Bump cairosvg from 2.1.3 to 2.6.0

[dependabot]

Bumps cairosvg from 2.1.3 to 2.6.0.

Release notes

Sourced from cairosvg's releases.

2.6.0

• Drop support of Python 3.5 and 3.6, add support of Python 3.9, 3.10 and 3.11
• Support crispEdges value for text antialiasing
• Don’t crash when including CMYK images
• Only update docstrings when not optimized
• Don’t restore current point after empty paths
• Assume that 1ch equals 0.5em
• Fix various deprecation warnings

2.5.2

• Fix marker path scale

2.5.1

WARNING: this is a security update.

When processing SVG files, CairoSVG was using two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS).

If an attacker provided a malicious SVG, it could make CairoSVG get stuck processing the file for a very long time.

Other bug fixes:

• Fix marker positions for unclosed paths
• Follow hint when only output_width or output_height is set
• Handle opacity on raster images
• Don’t crash when use tags reference unknown tags
• Take care of the next letter when A/a is replaced by l
• Fix misalignment in node.vertices

2.5.0

• Drop support of Python 3.5, add support of Python 3.9.
• Add EPS export
• Add background-color, negate-colors, and invert-images options
• Improve support for font weights
• Fix opacity of patterns and gradients
• Support auto-start-reverse value for orient
• Draw images contained in defs
• Add Exif transposition support
• Handle dominant-baseline
• Support transform-origin

2.4.2

• Fix race condition in tests
• Fix scale for images with no viewBox

2.4.1

• Fix the --scale parameter
• Allow href attributes with no namespace
• Fix the tree root detection

2.4.0

... (truncated)

Changelog

Sourced from cairosvg's changelog.

Version 2.6.0 released on 2023-01-12

• Drop support of Python 3.5 and 3.6, add support of Python 3.9, 3.10 and 3.11
• Support crispEdges value for text antialiasing
• Don’t crash when including CMYK images
• Only update docstrings when not optimized
• Don’t restore current point after empty paths
• Assume that 1ch equals 0.5em
• Fix various deprecation warnings

Version 2.5.2 released on 2021-03-06

• Fix marker path scale

Version 2.5.1 released on 2021-01-06

WARNING: this is a security update.

When processing SVG files, CairoSVG was using two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS).

If an attacker provided a malicious SVG, it could make CairoSVG get stuck processing the file for a very long time.

Other bug fixes:

• Fix marker positions for unclosed paths
• Follow hint when only output_width or output_height is set
• Handle opacity on raster images
• Don’t crash when use tags reference unknown tags
• Take care of the next letter when A/a is replaced by l
• Fix misalignment in node.vertices

Version 2.5.0 released on 2020-10-29

• Drop support of Python 3.5, add support of Python 3.9.
• Add EPS export
• Add background-color, negate-colors, and invert-images options
• Improve support for font weights
• Fix opacity of patterns and gradients
• Support auto-start-reverse value for orient
• Draw images contained in defs
• Add Exif transposition support

... (truncated)

Commits

• f5170f8 Version 2.6.0
• c25a7bf Merge pull request #372 from mscroggs/mscroggs/python-311-deprecation-warning
• 9f501df Didn't mean to add -W error
• 1fdbcd1 Remove python 3.6 (beyond end-of-life) and add python 3.11
• 520968f getdefaultlocale -> getlocale
• adf1fd4 Use pytest instead of setup.py test in README
• 121420d Fully remove pytest command
• 66bbb8e Don’t use pytest plugins anymore
• 82b9283 Don’t use deprecated license_file key anymore
• 95f1107 Use pathlib and importlib instead of deprecated os.path and imp
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov-commenter]

Codecov Report

Base: 86.83% // Head: 86.83% // No change to project coverage 👍

Coverage data is based on head (0527b02) compared to base (095dabe).
Patch has no changes to coverable lines.

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #463   +/-   ##
=======================================
  Coverage   86.83%   86.83%           
=======================================
  Files          36       36           
  Lines         448      448           
=======================================
  Hits          389      389           
  Misses         59       59           

Impacted Files	Coverage Δ
setup.py	0.00% <ø> (ø)

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report at Codecov.
📢 Do you have feedback about the report comment? Let us know in this issue.