l3s-learnweb / learnweb

Learnweb is a collaborative search and sharing system which brings together different online services under one umbrella
https://learnweb.l3s.uni-hannover.de
MIT License
1 stars 0 forks source link

chore(deps): bump maven.dependency.imageio.version from 3.9.4 to 3.10.0 #347

Closed dependabot[bot] closed 8 months ago

dependabot[bot] commented 8 months ago

Bumps maven.dependency.imageio.version from 3.9.4 to 3.10.0. Updates com.twelvemonkeys.servlet:servlet from 3.9.4 to 3.10.0

Release notes

Sourced from com.twelvemonkeys.servlet:servlet's releases.

TwelveMonkeys ImageIO 3.10.0 release notes

Thanks to everyone who has committed code, patches, filed bug reports or otherwise contributed to the development of this version!

What's new?

  • OSGi support. Thanks @​steinarb
  • JDK 20 + 21 support (mostly build/test-related)

The following bugs/issues are fixed in this release:

JPEG

#837 Now uses last Adobe marker to detect color encoding

PSD

#843 Fixed NPE when reading empty image resources #771 Adding parsing for 'lsdk' (undocumented) additional layer information key that represents a 'nested section diverder setting' #738 No longer decompress PackBits across boundaries #731 Add missing guide info in metadata. Thanks @​daaaaa

TIFF

#815 No longer pass TIFF metadata onto the JPEG delegate when writing JPEG compressed images #784 No longer return incorrect standard image type for RGB with custom ICC profile #786 No longer creates custom Inflater when reading, to avoid resource leak #744 Fixed TIFF writing performance regression #740 Floating point predictor support

WebP

#841 Filter out incompatible ICC profiles #737 Fix alpha decoding when source subsampling is used. Thanks @​tc-wleite #722 Fixed transparent animation frame issue

In addition, a lot of work has been put into robustifying the CI, CodeQL scanning and hardening security. Special thanks to @​joycebrum

Commits
  • b441298 [maven-release-plugin] prepare release twelvemonkeys-3.10.0
  • 345ca0a POM fixes
  • 9720a93 #843: Correctly handle empty image resources section.
  • 4d3f691 Bump mikepenz/action-junit-report in /.github/workflows
  • 2e0e575 #841: Filter out incompatible ICC profiles
  • 2c7c47b #837: Now uses last app segment for color space detection.
  • 57680f1 Change from java 21-ea to 21 (official temurin build is out)
  • 8dc83c4 Remove JDK 20 now that we have 21.
  • 929bea6 Bump actions/checkout from 4.1.0 to 4.1.1 in /.github/workflows
  • 699662d Bump github/codeql-action from 2.22.2 to 2.22.3 in /.github/workflows
  • Additional commits viewable in compare view


Updates com.twelvemonkeys.imageio:imageio-bmp from 3.9.4 to 3.10.0

Updates com.twelvemonkeys.imageio:imageio-jpeg from 3.9.4 to 3.10.0

Updates com.twelvemonkeys.imageio:imageio-tiff from 3.9.4 to 3.10.0

Updates com.twelvemonkeys.imageio:imageio-hdr from 3.9.4 to 3.10.0

Updates com.twelvemonkeys.imageio:imageio-webp from 3.9.4 to 3.10.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)