FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

chore(deps): bump pillow from 12.2.0 to 12.3.0 by dependabot[bot] · Pull Request #6049 · learningequality/studio · GitHub

/ studio Public

chore(deps): bump pillow from 12.2.0 to 12.3.0 - #6049

Closed
dependabot[bot] wants to merge 1 commit into
unstablefrom
dependabot/pip/pillow-12.3.0
ConversationCommits (1)ChecksFiles changed
Closed

chore(deps): bump pillow from 12.2.0 to 12.3.0#6049
dependabot[bot] wants to merge 1 commit into
unstablefrom
dependabot/pip/pillow-12.3.0

Conversation

dependabot Bot commented on behalf of github Jul 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps pillow from 12.2.0 to 12.3.0.

Release notes

Sourced from pillow's releases.

12.3.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html

Removals

Documentation

Dependencies

Testing

... (truncated)

Commits
  • bb1d8e8 12.3.0 version bump
  • e63fc48 Add release notes for SBOM and performance improvements (#9747)
  • 13b701b Add release notes for #9679
  • 5564ca7 List methods
  • a0920fd Speed up ImageChops operations (#9738)
  • 07e9a6c Speed up Image.filter() (#9736)
  • a94578c Speed up Image.getchannel(), Image.merge(), Image.putalpha() and `Image...
  • 53e02c4 Speed up Image.fill(), Image.linear_gradient() and `Image.radial_gradient...
  • af03747 Speed up Image.resample() (#9739)
  • 5c9ca56 Speed up alpha_composite, matrix, negative, quantize (#9740)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

chore(deps): bump pillow from 12.2.0 to 12.3.0
0f880fe 
Bumps [pillow](https://github.com/python-pillow/Pillow) from 12.2.0 to 12.3.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@12.2.0...12.3.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-version: 12.3.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 20, 2026

rtibblesbot commented Jul 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

🔵 Review posted

Last updated: 2026-07-20 22:23 UTC

rtibblesbot approved these changes Jul 20, 2026
View reviewed changes

rtibblesbot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

PR #6049 bumps pillow 12.2.0 → 12.3.0 — a minor, production dependency (image resizing / thumbnails, used in utils/files.py and utils/assessment/base.py).

  • Breaking changes: none affecting Studio. The one removal — non-image ImageCms modes (#9697) — is unused here; Studio only calls Image.open/resize/LANCZOS/thumbnail and ImageFile.
  • Security fixes: none in this release.
  • Peer-dependency changes: none. Core resample/filter APIs unchanged; the rest is perf improvements, packaging (SBOM, 3.15 beta wheels), and transitive C-lib bumps.
  • CI: passing.

The [grpc] extras markers that appeared on google-api-core/googleapis-common-protos in requirements.txt are a lockfile re-resolution side effect (versions unchanged) — harmless, nothing to action.

APPROVE — minor bump, no affected APIs, CI passing.

@rtibblesbot's comments are generated by an LLM, and should be evaluated accordingly

How was this generated?

Ran a dependency-update review pipeline over the version bump:

  • Classified the bump by semver (patch / minor / major) and dependency type (production vs. development)
  • Extracted the changelog and release notes across the version range
  • Assessed compatibility with this project's usage and whether any code changes are required
  • Treated CI as the primary safety net
  • Scaled the review depth to the update's risk
  • Chose the verdict from semver risk, changelog findings, and CI status

dependabot Bot commented on behalf of github Aug 2, 2026

Copy link
Copy Markdown
Contributor Author

Looks like pillow is up-to-date now, so this is no longer needed.

dependabot Bot closed this Aug 2, 2026
dependabot Bot deleted the dependabot/pip/pillow-12.3.0 branch August 2, 2026 19:17
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
rtibblesbot rtibblesbot approved these changes
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

Back | FazBrowse Home | New Git URL