Skip to content

Bump pillow from 4.0.0 to 6.2.0#2

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/pip/pillow-6.2.0
Closed

Bump pillow from 4.0.0 to 6.2.0#2
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/pip/pillow-6.2.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Oct 22, 2019

Bumps pillow from 4.0.0 to 6.2.0.

Release notes

Sourced from pillow's releases.

6.2.0

https://pillow.readthedocs.io/en/stable/releasenotes/6.2.0.html

6.1.0

https://pillow.readthedocs.io/en/stable/releasenotes/6.1.0.html

6.0.0

No release notes provided.

5.4.1

No release notes provided.

5.4.0

No release notes provided.

5.3.0

No release notes provided.

5.2.0

No release notes provided.

5.1.0

No release notes provided.

5.0.0

No release notes provided.

4.3.0

No release notes provided.

4.2.1

No release notes provided.

4.2.0

No release notes provided.

4.1.1

No release notes provided.

4.1.0

No release notes provided.

Changelog

Sourced from pillow's changelog.

6.2.0 (2019-10-01)

  • Catch buffer overruns #4104
    [radarhere]

  • Initialize rows_per_strip when RowsPerStrip tag is missing #4034
    [cgohlke, radarhere]

  • Raise error if TIFF dimension is a string #4103
    [radarhere]

  • Added decompression bomb checks #4102
    [radarhere]

  • Fix ImageGrab.grab DPI scaling on Windows 10 version 1607+ #4000
    [nulano, radarhere]

  • Corrected negative seeks #4101
    [radarhere]

  • Added argument to capture all screens on Windows #3950
    [nulano, radarhere]

  • Updated warning to specify when Image.frombuffer defaults will change #4086
    [radarhere]

  • Changed WindowsViewer format to PNG #4080
    [radarhere]

  • Use TIFF orientation #4063
    [radarhere]

  • Raise the same error if a truncated image is loaded a second time #3965
    [radarhere]

  • Lazily use ImageFileDirectory_v1 values from Exif #4031
    [radarhere]

  • Improved HSV conversion #4004
    [radarhere]

  • Added text stroking #3978
    [radarhere, hugovk]

  • No more deprecated bdist_wininst .exe installers #4029
    [hugovk]

  • Do not allow floodfill to extend into negative coordinates #4017
    [radarhere]

... (truncated)
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 22, 2019
@dependabot dependabot Bot force-pushed the dependabot/pip/pillow-6.2.0 branch from 857aba7 to a49a52c Compare November 7, 2019 00:07
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Nov 11, 2019

Looks like pillow is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 11, 2019
@dependabot dependabot Bot deleted the dependabot/pip/pillow-6.2.0 branch November 11, 2019 15:17
mpasternak added a commit that referenced this pull request Dec 29, 2025
============================

Usprawnienie
------------

- Ulepszono obsługę błędów w funkcji wyslij_informacje_o_platnosciach: dodano sprawdzanie wartości zwracanej przez upload_publication_fee (success=True), re-raise dla nieobsłużonych HttpException oraz NeedsPBNAuthorisationException. Komunikaty błędów wyświetlają się teraz czytelnie nad paskiem postępu (tqdm.write). (pbn_integrator_sync)
- Dodano dwa nowe raporty XLSX w module optymalizacji ewaluacji: "Raport SEDN #1" (szczegółowy per-autor) oraz "Raport SEDN #2" (zagregowany per-publikacja). Raporty zawierają dane o publikacjach z lat 2022-2025 wraz z informacją o wskazaniu przez algorytm optymalizacji. Przycisk "Pobierz wszystkie XLS (ZIP)" przeniesiono do nowej, trzeciej linii przycisków. (sedn-reports)
mpasternak added a commit that referenced this pull request May 3, 2026
…equest

Dwa fixy zatrutych testów wprowadzonych w 7b7b923 (audit-driven cleanup),
które padały TYLKO w pełnym suicie pod -n auto, deterministycznie.

#1 — multiseek 50 errors:
  test_health_check_returns_503_when_db_down robił
  monkeypatch.setattr(health.connection, "ensure_connection", boom).
  health.connection to ConnectionProxy z django.db; jego __setattr__
  forwarduje zapis na realny DatabaseWrapper w connections[default].
  Pytest monkeypatch w teardownie wykonuje setattr(target, name, oldval),
  gdzie oldval to wartość pobrana przez getattr przed testem — w teście
  bez @pytest.mark.django_db jest to bound pytest_django._blocking_wrapper
  (sesyjny block() jest aktywny). Po teście bound _blocking_wrapper trafia
  do connections[default].__dict__["ensure_connection"], co — z racji
  priorytetu instance-attr nad class-attr — czyni django_db_blocker.
  unblock() bezskutecznym dla całego workera. Pierwszy następny test
  używający DB pada w setup_databases → migrate → cursor() →
  ensure_connection() → _blocking_wrapper z RuntimeError "Database
  access not allowed". Na pełnym suicie xdist wsadzał ten test wraz z
  testami multiseek na ten sam worker, więc multiseek deterministycznie
  padał z 50 errors. W izolacji / na multiseek-only — zielono.

  Fix: patch przeniesiony na health._check_db (paraleluje już
  test_health_check_returns_503_when_redis_down). Zero side-effectu na
  DatabaseWrapper.

#2 — middleware caplog 5 fails:
  Ten sam audit-cleanup commit dodał propagate=False na logger
  django.request. Pytest caplog wpina handler na root → bez propagacji
  nie widzi tych WARNING-ów. Próba flipowania propagate=True per-test
  fixture-em okazała się zawodna w pełnym suicie (jakaś inna ścieżka
  resetuje propagate między fixturem a asercją; niezbadane).

  Fix: autouse fixture wpina caplog.handler bezpośrednio na
  django.request, niezależnie od propagate. Plus jawne
  caplog.set_level(level, logger="django.request") w 5 testach.

Wynik pełnego pytest -n auto: 3913 passed (z 3786) w 2:38 (z 7:16).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants