
cfe8011REL: 1.11.1 rel commit [wheel build]450d8aaMerge pull request #18779 from tylerjereddy/treddy_1_11_1_prep6f942e8DOC: update 1.11.1 relnotes145cec5MAINT: fix unuran licensing0760babMAINT:linalg.det:Return scalars for singleton inputs (#18763)a1c6f99MAINT:linalg:Use only NumPy types in lu5cdc2feMAINT:linalg:Remove memcpy from lud9ac3f3FIX:linalg:Guard against possible permute_l out of bound behavior7ec5010BUG: fix handling forfactorial(..., exact=False)for 0-dim array inputs (#...90415c6BUG: Fix work array construction for various weight shapes. (#18741)- Additional commits viewable in compare view
Updates requests from 2.22.0 to 2.31.0
Release notes
Sourced from requests's releases.
v2.31.0
2.31.0 (2023-05-22)
Security
Versions of Requests between v2.3.0 and v2.30.0 are vulnerable to potential forwarding of
Proxy-Authorizationheaders to destination servers when following HTTPS redirects.When proxies are defined with user info (https://user:pass@proxy:8080), Requests will construct a
Proxy-Authorizationheader that is attached to the request to authenticate with the proxy.In cases where Requests receives a redirect response, it previously reattached the
Proxy-Authorizationheader incorrectly, resulting in the value being sent through the tunneled connection to the destination server. Users who rely on defining their proxy credentials in the URL are strongly encouraged to upgrade to Requests 2.31.0+ to prevent unintentional leakage and rotate their proxy credentials once the change has been fully deployed.Users who do not use a proxy or do not supply their proxy credentials through the user information portion of their proxy URL are not subject to this vulnerability.
Full details can be read in our Github Security Advisory and CVE-2023-32681.
v2.30.0
2.30.0 (2023-05-03)
Dependencies
⚠️ Added support for urllib3 2.0. ⚠️
This may contain minor breaking changes so we advise careful testing and reviewing https://urllib3.readthedocs.io/en/latest/v2-migration-guide.html prior to upgrading.
Users who wish to stay on urllib3 1.x can pin to
urllib3<2.v2.29.0
2.29.0 (2023-04-26)
Improvements
... (truncated)
Changelog
Sourced from requests's changelog.
2.31.0 (2023-05-22)
Security
Versions of Requests between v2.3.0 and v2.30.0 are vulnerable to potential forwarding of
Proxy-Authorizationheaders to destination servers when following HTTPS redirects.When proxies are defined with user info (
https://user:pass@proxy:8080), Requests will construct aProxy-Authorizationheader that is attached to the request to authenticate with the proxy.In cases where Requests receives a redirect response, it previously reattached the
Proxy-Authorizationheader incorrectly, resulting in the value being sent through the tunneled connection to the destination server. Users who rely on defining their proxy credentials in the URL are strongly encouraged to upgrade to Requests 2.31.0+ to prevent unintentional leakage and rotate their proxy credentials once the change has been fully deployed.Users who do not use a proxy or do not supply their proxy credentials through the user information portion of their proxy URL are not subject to this vulnerability.
Full details can be read in our Github Security Advisory and CVE-2023-32681.
2.30.0 (2023-05-03)
Dependencies
⚠️ Added support for urllib3 2.0. ⚠️
This may contain minor breaking changes so we advise careful testing and reviewing https://urllib3.readthedocs.io/en/latest/v2-migration-guide.html prior to upgrading.
Users who wish to stay on urllib3 1.x can pin to
urllib3<2.2.29.0 (2023-04-26)
Improvements
- Requests now defers chunked requests to the urllib3 implementation to improve standardization. (#6226)
- Requests relaxes header component requirements to support bytes/str subclasses. (#6356)
2.28.2 (2023-01-12)
... (truncated)
Commits
147c851v2.31.074ea7cfMerge pull request from GHSA-j8r2-6x86-q33q3022253test on pypy 3.8 and pypy 3.9 on windows and macos (#6424)b639e66test on py3.12 (#6448)d3d5044Fixed a small typo (#6452)2ad18e0v2.30.0f2629e9Remove strict parameter (#6434)87d63dev2.29.051716c4enable the warnings plugin (#6416)a7da1abtry on ubuntu 22.04 (#6418)- Additional commits viewable in compare view
Updates pillow from 6.2.1 to 10.3.0
Release notes
Sourced from pillow's releases.
10.3.0
https://pillow.readthedocs.io/en/stable/releasenotes/10.3.0.html
Changes
- CVE-2024-28219: Use strncpy to avoid buffer overflow #7928 [
@hugovk]- Use
functools.lru_cacheforhopper()#7912 [@hugovk]- Raise ValueError if seeking to greater than offset-sized integer in TIFF #7883 [
@radarhere]- Improve speed of loading QOI images #7925 [
@radarhere]- Added RGB to I;16N conversion #7920 [
@radarhere]- Add --report argument to main.py to omit supported formats #7818 [
@nulano]- Added RGB to I;16, I;16L and I;16B conversion #7918 [
@radarhere]- Fix editable installation with custom build backend and configuration options #7658 [
@nulano]- Fix putdata() for I;16N on big-endian #7209 [
@Yay295]- Determine MPO size from markers, not EXIF data #7884 [
@radarhere]- Improved conversion from RGB to RGBa, LA and La #7888 [
@radarhere]- Support FITS images with GZIP_1 compression #7894 [
@radarhere]- Use I;16 mode for 9-bit JPEG 2000 images #7900 [
@scaramallion]- Raise ValueError if kmeans is negative #7891 [
@radarhere]- Remove TIFF tag OSUBFILETYPE when saving using libtiff #7893 [
@radarhere]- Raise ValueError for negative values when loading P1-P3 PPM images #7882 [
@radarhere]- Added reading of JPEG2000 palettes #7870 [
@radarhere]- Added alpha_quality argument when saving WebP images #7872 [
@radarhere]- Fixed joined corners for ImageDraw rounded_rectangle() non-integer dimensions #7881 [
@radarhere]- Removed Python and NumPy pinning on Cygwin #7880 [
@radarhere]- Update UnidentifiedImageError and version imports #7644 [
@radarhere]- Stop reading EPS image at EOF marker #7753 [
@radarhere]- PSD layer co-ordinates may be negative #7706 [
@radarhere]- Use subprocess with CREATE_NO_WINDOW flag in ImageShow WindowsViewer #7791 [
@radarhere]- When saving GIF frame that restores to background color, do not fill identical pixels #7788 [
@radarhere]- Fixed reading PNG iCCP compression method #7823 [
@radarhere]- Allow writing IFDRational to UNDEFINED tag #7840 [
@radarhere]- Fix logged tag name when loading Exif data #7842 [
@radarhere]- Use maximum frame size in IHDR chunk when saving APNG images #7821 [
@radarhere]- Prevent opening P TGA images without a palette #7797 [
@radarhere]- Use palette when loading ICO images #7798 [
@radarhere]- Use consistent arguments for load_read and load_seek #7713 [
@radarhere]- Turn off nullability warnings for macOS SDK #7827 [
@radarhere]- Fix shift-sign issue in Convert.c #7838 [
@r-barnes]- winbuild: Refactor dependency versions into constants #7843 [
@hugovk]- Build macOS arm64 wheels natively #7852 [
@radarhere]- Fixed typo #7855 [
@radarhere]- Open 16-bit grayscale PNGs as I;16 #7849 [
@radarhere]- Handle truncated chunks at the end of PNG images #7709 [
@lajiyuan]- Match mask size to pasted image size in GifImagePlugin #7779 [
@radarhere]- Changed SupportsGetMesh protocol to be public #7841 [
@radarhere]- Release GIL while calling
WebPAnimDecoderGetNext#7782 [@evanmiller]- Fixed reading FLI/FLC images with a prefix chunk #7804 [
@twolife]- Updated package name for Tidelift #7810 [
@radarhere]- Removed unused code #7744 [
@radarhere]
... (truncated)
Changelog
Sourced from pillow's changelog.
10.3.0 (2024-04-01)
CVE-2024-28219: Use
strncpyto avoid buffer overflow #7928 [radarhere, hugovk]Deprecate
eval(), replacing it withlambda_eval()andunsafe_eval()#7927 [radarhere, hugovk]Raise
ValueErrorif seeking to greater than offset-sized integer in TIFF #7883 [radarhere]Add
--reportargument to__main__.pyto omit supported formats #7818 [nulano, radarhere, hugovk]Added RGB to I;16, I;16L, I;16B and I;16N conversion #7918, #7920 [radarhere]
Fix editable installation with custom build backend and configuration options #7658 [nulano, radarhere]
Fix putdata() for I;16N on big-endian #7209 [Yay295, hugovk, radarhere]
Determine MPO size from markers, not EXIF data #7884 [radarhere]
Improved conversion from RGB to RGBa, LA and La #7888 [radarhere]
Support FITS images with GZIP_1 compression #7894 [radarhere]
Use I;16 mode for 9-bit JPEG 2000 images #7900 [scaramallion, radarhere]
Raise ValueError if kmeans is negative #7891 [radarhere]
Remove TIFF tag OSUBFILETYPE when saving using libtiff #7893 [radarhere]
Raise ValueError for negative values when loading P1-P3 PPM images #7882 [radarhere]
Added reading of JPEG2000 palettes #7870 [radarhere]
Added alpha_quality argument when saving WebP images #7872 [radarhere]
... (truncated)
Commits
5c89d8810.3.0 version bump63cbfcfUpdate CHANGES.rst [ci skip]2776126Merge pull request #7928 from python-pillow/lcmsaeb51cbMerge branch 'main' into lcms5beb0b6Update CHANGES.rst [ci skip]cac6ffaMerge pull request #7927 from python-pillow/imagemathf5eeeacName as 'options' in lambda_eval and unsafe_eval, but '_dict' in deprecated evalfacf3afAdded release notes2a93abaUse strncpy to avoid buffer overflowa670597Update CHANGES.rst [ci skip]- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency -
@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) -
@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) -
@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) -
@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency -
@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the Security Alerts page.