Bump pillow from 9.5.0 to 10.0.1 #5657
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps [pillow](https://github.com/python-pillow/Pillow) from 9.5.0 to 10.0.1. - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@9.5.0...10.0.1) --- updated-dependencies: - dependency-name: pillow dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependency
✅ Deploy Preview for inventree-web-pui-preview canceled.
|
|
To merge this, we will need to un-pin django-stdimage - which may require further investigation as we have a note from 2022-06-29 that django-stdimage > 6.0 breaks serialization of tasks in django-q Ref: #3273 |
|
@SchrodingersGat are you tackeling this or should we create an issue? |
|
I'll try to integrate a fix into this PR |
- Return True if the task runs or was offloaded - Improved warning information
- Check return value of offload_task - Check log output
…illow-10.0.1 # Conflicts: # InvenTree/InvenTree/tasks.py # InvenTree/InvenTree/tests.py
|
Will likely require codingjoe/django-stdimage#324 before this passes |
|
Removing from |
| @@ -37,7 +37,7 @@ drf-spectacular # DRF API documentation | |||
| feedparser # RSS newsfeed parser | |||
| gunicorn # Gunicorn web server | |||
| pdf2image # PDF to image conversion | |||
| pillow==9.5.0 # Image manipulation # FIXED 2023-07-04 as we require PIL.Image.ANTIALIAS | |||
| pillow # Image manipulation | |||
There was a problem hiding this comment.
@SchrodingersGat Unfortunately this line change breaks the inventree-brother-plugin due to brother_ql needing a fix seen in pklaus/brother_ql#143. Any suggestions on how to get this back to working?
There was a problem hiding this comment.
@atanisoft we are using a fork of brother_ql - https://github.com/matmair/brother_ql-inventree so we can just update that
There was a problem hiding this comment.
That would be great if that could be updated, can a new version be pushed for both to pick up that fix?
There was a problem hiding this comment.
New version is released, 1.1 includes the fix and seems to work
There was a problem hiding this comment.
Thanks, after shutting down and starting up the docker containers it seems to have fixed it with the newer version.
There was a problem hiding this comment.
@atanisoft good to hear! And @matmair thanks for the quick fix
Bumps pillow from 9.5.0 to 10.0.1.
Release notes
Sourced from pillow's releases.
... (truncated)
Changelog
Sourced from pillow's changelog.
... (truncated)
Commits
e34d346Updated ordera62f24010.0.1 version bumpd50250dAdded release notes for 10.0.1b4c7d4bUpdate CHANGES.rst [ci skip]730f746Updated libwebp to 1.3.2b0e2804Updated zlib to 1.36e28ed110.0.0 version bumpc827f3bMerge pull request #7246 from radarhere/deallocate39a3b1dFixed deallocating mask images8c1dc81Update CHANGES.rst [ci skip]You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.