• 124f4ad 2024.06.02 (#291)
• c2196ce --- (#290)
• fefdeec Bump actions/checkout from 4.1.4 to 4.1.5 (#289)
• 3c5fb15 Bump actions/download-artifact from 4.1.6 to 4.1.7 (#286)
• 4a9569a Bump actions/checkout from 4.1.2 to 4.1.4 (#287)
• 1fc8086 Bump peter-evans/create-pull-request from 6.0.4 to 6.0.5 (#288)
• ad52dce Bump peter-evans/create-pull-request from 6.0.3 to 6.0.4 (#283)
• 651904f Bump actions/upload-artifact from 4.3.1 to 4.3.3 (#284)
• 84fcfba Bump actions/download-artifact from 4.1.4 to 4.1.6 (#285)
• 46b8057 Bump peter-evans/create-pull-request from 6.0.2 to 6.0.3 (#282)
• Additional commits viewable in compare view

Sourced from future's releases.

v1.0.0

The new version number of 1.0.0 indicates that the python-future project, like Python 2, is now done.

The most important change in this release is adding support for Python 3.12 (ba1cc50 and a6222d2 and bcced95).

This release also includes these fixes:

• Small updates to the docs
• Add SECURITY.md describing security policy (0598d1b)
• Fix pasteurize: NameError: name 'unicode' is not defined (de68c10)
• Move CI to GitHub Actions (8cd11e8)
• Add setuptools to requirements for building docs (0c347ff)
• Fix typos in docs (350e87a)
• Make the fix_unpacking fixer more robust (de68c10)
• Small improvements to shell scripts according to shellcheck (6153844)

Sourced from future's changelog.

.. _whats-old:

Changes in previous versions

---

Changes in the most recent major version are here: :ref:whats-new.

• 2bdbfa5 Tidy up README
• a7097f8 Update docs
• e32250e Update docs pointing to changelog
• dde60ad Move old "What's New" entries to the change log
• b2ea420 Remove hacky logo from docs
• a10a78b Update "What's New"
• 9f87630 Update the FAQ entries on compatibility and contributing
• f4a1f04 Docs: replace http links with https
• 30c525e Merge branch 'master' of https://github.com/PythonCharmers/python-future
• 70b36a8 Disable Python 2.6 CI tests for now
• Additional commits viewable in compare view

Sourced from pillow's releases.

10.4.0

https://pillow.readthedocs.io/en/stable/releasenotes/10.4.0.html

Changes

• Raise FileNotFoundError if show_file() path does not exist #8178 [@​radarhere]
• Improved reading 16-bit TGA images with colour #7965 [@​Yay295]
• Fixed processing multiple JPEG EXIF markers #8127 [@​radarhere]
• Do not preserve EXIFIFD tag by default when saving TIFF images #8110 [@​radarhere]
• Added ImageFont.load_default_imagefont() #8086 [@​radarhere]
• Added Image.WARN_POSSIBLE_FORMATS #8063 [@​radarhere]
• Do not presume "xmp" info simply because "XML:com.adobe.xmp" info exists #8173 [@​radarhere]
• Remove zero-byte end padding when parsing any XMP data #8171 [@​radarhere]
• Do not detect Ultra HDR images as MPO #8056 [@​radarhere]
• Raise SyntaxError specific to JP2 #8146 [@​Yay295]
• Do not use first frame duration for other frames when saving APNG images #8104 [@​radarhere]
• Consider I;16 pixel size when using a 1 mode mask #8112 [@​radarhere]
• When saving multiple PNG frames, convert to mode rather than raw mode #8087 [@​radarhere]
• Added byte support to FreeTypeFont #8141 [@​radarhere]
• Allow float center for rotate operations #8114 [@​radarhere]
• Do not read layers immediately when opening PSD images #8039 [@​radarhere]
• Restore original thread state #8065 [@​radarhere]
• Read IM and TIFF images as RGB, rather than RGBX #7997 [@​radarhere]
• Only preserve TIFF IPTC_NAA_CHUNK tag if type is BYTE or UNDEFINED #7948 [@​radarhere]
• Prevent extra EPS header validations #8144 [@​Yay295]
• Clarify ImageDraw2 error message when size is missing #8165 [@​radarhere]
• Support unpacking more rawmodes to RGBA palettes #7966 [@​radarhere]
• Removed support for Qt 5 #8159 [@​radarhere]
• Improve ImageFont.freetype support for XDG directories on Linux #8135 [@​mamg22]
• Improved consistency of XMP handling #8069 [@​radarhere]
• Use pkg-config to help find libwebp and raqm #8142 [@​radarhere]
• Renamed C transform2 to transform #8113 [@​radarhere]
• Updated nasm to 2.16.03 #7990 [@​radarhere]
• [pre-commit.ci] pre-commit autoupdate #8100 [@​pre-commit-ci]
• Updated ImageCms.createProfile colorTemp default and docstring #8096 [@​radarhere]
• Added ImageDraw circle() #8085 [@​void4]
• Don't reuse variable name #8082 [@​Yay295]
• Use functools.cached_property in GifImagePlugin #8037 [@​radarhere]
• Add mypy target to Makefile #8077 [@​Yay295]
• Added Python 3.13 beta wheels #8071 [@​radarhere]
• Parse _version contents instead of using exec() #8050 [@​radarhere]
• Lint fixes #8068 [@​radarhere]
• Fix type errors #8064 [@​radarhere]
• Added MPEG accept function #7999 [@​radarhere]
• Added more modes to Image.MODES #7984 [@​radarhere]
• [pre-commit.ci] pre-commit autoupdate #8044 [@​pre-commit-ci]
• Do not use percent format in strings #8045 [@​radarhere]
• Changed string formatting to f-strings #8043 [@​mrKazzila]
• Removed direct invocation of setup.py #8027 [@​radarhere]
• Update ExifTags.py #8020 [@​CTimmerman]

... (truncated)

Sourced from pillow's changelog.

10.4.0 (2024-07-01)

• Raise FileNotFoundError if show_file() path does not exist #8178 [radarhere]

• Improved reading 16-bit TGA images with colour #7965 [Yay295, radarhere]

• Deprecate non-image ImageCms modes #8031 [radarhere]

• Fixed processing multiple JPEG EXIF markers #8127 [radarhere]

• Do not preserve EXIFIFD tag by default when saving TIFF images #8110 [radarhere]

• Added ImageFont.load_default_imagefont() #8086 [radarhere]

• Added Image.WARN_POSSIBLE_FORMATS #8063 [radarhere]

• Remove zero-byte end padding when parsing any XMP data #8171 [radarhere]

• Do not detect Ultra HDR images as MPO #8056 [radarhere]

• Raise SyntaxError specific to JP2 #8146 [Yay295, radarhere]

• Do not use first frame duration for other frames when saving APNG images #8104 [radarhere]

• Consider I;16 pixel size when using a 1 mode mask #8112 [radarhere]

• When saving multiple PNG frames, convert to mode rather than raw mode #8087 [radarhere]

• Added byte support to FreeTypeFont #8141 [radarhere]

• Allow float center for rotate operations #8114 [radarhere]

• Do not read layers immediately when opening PSD images #8039 [radarhere]

... (truncated)

• 9b4fae7 10.4.0 version bump
• b55d74b Update CHANGES.rst [ci skip]
• 8daf550 Merge pull request #8178 from radarhere/imageshow
• c6d8c58 Merge pull request #7965 from Yay295/patch-3
• c9ec76a Raise FileNotFoundError if show_file() path does not exist
• b48d175 Update CHANGES.rst [ci skip]
• 4d6dff3 Merge pull request #8031 from radarhere/imagingcms_modes
• 70b3815 Merge pull request #8127 from radarhere/multiple_exif_markers
• 88cd6d4 Rearranged comments
• 41426a6 Merge pull request #8110 from radarhere/exififd
• Additional commits viewable in compare view

Sourced from pyinstaller's releases.

v6.8.0

Please see the v6.8.0 section of the changelog for a list of the changes since v6.7.0.

v6.7.0

Please see the v6.7.0 section of the changelog for a list of the changes since v6.6.0.

v6.6.0

Please see the v6.6.0 section of the changelog for a list of the changes since v6.5.0.

v6.5.0

Please see the v6.5.0 section of the changelog for a list of the changes since v6.4.0.

v6.4.0

Please see the v6.4.0 section of the changelog for a list of the changes since v6.3.0.

v6.3.0

Please see the v6.3.0 section of the changelog for a list of the changes since v6.2.0.

v6.2.0

Please see the v6.2.0 section of the changelog for a list of the changes since v6.1.0.

v6.1.0

Please see the v6.1.0 section of the changelog for a list of the changes since v6.0.0.

v6.0.0

Please see the v6.0.0 section of the changelog for a list of the changes since v5.13.2.

v5.13.2

Please see the v5.13.2 section of the changelog for a list of the changes since v5.13.1.

Sourced from pyinstaller's changelog.

6.8.0 (2024-06-08)

Bugfix

* (macOS) When running ``codesign`` utility on macOS, use hard-coded absolute
  path (``/usr/bin/codesign``) to avoid errors when user has the ``codesign``
  from `sigtool <https://github.com/thefloweringash/sigtool>`_ in their
  ``PATH``. (:issue:`8581`)
* (Windows) When setting up DLL search paths for binary dependency analysis,
  consider the directory where python executable is located (i.e.,
  ``os.path.dirname(sys._base_executable)``) in addition to directory pointed to
  by ``sys.base_prefix``, in case the two differ. This fixes discovery of
  ``python3.dll`` when using python that was locally built from source (i.e.,
  using ``PCbuild\build.bat`` script that comes with python's source code).
  (:issue:`8569`)
Incompatible Changes

• Attempting to do a build whilst inside C:\Windows is now blocked. (:issue:8570)
• Invalid hiddenimports (e.g. filenames instead of module names) are now a build error. (:issue:8570)

Deprecations

* Adding a Python environment's ``site-packages`` directory to
  ``pathex``/``--paths`` will be blocked in v7.0 (:issue:`8570`)
* Running PyInstaller with escalated privileges (e.g. using sudo or in a *run as
  admin* terminal) will be blocked in v7.0. True admin users will be unaffected.
  (:issue:`8570`)
Bootloader

* (POSIX) Bootloader now attempts to create the run-time temporary directory
  given via :option:`--runtime-tmpdir` option (instead of requiring the
  directory to already exist), in order to match the behavior on Windows. A
  relative run-time temporary directory is now resolved to an absolute full path
  before being used to construct the application's temporary directory path.
  (:issue:`8557`)
* (Windows) Bootloader now verifies the run-time temporary directory given via
  :option:`--runtime-tmpdir` option, and raises an error if either the drive is
  invalid or if the directory cannot be created (instead of creating the
</tr></table> 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>

<li><a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fwinlover32%2Fsetup-python%2Fpull%2F%3Ca+href%3D"https://github.com/pyinstaller/pyinstaller/commit/df1507f9c423eaf6794eee6723d6d09b86da1f3e&quot;&gt;&lt;code&gt;df1507f&lt;/code&gt;&lt;/a">https://github.com/pyinstaller/pyinstaller/commit/df1507f9c423eaf6794eee6723d6d09b86da1f3e&quot;&gt;&lt;code&gt;df1507f&lt;/code&gt;&lt;/a> Release v6.8.0. [skip ci]</li>

<li><a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fwinlover32%2Fsetup-python%2Fpull%2F%3Ca+href%3D"https://github.com/pyinstaller/pyinstaller/commit/83a1499b9588b8d530cc5b0d1d462e6fa6abb67f&quot;&gt;&lt;code&gt;83a1499&lt;/code&gt;&lt;/a">https://github.com/pyinstaller/pyinstaller/commit/83a1499b9588b8d530cc5b0d1d462e6fa6abb67f&quot;&gt;&lt;code&gt;83a1499&lt;/code&gt;&lt;/a> macOS: hard-code path to the codesign utility</li>

<li><a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fwinlover32%2Fsetup-python%2Fpull%2F%3Ca+href%3D"https://github.com/pyinstaller/pyinstaller/commit/3aa87b04648e5d9f957aec629fd2c0b283cb2bec&quot;&gt;&lt;code&gt;3aa87b0&lt;/code&gt;&lt;/a">https://github.com/pyinstaller/pyinstaller/commit/3aa87b04648e5d9f957aec629fd2c0b283cb2bec&quot;&gt;&lt;code&gt;3aa87b0&lt;/code&gt;&lt;/a> tests: skip QtMultimedia test with PyQt6 6.7.0 and PyQt6-Qt6 6.7.1</li>

<li><a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fwinlover32%2Fsetup-python%2Fpull%2F%3Ca+href%3D"https://github.com/pyinstaller/pyinstaller/commit/1e2259806302030dfa638df7128c5009222bb6c7&quot;&gt;&lt;code&gt;1e22598&lt;/code&gt;&lt;/a">https://github.com/pyinstaller/pyinstaller/commit/1e2259806302030dfa638df7128c5009222bb6c7&quot;&gt;&lt;code&gt;1e22598&lt;/code&gt;&lt;/a> Tests: Requirements: Scheduled weekly dependency update for week 22 (<a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fwinlover32%2Fsetup-python%2Fpull%2F%3Ca+href%3D"https://redirect.github.com/pyinstaller/pyinstaller/issues/8577&quot;&gt;#8577&lt;/a&gt;)&lt;/li">https://redirect.github.com/pyinstaller/pyinstaller/issues/8577&quot;&gt;#8577&lt;/a&gt;)&lt;/li>

<li><a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fwinlover32%2Fsetup-python%2Fpull%2F%3Ca+href%3D"https://github.com/pyinstaller/pyinstaller/commit/3fa81817d8bdd1e84f77139d8d878a85831b9173&quot;&gt;&lt;code&gt;3fa8181&lt;/code&gt;&lt;/a">https://github.com/pyinstaller/pyinstaller/commit/3fa81817d8bdd1e84f77139d8d878a85831b9173&quot;&gt;&lt;code&gt;3fa8181&lt;/code&gt;&lt;/a> test: Disable unwanted tracebacks on pytest xfails</li>

<li><a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fwinlover32%2Fsetup-python%2Fpull%2F%3Ca+href%3D"https://github.com/pyinstaller/pyinstaller/commit/8b5d76d2e5c368d58821c96eefc975f22a0902f7&quot;&gt;&lt;code&gt;8b5d76d&lt;/code&gt;&lt;/a">https://github.com/pyinstaller/pyinstaller/commit/8b5d76d2e5c368d58821c96eefc975f22a0902f7&quot;&gt;&lt;code&gt;8b5d76d&lt;/code&gt;&lt;/a> Deprecate mixing Python environments using --paths=.../site-packages</li>

<li><a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fwinlover32%2Fsetup-python%2Fpull%2F%3Ca+href%3D"https://github.com/pyinstaller/pyinstaller/commit/a34370fb395dc629cddc162c985953aa0a0435ba&quot;&gt;&lt;code&gt;a34370f&lt;/code&gt;&lt;/a">https://github.com/pyinstaller/pyinstaller/commit/a34370fb395dc629cddc162c985953aa0a0435ba&quot;&gt;&lt;code&gt;a34370f&lt;/code&gt;&lt;/a> Make --hiddenimport=.../site-packages/foo/bar.py a build error</li>

<li><a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fwinlover32%2Fsetup-python%2Fpull%2F%3Ca+href%3D"https://github.com/pyinstaller/pyinstaller/commit/1d29b15e099739d4be2876d82940a646a2ff72d5&quot;&gt;&lt;code&gt;1d29b15&lt;/code&gt;&lt;/a">https://github.com/pyinstaller/pyinstaller/commit/1d29b15e099739d4be2876d82940a646a2ff72d5&quot;&gt;&lt;code&gt;1d29b15&lt;/code&gt;&lt;/a> Block running PyInstaller from inside C:\Windows</li>

<li><a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fwinlover32%2Fsetup-python%2Fpull%2F%3Ca+href%3D"https://github.com/pyinstaller/pyinstaller/commit/94037335e431f2b6aa4c7da3ab8be95a39202db1&quot;&gt;&lt;code&gt;9403733&lt;/code&gt;&lt;/a">https://github.com/pyinstaller/pyinstaller/commit/94037335e431f2b6aa4c7da3ab8be95a39202db1&quot;&gt;&lt;code&gt;9403733&lt;/code&gt;&lt;/a> Dispel the myth that PyInstaller should be ran as an admin</li>

<li><a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fwinlover32%2Fsetup-python%2Fpull%2F%3Ca+href%3D"https://github.com/pyinstaller/pyinstaller/commit/16d3f973a0b3d44cf58d34085ccfae5427ccfc51&quot;&gt;&lt;code&gt;16d3f97&lt;/code&gt;&lt;/a">https://github.com/pyinstaller/pyinstaller/commit/16d3f973a0b3d44cf58d34085ccfae5427ccfc51&quot;&gt;&lt;code&gt;16d3f97&lt;/code&gt;&lt;/a> bootloader: splash: move mutex variables into SPLASH_CONTEXT</li>

<li>Additional commits viewable in <a href="proxy.php?url=https%3A%2F%2Fgithub.com%2Fwinlover32%2Fsetup-python%2Fpull%2F%3Ca+href%3D"https://github.com/pyinstaller/pyinstaller/compare/v5.13.1...v6.8.0&quot;&gt;compare">https://github.com/pyinstaller/pyinstaller/compare/v5.13.1...v6.8.0&quot;&gt;compare view</a></li>

</ul>

</details>
<br />


Updates requests from 2.32.0 to 2.32.3

Release notes
Sourced from requests's releases.

v2.32.3
2.32.3 (2024-05-29)
Bugfixes

Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of
HTTPAdapter. (#6716)
Fixed issue where Requests started failing to run on Python versions compiled
without the ssl module. (#6724)

v2.32.2
2.32.2 (2024-05-21)
Deprecations


To provide a more stable migration for custom HTTPAdapters impacted
by the CVE changes in 2.32.0, we've renamed _get_connection to
a new public API, get_connection_with_tls_context. Existing custom
HTTPAdapters will need to migrate their code to use this new API.
get_connection is considered deprecated in all versions of Requests>=2.32.0.
A minimal (2-line) example has been provided in the linked PR to ease
migration, but we strongly urge users to evaluate if their custom adapter
is subject to the same issue described in CVE-2024-35195. (#6710)


v2.32.1
2.32.1 (2024-05-20)
Bugfixes

Add missing test certs to the sdist distributed on PyPI.




Changelog
Sourced from requests's changelog.

2.32.3 (2024-05-29)
Bugfixes

Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of
HTTPAdapter. (#6716)
Fixed issue where Requests started failing to run on Python versions compiled
without the ssl module. (#6724)

2.32.2 (2024-05-21)
Deprecations


To provide a more stable migration for custom HTTPAdapters impacted
by the CVE changes in 2.32.0, we've renamed _get_connection to
a new public API, get_connection_with_tls_context. Existing custom
HTTPAdapters will need to migrate their code to use this new API.
get_connection is considered deprecated in all versions of Requests>=2.32.0.
A minimal (2-line) example has been provided in the linked PR to ease
migration, but we strongly urge users to evaluate if their custom adapter
is subject to the same issue described in CVE-2024-35195. (#6710)


2.32.1 (2024-05-20)
Bugfixes

Add missing test certs to the sdist distributed on PyPI.




Commits

0e322af v2.32.3
e188799 Don't create default SSLContext if ssl module isn't present (#6724)
145b539 Merge pull request #6716 from sigmavirus24/bug/6715
b1d73dd Don't use default SSLContext with custom poolmanager kwargs
6badbac Update HISTORY.md
a62a2d3 Allow for overriding of specific pool key params
88dce9d v2.32.2
c98e4d1 Merge pull request #6710 from nateprewitt/api_rename
92075b3 Add deprecation warning
aa1461b Move _get_connection to get_connection_with_tls_context
Additional commits viewable in compare view




Updates urllib3 from 1.26.18 to 1.26.19

Release notes
Sourced from urllib3's releases.

1.26.19
🚀 urllib3 is fundraising for HTTP/2 support
urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support for 2023. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.
Thank you for your support.
Changes

Added the Proxy-Authorization header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect.

Full Changelog: https://github.com/urllib3/urllib3/compare/1.26.18...1.26.19
Note that due to an issue with our release automation, no  multiple.intoto.jsonl file is available for this release.



Changelog
Sourced from urllib3's changelog.

1.26.19 (2024-06-17)

Added the Proxy-Authorization header to the list of headers to strip from requests when redirecting to a different host. As before, different headers can be set via Retry.remove_headers_on_redirect.
Fixed handling of OpenSSL 3.2.0 new error message for misconfiguring an HTTP proxy as HTTPS. ([#3405](https://github.com/urllib3/urllib3/issues/3405) <https://github.com/urllib3/urllib3/issues/3405>__)




Commits

d9d85c8 Release 1.26.19
8528b63 [1.26] Fix downstream tests (#3409)
40b6d16 Merge pull request from GHSA-34jh-p97f-mpxf
29cfd02 Fix handling of OpenSSL 3.2.0 new error message "record layer failure" (#3405)
b600643 [1.26] Bump RECENT_DATE (#3404)
7e2d389 [1.26] Fix running CPython 2.7 tests in CI (#3137)
See full diff in compare view




Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options


You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

You can disable automated security fix PRs for this repo from the Security Alerts page.