fix(deps): update dependency pillow to v12 by renovate[bot] · Pull Request #18 · Misty02600/PeekAPI

renovate · 2026-08-11T09:49:39Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
pillow (changelog)	`>=11.1.0,<12.0.0` → `>=12.3.0,<12.4.0`

Release Notes

python-pillow/Pillow (pillow)

`v12.3.0`

Compare Source

https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html

Removals

Remove non-image ImageCms modes #9697 [@radarhere]

Documentation

Add release notes for SBOM and performance improvements #9747 [@radarhere]
Add security release notes #9741 [@radarhere]
Add release notes for Python 3.15 beta wheels #9696 [@radarhere]
ImageFont can also be used with ImageText #9597 [@radarhere]
Additional guidelines for security reports #9659 [@wiredfool]
Fixed typo #9636 [@radarhere]
Added CVEs to 12.2.0 release notes #9591 [@radarhere]
Revise development support information in README #9583 [@aclark4life]
Add INCIDENT_RESPONSE.md #9555 [@aclark4life]
Add STRIDE threat model to security docs #9562 [@aclark4life]
Add CVEs to 12.2.0 release notes #9556 [@radarhere]
Update README with revised security policy #9553 [@radarhere]
Update security policy #9552 [@aclark4life]
Update macOS tested Python versions #9534 [@radarhere]

Dependencies

Update dependency harfbuzz to v14.2.1 #9720 [@renovate[bot]]
Update dependency mypy to v2 #9653 [@renovate[bot]]
Update dependency cibuildwheel to v4 #9665 [@renovate[bot]]
Update github-actions #9655 [@renovate[bot]]
Update dependency libavif to v1.4.2 #9652 [@renovate[bot]]
Update dependency lcms2 to v2.19.1 #9651 [@renovate[bot]]
Update dependency check-jsonschema to v0.37.2 #9650 [@renovate[bot]]
Update google/oss-fuzz digest to d872252 #9614 [@renovate[bot]]
Update dependency lcms2 to v2.19 #9609 [@renovate[bot]]
Update dependency libpng to v1.6.58 - autoclosed #9608 [@renovate[bot]]
Update dependency harfbuzz to v14 #9610 [@renovate[bot]]
Update dependency mypy to v1.20.2 #9599 [@renovate[bot]]
Update github-actions #9611 [@renovate[bot]]
Update dependency cibuildwheel to v3.4.1 #9607 [@renovate[bot]]
Move dependency versions to single JSON and enable Renovate #9559 [@hugovk]
Updated raqm to 0.10.5 #9557 [@radarhere]
Update dependency cibuildwheel to v3.4.0 #9532 [@renovate[bot]]

Testing

Remove matrix.os from benchmark #9735 [@radarhere]
Remove references to libavif patch #9734 [@radarhere]
Add benchmark tests #9654 [@akx]
Use reshape() instead of setting NumPy array shape directly #9728 [@radarhere]
Add dependencies.json to Windows cache key #9721 [@radarhere]
Increase AVIF test epsilon for loong64 #9714 [@wszqkzqk]
Add colour to Linux and Windows wheel build logs #9677 [@hugovk]
Do not test NumPy against Python 3.15 Windows AMD64 wheels #9674 [@radarhere]
Run pyroma in tox -e lint instead of pytest #9670 [@hugovk]
Update Ghostscript to 10.7.1 #9634 [@radarhere]
Update free-threading CI #9625 [@hugovk]
Increase AVIF test epsilon for riscv64 #9606 [@radarhere]
Add Fedora 44 #9594 [@radarhere]
Test Ubuntu 26.04 LTS (Resolute Raccoon) #9587 [@hugovk]
Skip EPS test_1 for Ghostscript 10.06.0 #9588 [@radarhere]
Catch subprocess.CalledProcessError in test_grab_x11 #9578 [@radarhere]
Correct feature name #9542 [@radarhere]
Skip test if FreeType is not available #9540 [@radarhere]
Remove type hint ignore #9538 [@radarhere]
Update macOS tested Python versions #9534 [@radarhere]
Remove Debian 12 and Fedora 42 from CI #9530 [@hugovk]
Remove manylinux2014 and Amazon Linux 2 #9528 [@radarhere]

Type hints

Use NumPy 2.4.6 for mypy #9705 [@radarhere]
Update dependency mypy to v2 #9653 [@renovate[bot]]
Update putpixel type hint to allow lists in xy #9585 [@radarhere]
Remove type hint ignore #9538 [@radarhere]

Other changes

Speed up ImageChops operations #9738 [@akx]
Speed up Image.filter() #9736 [@akx]
Speed up Image.getchannel(), Image.merge(), Image.putalpha() and Image.split() #9675 [@akx]
Speed up Image.fill(), Image.linear_gradient() and Image.radial_gradient(). #9737 [@akx]
Speed up Image.resample() #9739 [@akx]
Speed up alpha_composite, matrix, negative, quantize #9740 [@akx]
Remove PyErr_Clear() of "weird" exceptions #9730 [@radarhere]
Check realloc return value #9722 [@radarhere]
Add max_length to PdfStream decode() #9718 [@radarhere]
Return early when there is no fill region #9732 [@radarhere]
Allow error to be raised if PyDict_SetItemString fails #9731 [@radarhere]
Speed up Image.blend() #9649 [@akx]
Raise OverflowError if number of vertices is too large for Path #9729 [@radarhere]
Remove unused HSV and LAB matrix conversion from C #9724 [@radarhere]
Prevent reusing ImagingDecoderObject.setimage #9656 [@Serotav]
Raise ValueError if FPX tile size is not 64px by 64px #9660 [@radarhere]
Only clear error if it is BufferError #9727 [@radarhere]
Apply XOR mask to 1 and L mode CUR images #9641 [@radarhere]
Do not raise error from unknown channel ID when parsing PSD layers #9644 [@radarhere]
Raise ValueError if P;2L or P;4L data is truncated in frombytes() #9725 [@radarhere]
Embed SBOM into wheels #9679 [@hugovk]
Do not set eval() globals in ImageMath.unsafe_eval() #9576 [@radarhere]
Add Tcl/Tk license to wheels #9663 [@radarhere]
Ensure map stride is at least one full row of pixels #9719 [@radarhere]
Raise OverflowError if text width exceeds INT_MAX #9717 [@radarhere]
Raise error if image modes do not match ImageCms transform modes #9715 [@radarhere]
Use int64_t for text height #9716 [@radarhere]
Return if error occurs in Py_mod_exec slot #9712 [@radarhere]
Add decompression bomb checks to FontFile classes #9711 [@radarhere]
If C error is raised, return NULL #9706 [@radarhere]
Prevent saving 1 mode images as TGA with run-length encoding #9709 [@radarhere]
Raise ValueError if EPS BeginBinary bytecount is negative #9708 [@radarhere]
Do not DECREF tuple until tuple items are no longer used #9707 [@radarhere]
Do not update NumPy automatically #9713 [@radarhere]
Simplified code #9642 [@radarhere]
If realloc fails, do not reduce block size #9702 [@radarhere]
DECREF PyDict_GetItemRef result #9701 [@radarhere]
Use int64_t to calculate paste box dimensions #9703 [@radarhere]
Calculate JPEG2000 total_component_width for each tile in isolation #9704 [@radarhere]
Raise ValueError if value is not bytes for TIFF_BYTE or TIFF_ASCII tag #9699 [@radarhere]
Release Py_Buffer on error #9698 [@radarhere]
Use os.startfile() in WindowsViewer show_file() #9692 [@radarhere]
Validate large filter sizes when initializing RankFilter #9695 [@radarhere]
Add decompression bomb check to GdImageFile #9693 [@radarhere]
Free image bands when an error occurs while splitting an image #9694 [@radarhere]
Check PyList_Append return value #9690 [@radarhere]
Check WebPMuxNew return value #9689 [@radarhere]
Check PyCapsule_New return value #9691 [@radarhere]
Do not return negative width for text length #9623 [@radarhere]
Add args argument to METH_NOARGS methods #9687 [@radarhere]
Check ImagingNewDirty return value #9688 [@radarhere]
Use int64_t for text width #9686 [@radarhere]
Move PyDateTime_IMPORT inside Py_mod_exec slot #9580 [@radarhere]
Validate size and rank when initializing RankFilter #9661 [@radarhere]
Raise ValueError if insufficient data is read from DDS RGB file #9405 [@radarhere]
Correct IFDRational.__float__() return value #9676 [@nyxst4ck]
Correct length when accessing ImagePath.Path subscript #9685 [@radarhere]
Release reference on non-flattened sequence error #9684 [@radarhere]
Do not release Py_buffer until buf is no longer in use #9683 [@radarhere]
Do not resize macOS retina screenshots by default #9266 [@radarhere]
Add abstract BaseImageFont class #9595 [@radarhere]
Cast before multiplying #9678 [@radarhere]
Limit radius to half width or height of rounded rectangle #9561 [@radarhere]
linesize is always xsize multiplied by pixelsize #9647 [@radarhere]
Check annotate_hash_table return value #9572 [@radarhere]
Catch KeyError when checking mode from PNG IHDR chunk #9604 [@radarhere]
Only pass one argument to C expand #9664 [@radarhere]
Raise error if declared JPEG2000 marker length is too small #9666 [@radarhere]
In _dump(), use Python PPM save, instead of C #9566 [@radarhere]
Raise error consistently from inside ImagingNewArrow #9571 [@radarhere]
Simplify RankFilter.c check #9662 [@radarhere]
Support opening and saving L mode AVIF images with libavif >= 1.3.0 #9471 [@radarhere]
[pre-commit.ci] pre-commit autoupdate #9648 [@pre-commit-ci[bot]]
Apply libtiff patch to fix CVE-2026-4775 #9646 [@radarhere]
Remove duplicate code #9640 [@radarhere]
Switch iOS back to macos-26-intel #9631 [@radarhere]
Don't use list as default in PdfParser read_prev_trailer #9629 [@danigm]
Add support for Python 3.15 #9624 [@radarhere]
Do not draw line or arc if width is zero #9589 [@radarhere]
Use _accept check in WebP _open #9605 [@radarhere]
Compare dist sizes vs latest PyPI release #9621 [@hugovk]
Do not generate SBOM in scheduled run on fork #9620 [@radarhere]
Use plugin method directly when saving PDFs #9547 [@radarhere]
[pre-commit.ci] pre-commit autoupdate #9617 [@pre-commit-ci[bot]]
Set Renovate prCreation to not-pending #9616 [@radarhere]
Raise error if PNG transparency has incorrect type or length when saving #9536 [@radarhere]
If PdfParser buffer is memoryview, release it when closing #9596 [@radarhere]
Correct integer overflow in 16-bit resampling #9480 [@hayatoikoma]
SBOM: Use real versions from dependencies.json #9593 [@hugovk]
Restrict SBOM upload to only Pillow JSON #9598 [@radarhere]
Generate CycloneDX SBOM at release time via CI #9550 [@aclark4life]
Raise ValueError if ImageOps border has unsupported format #9426 [@veeceey]
Unsafe pointer dereference from unchecked Python integer in Tk initialization #9548 [@barttran2k]
Reorder renovate.json #9565 [@radarhere]
Add python-pillow GitHub Sponsors to FUNDING.yml #9563 [@aclark4life]
Correct environment URL #9558 [@radarhere]
Remove or protect secrets in Actions #9544 [@pre-commit-ci[bot]]
Move Homebrew dependencies into Brewfile #9546 [@hugovk]
Do not precompute horizontal coefficients if not horizontal resizing #9543 [@radarhere]
Fix comparison warnings #9541 [@radarhere]
Close PdfParser if error occurs during init #9539 [@radarhere]
Drop experimental Python 3.13 free-threaded wheels #9535 [@radarhere]
Update github-actions #9533 [@renovate[bot]]

`v12.2.0`

Compare Source

https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html

Documentation

Update 12.2.0 release notes #9522 [@hugovk]
Add loader plugins: AMOS abk, Atari Degas, 40+ more obscure formats via Netpbm #9482 [@bitplane]
Update Python versions #9515 [@radarhere]
Jeffrey A. Clark -> Jeffrey 'Alex' Clark #9513 [@aclark4life]
Add release notes for #9394, #9419 and #9456 #9467 [@radarhere]
Add Amiga Workbench .info loader to 3rd party plugins list #9459 [@bitplane]
Merge PFM documentation into PPM #9434 [@radarhere]
Update macOS tested Pillow versions #9431 [@radarhere]
Fix CVE number #9430 [@hugovk]

Dependencies

Update xz to 5.8.3 #9523 [@radarhere]
Update libjpeg-turbo to 3.1.4.1 #9507 [@radarhere]
Update libpng to 1.6.56 #9499 [@radarhere]
Update freetype to 2.14.3 #9485 [@radarhere]
Updated libavif to 1.4.1 #9479 [@radarhere]
Updated harfbuzz to 13.2.1 #9461 [@radarhere]
Update Ghostscript to 10.7.0 #9469 [@radarhere]
Update harfbuzz to 13.0.1 #9453 [@radarhere]
Update libavif to 1.4.0 #9460 [@radarhere]
Update freetype to 2.14.2 #9449 [@radarhere]
Update actions/download-artifact action to v8 #9451 [@renovate[bot]]
Updated libpng to 1.6.55 #9425 [@radarhere]

Testing

Cleanup .spider extension in the same test where it is added #9517 [@radarhere]
Run tests in parallel via tox for 3.5x speedup #9516 [@hugovk]
Enable colour in CI logs #9486 [@hugovk]
Update Ghostscript to 10.7.0 #9469 [@radarhere]
Simplify TGA test code #9477 [@radarhere]
Update tests to check for ValueError when encoding an empty image #9464 [@radarhere]
Upgrade CI from macos-15-intel to macos-26-intel #9454 [@hugovk]
Add check-case-conflict hook #9446 [@radarhere]
Specify platform when pulling docker image #9440 [@radarhere]
GHA: Cache libavif and webp builds for Ubuntu #9437 [@hugovk]
Update macOS tested Pillow versions #9431 [@radarhere]

Other changes

Check calloc return value #9527 [@radarhere]
Check all allocs in the Arrow tree #9488 [@wiredfool]
Reject non-numeric elements inside list coords #9526 [@hugovk]
Move variable declaration inside define #9525 [@radarhere]
Resize tall images vertically first #9524 [@radarhere]
Avoid overflow by not adding extents together #9520 [@hugovk]
Use long for glyph position #9518 [@hugovk]
Raise an error if the trailer chain loops back on itself #9519 [@hugovk]
Only read as much data from gzip-decompressed data as necessary #9521 [@hugovk]
Allow None extents in C setimage() #9504 [@radarhere]
Use critical sections to protect FontObject #9498 [@colesbury]
Add ImageText.Text.wrap() to wrap text #9286 [@radarhere]
Always call StubHandler open() when opening StubImageFile #9412 [@radarhere]
Improved BCn overflow check #9043 [@radarhere]
Image will never be None #9512 [@radarhere]
Raise EOFError when seeking too far in PSD #9388 [@radarhere]
Raise error if ImageGrab subprocess gives non-zero returncode #9321 [@radarhere]
Allow for different palette entry sizes when correcting BMP pixel data offset #9472 [@radarhere]
Ignore unspecified extra samples for TIFF separate planar configuration #9514 [@radarhere]
Add PERF to lint and fix findings #9510 [@hugovk]
Switch iOS back to macos-15-intel #9509 [@radarhere]
Catch struct.error #9505 [@radarhere]
Check PyCapsule_GetPointer and PyBytes_FromStringAndSize return values #9508 [@radarhere]
Fix missing null dereference checks #9489 [@wiredfool]
CI: Retry failed downloads #9506 [@hugovk]
Use PyModule_AddObjectRef #9503 [@radarhere]
Release reference to encoder on error #9500 [@radarhere]
Fixed AVIF and WEBP dealloc #9501 [@radarhere]
Check PyType_Ready return values #9502 [@radarhere]
Check if PyObject_CallMethod result is NULL #9494 [@radarhere]
Do not use palette from grayscale or bilevel colorspace when reading JPEG2000 images #9468 [@radarhere]
If TGA v2 extension area specifies no alpha, fill alpha channel #9478 [@radarhere]
Set image pixels individually on 32-bit Windows #9492 [@radarhere]
Add error messages before returning NULL when encoding #9493 [@radarhere]
Fix _getxy refcount leaks #9487 [@hugovk]
Fix invalid test font #9483 [@radarhere]
Add Exif tag "FrameRate" #9470 [@zhiyuanouyang]
Support reading JPEG2000 images with CMYK palettes #9456 [@radarhere]
Simplify setimage() by always passing extents #9395 [@radarhere]
If bitmap buffer is empty, do not render anything #8324 [@radarhere]
Change to ValueError when encoding an empty image #9394 [@radarhere]
Add FontFile.to_imagefont() #9419 [@fjhenigman]
[pre-commit.ci] pre-commit autoupdate #9450 [@pre-commit-ci[bot]]
Use walrus operator #9448 [@radarhere]
Only close file handle in ImagePalette.save() if it was opened internally #9444 [@bysiber]
Fix self.decode typo #9445 [@bysiber]
Fix BMP RLE delta escape reading from wrong file position #9443 [@bysiber]
Correct error check when encoding AVIF images #9442 [@radarhere]
Fix unexpected error when saving zero dimension images #9391 [@radarhere]
Use uppercase format ID for PALM #9435 [@radarhere]

`v12.1.1`

Compare Source

`v12.1.0`

Compare Source

https://pillow.readthedocs.io/en/stable/releasenotes/12.1.0.html

Deprecations

Deprecate getdata(), in favour of new get_flattened_data() #9292 [@radarhere]

Documentation

Specify APNG duration type when opening #9368 [@radarhere]
Added release notes for #9350 #9366 [@radarhere]
Update ImageMorph documentation #9349 [@radarhere]
Docs: update major bump cadence #9334 [@hugovk]
Add release notes for #9070 #9320 [@radarhere]
Updated Ubuntu version #9306 [@radarhere]
Update macOS tested Pillow versions #9265 [@radarhere]

Dependencies

Update harfbuzz to 12.3.0 #9355 [@radarhere]
Update xz to 5.8.2 #9343 [@radarhere]
Updated libjpeg-turbo to 3.1.3 #9333 [@radarhere]
Updated zlib-ng to 2.3.2 #9324 [@radarhere]
Updated libpng to 1.6.53 #9325 [@radarhere]
Update actions/checkout action to v6 #9323 [@renovate[bot]]
Update dependency mypy to v1.19.0 #9322 [@renovate[bot]]
Updated libpng to 1.6.51 #9305 [@radarhere]
Updated brotli to 1.2.0 #9284 [@radarhere]
Update libimagequant to 4.4.1 #9301 [@radarhere]
Update zlib-ng to 2.3.1, except on manylinux2014 aarch64 #9312 [@radarhere]
Updated harfbuzz to 12.2.0 #9289 [@radarhere]
Update github-actions #9277 [@renovate[bot]]

Testing

Replace pre-commit with prek #9360 [@hugovk]
Test PyQt6 on Python 3.14 on Windows #9353 [@radarhere]
Test 32-bit Windows on Windows Server 2022 #9345 [@radarhere]
Correct variable type #9335 [@radarhere]
Fix ResourceWarnings in selftest.py #9332 [@hugovk]
Fix testing good P mode BMP images #9319 [@radarhere]
Test Python 3.15 pre-release #9331 [@hugovk]
Test ImageFont.ImageFont, in case freetype2 is not supported #9287 [@radarhere]
Add Fedora 43 #9290 [@radarhere]
Remove Fedora 41 #9260 [@radarhere]

Type hints

Add ImageFile context manager #9367 [@radarhere]
Assert fp is not None #8617 [@radarhere]
Added return type to ImageFile _close_fp() #9356 [@radarhere]
Use different variables for Image and ImageFile instances #9316 [@radarhere]
Correct variable type #9335 [@radarhere]
Improve type hints #9317 [@radarhere]
Use different variables for Image and ImageFile instances #9268 [@radarhere]
Added type hints #9269 [@radarhere]
Correct getitem return type #9264 [@radarhere]

Other changes

Simplify band splitting #9291 [@radarhere]
Support saving APNG float durations #9365 [@radarhere]
Allow 1 mode images in MorphOp #9348 [@radarhere]
Use minimum supported Python version for Lint #9364 [@radarhere]
Allow for duplicate font variation styles #9362 [@radarhere]
Call parent verify method #9357 [@radarhere]
Return LUT from LutBuilder build_default_lut() #9350 [@radarhere]
Simplify WebP code #9329 [@radarhere]
Use unsigned long for DWORD #9352 [@radarhere]
Cast to UINT32 before shifting bits #9347 [@radarhere]
[pre-commit.ci] pre-commit autoupdate #9318 [@pre-commit-ci[bot]]
Allow window ID to be passed to ImageGrab.grab() on macOS #9070 [@yankeguo]
Apply encoder options when saving multiple PNG frames #9300 [@radarhere]
Read all non-zero transparency from mode 1 PNG images as 255 #9282 [@radarhere]
Support writing IFD, SIGNED_RATIONAL and InkNames TIFF tags #9276 [@radarhere]
Remove unused modes #9275 [@radarhere]
Correct allocating new color to RGBA palette #9313 [@radarhere]
Close image on ImageFont exception #9304 [@radarhere]
Reapply "Use macos-latest for iOS arm64 simulator" #9259 [[@&

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

fix(deps): update dependency pillow to v12

50bffac

Misty02600 merged commit 6981e66 into main Aug 11, 2026
5 checks passed

renovate Bot deleted the renovate/pillow-12.x branch August 11, 2026 09:53

Navigation Menu

fix(deps): update dependency pillow to v12 - #18

fix(deps): update dependency pillow to v12#18
Misty02600 merged 1 commit into
mainfrom
renovate/pillow-12.x

renovate Bot commented Aug 11, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Aug 11, 2026

Release Notes

v12.3.0

Removals

Documentation

Dependencies

Testing

Type hints

Other changes

v12.2.0

Documentation

Dependencies

Testing

Other changes

v12.1.1

v12.1.0

Deprecations

Documentation

Dependencies

Testing

Type hints

Other changes

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v12.3.0`

`v12.2.0`

`v12.1.1`

`v12.1.0`