Bump pillow from 8.3.2 to 9.4.0

[dependabot[bot]]

Bumps pillow from 8.3.2 to 9.4.0.

Release notes

Sourced from pillow's releases.

9.4.0

https://pillow.readthedocs.io/en/stable/releasenotes/9.4.0.html

Changes

• Updated copyright year #6845 [@​radarhere]
• Fixed null pointer dereference crash with malformed font #6846 [@​radarhere]
• Return from ImagingFill early if image has a zero dimension #6842 [@​radarhere]
• Reversed deprecations for Image constants, except for duplicate Resampling attributes #6830 [@​radarhere]
• Improve exception traceback readability #6836 [@​hugovk]
• Fix version mismatch #6841 [@​smb123w64gb]
• Do not attempt to read IFD1 if absent #6840 [@​radarhere]
• Fixed writing int as ASCII tag #6800 [@​radarhere]
• If available, use wl-paste or xclip for grabclipboard() on Linux #6783 [@​radarhere]
• Added signed option when saving JPEG2000 images #6709 [@​radarhere]
• Patch OpenJPEG to include ARM64 fix #6718 [@​radarhere]
• Added support for I;16 modes in putdata() #6825 [@​radarhere]
• Added conversion from RGBa to RGB #6708 [@​radarhere]
• Added DDS support for uncompressed L and LA images #6820 [@​radarhere]
• Added LightSource tag values to ExifTags #6749 [@​radarhere]
• Updated libtiff shared library name #6826 [@​radarhere]
• Fixed PyAccess after changing ICO size #6821 [@​radarhere]
• Do not use EXIF from info when saving PNG images #6819 [@​radarhere]
• Fixed saving EXIF data to MPO #6817 [@​radarhere]
• Added Exif hide_offsets() #6762 [@​radarhere]
• Only compare to previous frame when checking for duplicate GIF frames while saving #6787 [@​radarhere]
• Always initialize all plugins in registered_extensions() #6811 [@​radarhere]
• Initialize unsigned char variables #6818 [@​radarhere]
• Updated deprecated NumPy alias #6814 [@​radarhere]
• Ignore non-opaque WebP background when saving as GIF #6792 [@​radarhere]
• Only set tile in ImageFile setstate #6793 [@​radarhere]
• Fixed BytesWarnings #6816 [@​radarhere]
• When reading BLP, do not trust JPEG decoder to determine image is CMYK #6767 [@​radarhere]
• Updated xz to 5.4.0 #6802 [@​radarhere]
• Added IFD enum to ExifTags #6748 [@​radarhere]
• Fixed bug combining GIF frame durations #6779 [@​radarhere]
• Remove unnecessary Pipfile #6790 [@​hugovk]
• Support saving JPEG comments #6774 [@​smason]
• Add support for PyPy3.9, drop PyPy3.7 #6782 [@​hugovk]
• [pre-commit.ci] pre-commit autoupdate #6780 [@​pre-commit-ci]
• Use compile_python_fuzzer #6775 [@​radarhere]
• Remove specific number of jobs from comment #6772 [@​radarhere]
• Fix WebP dealloc method definitions #6763 [@​Yay295]
• Added getxmp() to WebPImagePlugin #6758 [@​radarhere]
• Use stdlib for setuptools on Cygwin #6760 [@​radarhere]
• Added "exact" option when saving WebP #6747 [@​ashafaei]
• Use fractional coordinates when drawing text #6722 [@​radarhere]
• Fixed writing int as BYTE tag #6740 [@​radarhere]
• Remove Tidelift alignment action and badge #6739 [@​aclark4life]

... (truncated)

Changelog

Sourced from pillow's changelog.

9.4.0 (2023-01-02)

• Fixed null pointer dereference crash with malformed font #6846 [wiredfool, radarhere]

• Return from ImagingFill early if image has a zero dimension #6842 [radarhere]

• Reversed deprecations for Image constants, except for duplicate Resampling attributes #6830 [radarhere]

• Improve exception traceback readability #6836 [hugovk, radarhere]

• Do not attempt to read IFD1 if absent #6840 [radarhere]

• Fixed writing int as ASCII tag #6800 [radarhere]

• If available, use wl-paste or xclip for grabclipboard() on Linux #6783 [radarhere]

• Added signed option when saving JPEG2000 images #6709 [radarhere]

• Patch OpenJPEG to include ARM64 fix #6718 [radarhere]

• Added support for I;16 modes in putdata() #6825 [radarhere]

• Added conversion from RGBa to RGB #6708 [radarhere]

• Added DDS support for uncompressed L and LA images #6820 [radarhere, REDxEYE]

• Added LightSource tag values to ExifTags #6749 [radarhere]

• Fixed PyAccess after changing ICO size #6821 [radarhere]

• Do not use EXIF from info when saving PNG images #6819 [radarhere]

• Fixed saving EXIF data to MPO #6817 [radarhere]

... (truncated)

Commits

• a5bbab1 9.4.0 version bump
• cdd3d8e Merge pull request #6851 from radarhere/size
• 38a93a0 Merge pull request #6850 from radarhere/releasenotes
• d4d981d Updated size parameter descriptions
• e908afe Updated security descriptions
• 0efda91 Merge pull request #6845 from radarhere/copyright
• 35b4c43 Added release notes for #6846
• a632b7a Added release notes for #6842
• 009bbe2 Update CHANGES.rst [ci skip]
• c4cc487 Merge pull request #6846 from radarhere/font_crash
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.