Bump the pip group across 6 directories with 10 updates by dependabot[bot] · Pull Request #2 · l0tkaa/Python-project-Scripts

dependabot · 2026-07-26T04:03:25Z

Bumps the pip group with 1 update in the /AUTOMATION/PhotoResizing directory: pillow.
Bumps the pip group with 1 update in the /CONVERSION SCRIPTS/Currency Converter directory: pillow.
Bumps the pip group with 10 updates in the /DJANGO PROJECTS/Chat directory:

Package	From	To
pillow	`9.3.0`	`12.3.0`
bleach	`5.0.1`	`6.4.0`
gitpython	`3.1.29`	`3.1.54`
jupyter-server	`2.0.1`	`2.20.0`
jupyterlab	`3.5.2`	`4.5.10`
jupyterlab-git	`0.41.0`	`0.54.0a1`
mistune	`2.0.4`	`3.3.0`
soupsieve	`2.3.2.post1`	`2.8.4`
torch	`1.13.1`	`2.13.0`
tornado	`6.2`	`6.5.7`

Bumps the pip group with 1 update in the /IMAGES & PHOTO SCRIPTS/Compress Image directory: pillow.
Bumps the pip group with 1 update in the /IMAGES & PHOTO SCRIPTS/Image Grayscalling directory: pillow.
Bumps the pip group with 1 update in the /IMAGES & PHOTO SCRIPTS/photo editor directory: pillow.

Updates pillow from 9.2.0 to 12.3.0

Release notes

Sourced from pillow's releases.

12.3.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html

Removals

Remove non-image ImageCms modes #9697 [@radarhere]

Documentation

Add release notes for SBOM and performance improvements #9747 [@radarhere]

Add security release notes #9741 [@radarhere]

Add release notes for Python 3.15 beta wheels #9696 [@radarhere]

ImageFont can also be used with ImageText #9597 [@radarhere]

Additional guidelines for security reports #9659 [@wiredfool]

Fixed typo #9636 [@radarhere]

Added CVEs to 12.2.0 release notes #9591 [@radarhere]

Revise development support information in README #9583 [@aclark4life]

Add INCIDENT_RESPONSE.md #9555 [@aclark4life]

Add STRIDE threat model to security docs #9562 [@aclark4life]

Add CVEs to 12.2.0 release notes #9556 [@radarhere]

Update README with revised security policy #9553 [@radarhere]

Update security policy #9552 [@aclark4life]

Update macOS tested Python versions #9534 [@radarhere]

Dependencies

Update dependency harfbuzz to v14.2.1 #9720 [@renovate[bot]]

Update dependency mypy to v2 #9653 [@renovate[bot]]

Update dependency cibuildwheel to v4 #9665 [@renovate[bot]]

Update github-actions #9655 [@renovate[bot]]

Update dependency libavif to v1.4.2 #9652 [@renovate[bot]]

Update dependency lcms2 to v2.19.1 #9651 [@renovate[bot]]

Update dependency check-jsonschema to v0.37.2 #9650 [@renovate[bot]]

Update google/oss-fuzz digest to d872252 #9614 [@renovate[bot]]

Update dependency lcms2 to v2.19 #9609 [@renovate[bot]]

Update dependency libpng to v1.6.58 - autoclosed #9608 [@renovate[bot]]

Update dependency harfbuzz to v14 #9610 [@renovate[bot]]

Update dependency mypy to v1.20.2 #9599 [@renovate[bot]]

Update github-actions #9611 [@renovate[bot]]

Update dependency cibuildwheel to v3.4.1 #9607 [@renovate[bot]]

Move dependency versions to single JSON and enable Renovate #9559 [@hugovk]

Updated raqm to 0.10.5 #9557 [@radarhere]

Update dependency cibuildwheel to v3.4.0 #9532 [@renovate[bot]]

Testing

Remove matrix.os from benchmark #9735 [@radarhere]

Remove references to libavif patch #9734 [@radarhere]

Add benchmark tests #9654 [@akx]

Use reshape() instead of setting NumPy array shape directly #9728 [@radarhere]

... (truncated)

Changelog

Sourced from pillow's changelog.

Changelog (Pillow)

11.1.0 and newer

See GitHub Releases:

https://github.com/python-pillow/Pillow/releases

11.0.0 (2024-10-15)

Update licence to MIT-CMU #8460 [hugovk]

Conditionally define ImageCms type hint to avoid requiring core #8197 [radarhere]

Support writing LONG8 offsets in AppendingTiffWriter #8417 [radarhere]

Use ImageFile.MAXBLOCK when saving TIFF images #8461 [radarhere]

Do not close provided file handles with libtiff when saving #8458 [radarhere]

Support ImageFilter.BuiltinFilter for I;16* images #8438 [radarhere]

Use ImagingCore.ptr instead of ImagingCore.id #8341 [homm, radarhere, hugovk]

Updated EPS mode when opening images without transparency #8281 [Yay295, radarhere]

Use transparency when combining P frames from APNGs #8443 [radarhere]

Support all resampling filters when resizing I;16* images #8422 [radarhere]

Free memory on early return #8413 [radarhere]

Cast int before potentially exceeding INT_MAX #8402 [radarhere]

... (truncated)

Commits

bb1d8e8 12.3.0 version bump
e63fc48 Add release notes for SBOM and performance improvements (#9747)
13b701b Add release notes for #9679
5564ca7 List methods
a0920fd Speed up ImageChops operations (#9738)
07e9a6c Speed up Image.filter() (#9736)
a94578c Speed up Image.getchannel(), Image.merge(), Image.putalpha() and `Image...
53e02c4 Speed up Image.fill(), Image.linear_gradient() and `Image.radial_gradient...
af03747 Speed up Image.resample() (#9739)
5c9ca56 Speed up alpha_composite, matrix, negative, quantize (#9740)
Additional commits viewable in compare view

Updates pillow from 8.4.0 to 12.3.0

Release notes

Sourced from pillow's releases.

12.3.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html

Removals

Remove non-image ImageCms modes #9697 [@radarhere]

Documentation

Add release notes for SBOM and performance improvements #9747 [@radarhere]

Add security release notes #9741 [@radarhere]

Add release notes for Python 3.15 beta wheels #9696 [@radarhere]

ImageFont can also be used with ImageText #9597 [@radarhere]

Additional guidelines for security reports #9659 [@wiredfool]

Fixed typo #9636 [@radarhere]

Added CVEs to 12.2.0 release notes #9591 [@radarhere]

Revise development support information in README #9583 [@aclark4life]

Add INCIDENT_RESPONSE.md #9555 [@aclark4life]

Add STRIDE threat model to security docs #9562 [@aclark4life]

Add CVEs to 12.2.0 release notes #9556 [@radarhere]

Update README with revised security policy #9553 [@radarhere]

Update security policy #9552 [@aclark4life]

Update macOS tested Python versions #9534 [@radarhere]

Dependencies

Update dependency harfbuzz to v14.2.1 #9720 [@renovate[bot]]

Update dependency mypy to v2 #9653 [@renovate[bot]]

Update dependency cibuildwheel to v4 #9665 [@renovate[bot]]

Update github-actions #9655 [@renovate[bot]]

Update dependency libavif to v1.4.2 #9652 [@renovate[bot]]

Update dependency lcms2 to v2.19.1 #9651 [@renovate[bot]]

Update dependency check-jsonschema to v0.37.2 #9650 [@renovate[bot]]

Update google/oss-fuzz digest to d872252 #9614 [@renovate[bot]]

Update dependency lcms2 to v2.19 #9609 [@renovate[bot]]

Update dependency libpng to v1.6.58 - autoclosed #9608 [@renovate[bot]]

Update dependency harfbuzz to v14 #9610 [@renovate[bot]]

Update dependency mypy to v1.20.2 #9599 [@renovate[bot]]

Update github-actions #9611 [@renovate[bot]]

Update dependency cibuildwheel to v3.4.1 #9607 [@renovate[bot]]

Move dependency versions to single JSON and enable Renovate #9559 [@hugovk]

Updated raqm to 0.10.5 #9557 [@radarhere]

Update dependency cibuildwheel to v3.4.0 #9532 [@renovate[bot]]

Testing

Remove matrix.os from benchmark #9735 [@radarhere]

Remove references to libavif patch #9734 [@radarhere]

Add benchmark tests #9654 [@akx]

Use reshape() instead of setting NumPy array shape directly #9728 [@radarhere]

... (truncated)

Changelog

Sourced from pillow's changelog.

Changelog (Pillow)

11.1.0 and newer

See GitHub Releases:

https://github.com/python-pillow/Pillow/releases

11.0.0 (2024-10-15)

Update licence to MIT-CMU #8460 [hugovk]

Conditionally define ImageCms type hint to avoid requiring core #8197 [radarhere]

Support writing LONG8 offsets in AppendingTiffWriter #8417 [radarhere]

Use ImageFile.MAXBLOCK when saving TIFF images #8461 [radarhere]

Do not close provided file handles with libtiff when saving #8458 [radarhere]

Support ImageFilter.BuiltinFilter for I;16* images #8438 [radarhere]

Use ImagingCore.ptr instead of ImagingCore.id #8341 [homm, radarhere, hugovk]

Updated EPS mode when opening images without transparency #8281 [Yay295, radarhere]

Use transparency when combining P frames from APNGs #8443 [radarhere]

Support all resampling filters when resizing I;16* images #8422 [radarhere]

Free memory on early return #8413 [radarhere]

Cast int before potentially exceeding INT_MAX #8402 [radarhere]

... (truncated)

Commits

bb1d8e8 12.3.0 version bump
e63fc48 Add release notes for SBOM and performance improvements (#9747)
13b701b Add release notes for #9679
5564ca7 List methods
a0920fd Speed up ImageChops operations (#9738)
07e9a6c Speed up Image.filter() (#9736)
a94578c Speed up Image.getchannel(), Image.merge(), Image.putalpha() and `Image...
53e02c4 Speed up Image.fill(), Image.linear_gradient() and `Image.radial_gradient...
af03747 Speed up Image.resample() (#9739)
5c9ca56 Speed up alpha_composite, matrix, negative, quantize (#9740)
Additional commits viewable in compare view

Updates pillow from 9.3.0 to 12.3.0

Release notes

Sourced from pillow's releases.

12.3.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.3.0.html

Removals

Remove non-image ImageCms modes #9697 [@radarhere]

Documentation

Add release notes for SBOM and performance improvements #9747 [@radarhere]

Add security release notes #9741 [@radarhere]

Add release notes for Python 3.15 beta wheels #9696 [@radarhere]

ImageFont can also be used with ImageText #9597 [@radarhere]

Additional guidelines for security reports #9659 [@wiredfool]

Fixed typo #9636 [@radarhere]

Added CVEs to 12.2.0 release notes #9591 [@radarhere]

Revise development support information in README #9583 [@aclark4life]

Add INCIDENT_RESPONSE.md #9555 [@aclark4life]

Add STRIDE threat model to security docs #9562 [@aclark4life]

Add CVEs to 12.2.0 release notes #9556 [@radarhere]

Update README with revised security policy #9553 [@radarhere]

Update security policy #9552 [@aclark4life]

Update macOS tested Python versions #9534 [@radarhere]

Dependencies

Update dependency harfbuzz to v14.2.1 #9720 [@renovate[bot]]

Update dependency mypy to v2 #9653 [@renovate[bot]]

Update dependency cibuildwheel to v4 #9665 [@renovate[bot]]

Update github-actions #9655 [@renovate[bot]]

Update dependency libavif to v1.4.2 #9652 [@renovate[bot]]

Update dependency lcms2 to v2.19.1 #9651 [@renovate[bot]]

Update dependency check-jsonschema to v0.37.2 #9650 [@renovate[bot]]

Update google/oss-fuzz digest to d872252 #9614 [@renovate[bot]]

Update dependency lcms2 to v2.19 #9609 [@renovate[bot]]

Update dependency libpng to v1.6.58 - autoclosed #9608 [@renovate[bot]]

Update dependency harfbuzz to v14 #9610 [@renovate[bot]]

Update dependency mypy to v1.20.2 #9599 [@renovate[bot]]

Update github-actions #9611 [@renovate[bot]]

Update dependency cibuildwheel to v3.4.1 #9607 [@renovate[bot]]

Move dependency versions to single JSON and enable Renovate #9559 [@hugovk]

Updated raqm to 0.10.5 #9557 [@radarhere]

Update dependency cibuildwheel to v3.4.0 #9532 [@renovate[bot]]

Testing

Remove matrix.os from benchmark #9735 [@radarhere]

Remove references to libavif patch #9734 [@radarhere]

Add benchmark tests #9654 [@akx]

Use reshape() instead of setting NumPy array shape directly #9728 [@radarhere]

... (truncated)

Changelog

Sourced from pillow's changelog.

Changelog (Pillow)

11.1.0 and newer

See GitHub Releases:

https://github.com/python-pillow/Pillow/releases

11.0.0 (2024-10-15)

Update licence to MIT-CMU #8460 [hugovk]

Conditionally define ImageCms type hint to avoid requiring core #8197 [radarhere]

Support writing LONG8 offsets in AppendingTiffWriter #8417 [radarhere]

Use ImageFile.MAXBLOCK when saving TIFF images #8461 [radarhere]

Do not close provided file handles with libtiff when saving #8458 [radarhere]

Support ImageFilter.BuiltinFilter for I;16* images #8438 [radarhere]

Use ImagingCore.ptr instead of ImagingCore.id #8341 [homm, radarhere, hugovk]

Updated EPS mode when opening images without transparency #8281 [Yay295, radarhere]

Use transparency when combining P frames from APNGs #8443 [radarhere]

Support all resampling filters when resizing I;16* images #8422 [radarhere]

Free memory on early return #8413 [radarhere]

Cast int before potentially exceeding INT_MAX #8402 [radarhere]

... (truncated)

Commits

bb1d8e8 12.3.0 version bump
e63fc48 Add release notes for SBOM and performance improvements (#9747)
13b701b Add release notes for #9679
5564ca7 List methods
a0920fd Speed up ImageChops operations (#9738)
07e9a6c Speed up Image.filter() (#9736)
a94578c Speed up Image.getchannel(), Image.merge(), Image.putalpha() and `Image...
53e02c4 Speed up Image.fill(), Image.linear_gradient() and `Image.radial_gradient...
af03747 Speed up Image.resample() (#9739)
5c9ca56 Speed up alpha_composite, matrix, negative, quantize (#9740)
Additional commits viewable in compare view

Updates bleach from 5.0.1 to 6.4.0

Changelog

Sourced from bleach's changelog.

Version 6.4.0 (June 5th, 2026)

NOTE: 2026-06-05: Bleach is no longer maintained. There will be no future releases including for security issues. See issue: <https://github.com/mozilla/bleach/issues/698>__

Backwards incompatible changes

Dropped support for pypy 3.10. (#764)

Security fixes

Fix bug 2023812 / GHSA-8rfp-98v4-mmr6.

Fix XSS issue with sanitize_uri_value where disallowed schemes with Unicode invisible characters wouldn't be rejected.

For example::

import bleach payload1 = 'Click' result1 = bleach.clean(payload1) print(repr(result1))

outputs::

'Click'

See the advisory for details.

Fix GHSA-gj48-438w-jh9v.

Fix issue where URI sanitization wasn't happening in formaction attributes.

See the advisory for details.

Bug fixes

Add support for pypy 3.11. (#764)

Drop version max in tinycss2 pin. (#772)

This removes one of the things we had to keep checking and updating. Users now own the responsibility for correctness with the version of tinycss2 they're using.

Version 6.3.0 (October 27th, 2025)

... (truncated)

Commits

f0355a7 fix: fix last release date in CHANGES
ae4e8a2 chore: bleach 6.4.0 and final release
970df58 fix: uri-sanitization in formaction attributes
7c4867c fix: xss bypass in allowed protocol test using unicode invisible characters
913ab75 fix: reduce redundancy in workflow jobs
218c15a fix: rework pip caching
4f0b097 fix: fix tox platform restrictions
e95a79d chore: update pytest
91539d4 Bump actions/cache from 5.0.3 to 5.0.4
cd47b4c fix: handle left-angle-bracket that's not a tag (#733)
Additional commits viewable in compare view

Updates gitpython from 3.1.29 to 3.1.54

Release notes

Sourced from gitpython's releases.

3.1.54 - Security

What's Changed

Harden unsafe Git option validation by @Byron in gitpython-developers/GitPython#2180

Full Changelog: gitpython-developers/GitPython@3.1.53...3.1.54

3.1.53 - Security

What's Changed

feat(submodule): add deinit method to Submodule (#2014) by @mvanhorn in gitpython-developers/GitPython#2129

typing: introduce sensible basedpyright defaults by @Byron in gitpython-developers/GitPython#2174

fix: make submodule.update() after submodule.deinit() work by @Byron in gitpython-developers/GitPython#2175

Fix commit hooks respecting core.hooksPath by @Siesta0217 in gitpython-developers/GitPython#2159

fix: validate config section delimiters by @Byron in gitpython-developers/GitPython#2176

New Contributors

@Siesta0217 made their first contribution in gitpython-developers/GitPython#2159

Full Changelog: gitpython-developers/GitPython@3.1.52...3.1.53

3.1.52 Security

GHSA-rwj8-pgh3-r573: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

What's Changed

Skip cross-drive relative config test on Windows by @Byron in gitpython-developers/GitPython#2171

fix: preserve literal clone URLs by @Byron in gitpython-developers/GitPython#2172

Full Changelog: gitpython-developers/GitPython@3.1.51...3.1.52

3.1.51 - Security

What's Changed

Add AI-disclosure and quality requirements to the contribution guidelines by @Byron in gitpython-developers/GitPython#2143

docs(cmd): clarify Git.execute() string vs list command argument by @mvanhorn in gitpython-developers/GitPython#2144

Rewrite Git.execute() command parameter docstring per #2146 by @EliahKagan in gitpython-developers/GitPython#2147

Document init script behavior with multiple master remotes by @EliahKagan in gitpython-developers/GitPython#2148

Bump git/ext/gitdb from 335c0f6 to 0a019a2 by @dependabot[bot] in gitpython-developers/GitPython#2149

Support relative worktree paths (git 2.48+ worktree.useRelativePaths) by @elovelan in gitpython-developers/GitPython#2151

Defer xfail condition evaluation with xfail_if_raises context manager by @elovelan in gitpython-developers/GitPython#2153

Run more submodule tests on Cygwin (fix flaky xfails) by @EliahKagan in gitpython-developers/GitPython#2154

Cut xtrace noise from POSIX-ownership diagnostic steps by @EliahKagan in gitpython-developers/GitPython#2156

Support index diffs against the empty tree by @puneetdixit200 in gitpython-developers/GitPython#2155

refactor: seperate out Progress type by @LoeschMaximilian in gitpython-developers/GitPython#2157

Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.12 to 0.15.15 in the pre-commit group by @dependabot[bot] in gitpython-developers/GitPython#2160

Bump actions/checkout from 6 to 7 by @dependabot[bot] in gitpython-developers/GitPython#2164

Bump git/ext/gitdb from 0a019a2 to 4950ea9 by @dependabot[bot] in gitpython-developers/GitPython#2165

Bump https://github.com/astral-sh/ruff-pre-commit from v0.15.15 to 0.15.20 in the pre-commit group by @dependabot[bot] in gitpython-developers/GitPython#2166

Add Commit.is_shallow property; document stats() limitation at shallow boundary by @harshitayadavv in gitpython-developers/GitPython#2167

Allow relative config paths with includes by @Byron in gitpython-developers/GitPython#2169

Reject abbreviated forms of unsafe git options by @Byron in gitpython-developers/GitPython#2168

... (truncated)

Commits

e59d9ba prepare next release
a4dc70d Merge pull request #2180 from gitpython-developers/single-char-kwarg
1d51b89 fix: guard diff output options
ffcb535 fix: reject unsafe clone templates
e8d0fbf fix: validate split short-option values
faf3c09 prepare for security fix
6a5eb6a Merge pull request #2176 from gitpython-developers/fix-config-injection
1ed1b92 fix: validate config section delimiters
354eb2f Merge pull request #2159 from Siesta0217/fix-core-hooks-path-commit-hooks
9bc287a Address review feedback about hook resolution
Additional commits viewable in compare view

Updates jupyter-server from 2.0.1 to 2.20.0

Release notes

Sourced from jupyter-server's releases.

v2.20.0

2.20.0

(Full Changelog)

Security fixes

CVE-2026-44727 GHSA-fcw5-x6j4-ccmp

Enhancements made

Fix confusing terminal output when using ServerApp.ip=0.0.0.0 #1643 (@Yann-P, @minrk)

Add a toggle to enable curve encryption for all kernels that support it #1638 (@krassowski, @Carreau, @ianthomas23, @minrk)

Bugs fixed

Grab the port from bind_sockets in case its different #1651 (@choldgraf, @krassowski)

Maintenance and upkeep improvements

Fix test_authorizer having a spurious comma in params #1664 (@krassowski)

Add a reminder to merge GHSA before release #1659 (@Yann-P, @Carreau)

Exclude problematic pywinpty 3.0.4 version #1658 (@krassowski)

ci: explicitly pass base-setup inputs to fix strict validation failures #1626 (@Carreau, @Copilot)

Documentation improvements

Align docs for curve encryption with latest JEP version #1660 (@krassowski, @Carreau)

Remove PGP key from docs #1653 (@Yann-P, @krassowski)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@Carreau (activity) | @choldgraf (activity) | @Copilot (activity) | @ianthomas23 (activity) | @krassowski (activity) | @minrk (activity) | @Yann-P (activity)

v2.19.0

2.19.0

(Full Changelog)

Enhancements made

... (truncated)

Changelog

Sourced from jupyter-server's changelog.

2.20.0

(Full Changelog)

Enhancements made

Fix confusing terminal output when using ServerApp.ip=0.0.0.0 #1643 (@Yann-P, @minrk)

Add a toggle to enable curve encryption for all kernels that support it #1638 (@krassowski, @Carreau, @ianthomas23, @minrk)

Bugs fixed

Grab the port from bind_sockets in case its different #1651 (@choldgraf, @krassowski)

Maintenance and upkeep improvements

Fix test_authorizer having a spurious comma in params #1664 (@krassowski)

Add a reminder to merge GHSA before release #1659 (@Yann-P, @Carreau)

Exclude problematic pywinpty 3.0.4 version #1658 (@krassowski)

ci: explicitly pass base-setup inputs to fix strict validation failures #1626 (@Carreau, @Copilot)

Documentation improvements

Align docs for curve encryption with latest JEP version #1660 (@krassowski, @Carreau)

Remove PGP key from docs #1653 (@Yann-P, @krassowski)

Contributors to this release

The following people contributed discussions, new ideas, code and documentation contributions, and review. See our definition of contributors.

(GitHub contributors page for this release)

@Carreau (activity) | @choldgraf (activity) | @Copilot (activity) | @ianthomas23 (activity) | @krassowski (activity) | @minrk (activity) | @Yann-P (activity)

2.19.0

(Full Changelog)

Enhancements made

Return unresolved stanza when kernel scope is unavailable for resolvePath (instead of failing...
Description has been truncated

Bumps the pip group with 1 update in the /AUTOMATION/PhotoResizing directory: [pillow](https://github.com/python-pillow/Pillow). Bumps the pip group with 1 update in the /CONVERSION SCRIPTS/Currency Converter directory: [pillow](https://github.com/python-pillow/Pillow). Bumps the pip group with 10 updates in the /DJANGO PROJECTS/Chat directory: | Package | From | To | | --- | --- | --- | | [pillow](https://github.com/python-pillow/Pillow) | `9.3.0` | `12.3.0` | | [bleach](https://github.com/mozilla/bleach) | `5.0.1` | `6.4.0` | | [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.29` | `3.1.54` | | [jupyter-server](https://github.com/jupyter-server/jupyter_server) | `2.0.1` | `2.20.0` | | [jupyterlab](https://github.com/jupyterlab/jupyterlab) | `3.5.2` | `4.5.10` | | [jupyterlab-git](https://github.com/jupyterlab/jupyterlab-git) | `0.41.0` | `0.54.0a1` | | [mistune](https://github.com/lepture/mistune) | `2.0.4` | `3.3.0` | | [soupsieve](https://github.com/facelessuser/soupsieve) | `2.3.2.post1` | `2.8.4` | | [torch](https://github.com/pytorch/pytorch) | `1.13.1` | `2.13.0` | | [tornado](https://github.com/tornadoweb/tornado) | `6.2` | `6.5.7` | Bumps the pip group with 1 update in the /IMAGES & PHOTO SCRIPTS/Compress Image directory: [pillow](https://github.com/python-pillow/Pillow). Bumps the pip group with 1 update in the /IMAGES & PHOTO SCRIPTS/Image Grayscalling directory: [pillow](https://github.com/python-pillow/Pillow). Bumps the pip group with 1 update in the /IMAGES & PHOTO SCRIPTS/photo editor directory: [pillow](https://github.com/python-pillow/Pillow). Updates `pillow` from 9.2.0 to 12.3.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@9.2.0...12.3.0) Updates `pillow` from 8.4.0 to 12.3.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@9.2.0...12.3.0) Updates `pillow` from 9.3.0 to 12.3.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@9.2.0...12.3.0) Updates `bleach` from 5.0.1 to 6.4.0 - [Changelog](https://github.com/mozilla/bleach/blob/main/CHANGES) - [Commits](mozilla/bleach@v5.0.1...v6.4.0) Updates `gitpython` from 3.1.29 to 3.1.54 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.29...3.1.54) Updates `jupyter-server` from 2.0.1 to 2.20.0 - [Release notes](https://github.com/jupyter-server/jupyter_server/releases) - [Changelog](https://github.com/jupyter-server/jupyter_server/blob/main/CHANGELOG.md) - [Commits](jupyter-server/jupyter_server@v2.0.1...v2.20.0) Updates `jupyterlab` from 3.5.2 to 4.5.10 - [Release notes](https://github.com/jupyterlab/jupyterlab/releases) - [Changelog](https://github.com/jupyterlab/jupyterlab/blob/main/RELEASE.md) - [Commits](https://github.com/jupyterlab/jupyterlab/compare/@jupyterlab/vdom@3.5.2...@jupyterlab/lsp@4.5.10) Updates `jupyterlab-git` from 0.41.0 to 0.54.0a1 - [Release notes](https://github.com/jupyterlab/jupyterlab-git/releases) - [Changelog](https://github.com/jupyterlab/jupyterlab-git/blob/main/CHANGELOG.md) - [Commits](jupyterlab/jupyterlab-git@v0.41.0...v0.54.0a1) Updates `mistune` from 2.0.4 to 3.3.0 - [Release notes](https://github.com/lepture/mistune/releases) - [Changelog](https://github.com/lepture/mistune/blob/main/docs/changes.rst) - [Commits](lepture/mistune@v2.0.4...v3.3.0) Updates `soupsieve` from 2.3.2.post1 to 2.8.4 - [Release notes](https://github.com/facelessuser/soupsieve/releases) - [Commits](facelessuser/soupsieve@2.3.2.post1...2.8.4) Updates `torch` from 1.13.1 to 2.13.0 - [Release notes](https://github.com/pytorch/pytorch/releases) - [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md) - [Commits](pytorch/pytorch@v1.13.1...v2.13.0) Updates `tornado` from 6.2 to 6.5.7 - [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst) - [Commits](tornadoweb/tornado@v6.2.0...v6.5.7) Updates `pillow` from 8.2.0 to 12.3.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@9.2.0...12.3.0) Updates `pillow` from 8.3.1 to 12.3.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@9.2.0...12.3.0) Updates `pillow` from 8.3.1 to 12.3.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@9.2.0...12.3.0) --- updated-dependencies: - dependency-name: pillow dependency-version: 12.3.0 dependency-type: direct:production dependency-group: pip - dependency-name: pillow dependency-version: 12.3.0 dependency-type: direct:production dependency-group: pip - dependency-name: pillow dependency-version: 12.3.0 dependency-type: direct:production dependency-group: pip - dependency-name: bleach dependency-version: 6.4.0 dependency-type: direct:production dependency-group: pip - dependency-name: gitpython dependency-version: 3.1.54 dependency-type: direct:production dependency-group: pip - dependency-name: jupyter-server dependency-version: 2.20.0 dependency-type: direct:production dependency-group: pip - dependency-name: jupyterlab dependency-version: 4.5.10 dependency-type: direct:production dependency-group: pip - dependency-name: jupyterlab-git dependency-version: 0.54.0a1 dependency-type: direct:production dependency-group: pip - dependency-name: mistune dependency-version: 3.3.0 dependency-type: direct:production dependency-group: pip - dependency-name: soupsieve dependency-version: 2.8.4 dependency-type: direct:production dependency-group: pip - dependency-name: torch dependency-version: 2.13.0 dependency-type: direct:production dependency-group: pip - dependency-name: tornado dependency-version: 6.5.7 dependency-type: direct:production dependency-group: pip - dependency-name: pillow dependency-version: 12.3.0 dependency-type: direct:production dependency-group: pip - dependency-name: pillow dependency-version: 12.3.0 dependency-type: direct:production dependency-group: pip - dependency-name: pillow dependency-version: 12.3.0 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 26, 2026

Navigation Menu

Bump the pip group across 6 directories with 10 updates - #2

Bump the pip group across 6 directories with 10 updates#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/AUTOMATION/PhotoResizing/pip-409e527aef

dependabot Bot commented on behalf of github Jul 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 26, 2026

12.3.0

Removals

Documentation

Dependencies

Testing

Changelog (Pillow)

11.1.0 and newer

11.0.0 (2024-10-15)

12.3.0

Removals

Documentation

Dependencies

Testing

Changelog (Pillow)

11.1.0 and newer

11.0.0 (2024-10-15)

12.3.0

Removals

Documentation

Dependencies

Testing

Changelog (Pillow)

11.1.0 and newer

11.0.0 (2024-10-15)

Version 6.4.0 (June 5th, 2026)

Version 6.3.0 (October 27th, 2025)

3.1.54 - Security

What's Changed

3.1.53 - Security

What's Changed

New Contributors

3.1.52 Security

What's Changed

3.1.51 - Security

What's Changed

v2.20.0

2.20.0

Security fixes

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Documentation improvements

Contributors to this release

v2.19.0

2.19.0

Enhancements made

2.20.0

Enhancements made

Bugs fixed

Maintenance and upkeep improvements

Documentation improvements

Contributors to this release

2.19.0

Enhancements made

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants