Skip to content

Bump pillow from 12.3.0 to 13.0.0 - #1005

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/pillow-13.0.0
Open

dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/pillow-13.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026 •

Copy link
Copy Markdown
Contributor

Bumps pillow from 12.3.0 to 13.0.0.

Release notes

Sourced from pillow's releases.

13.0.0

https://pillow.readthedocs.io/en/stable/releasenotes/13.0.0.html

Removals

Deprecations

Documentation

Dependencies

... (truncated)

Commits
  • 293218a 13.0.0 version bump
  • 262e8e4 Update release notes for Pillow 13.0.0 (#10223)
  • af56ace Validate TIFF tag values against libtiff's own field definition before TIFFSe...
  • 570df03 Validate TIFF tag values against libtiff's own field definition before TIFFSe...
  • 53318b5 Take libtiff scanline geometry tags from the image, not tiffinfo/exif (#10226)
  • 0a87417 Bound retained TIFF tag data by stream size (#10225)
  • 11582e5 Fix heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO (#10224)
  • 8501adc Fix test
  • ec5f1cb Take libtiff scanline geometry tags from the image, not tiffinfo/exif
  • 4b63dff Share TIFF tag data budget across frames
  • Additional commits viewable in compare view

Copilot AI balanced review requested due to automatic review settings October 20, 2026 20:57
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 20, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The Conda recipe still requires Pillow 12.x, conflicting with the updated Python dependency.

1 open issue
What changed in this PR

Updates geoh5py’s Pillow dependency to version 13.

Changes:

  • Raises the Pillow requirement to ^13.0.0.
  • Refreshes locked artifacts and metadata for Pillow 13.0.0.
File Description
pyproject.toml Updates the Pillow version constraint.
poetry.lock Locks Pillow 13.0.0 and refreshes dependency metadata.

Review effort: Balanced

Comment thread pyproject.toml
h5py = "~3.15.0"
numpy = "~2.4.0"
Pillow = "^12.2.0"
Pillow = "^13.0.0"
Bumps [pillow](https://github.com/python-pillow/Pillow) from 12.3.0 to 13.0.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@12.3.0...13.0.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-version: 13.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/pillow-13.0.0 branch from 2fd5759 to a2a0e61 Compare October 27, 2026 22:38
@github-actions

Copy link
Copy Markdown
Contributor

⚠️ Force push detected - Previous Copilot review comments may no longer be relevant to the current code. Please resolve any outdated threads and re-request a Copilot review when ready.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant