feat(libheif): update packages versions, drop ALLOW_INCORRECT_HEADERS option (#426)

Signed-off-by: Alexander Piskun <bigcat88@icloud.com>

Author: bigcat88

.github/workflows/analysis-coverage.yml

@@ -32,7 +32,9 @@ jobs:
           python-version: '3.12'
 
       - name: Install Libheif
-        run: brew install libheif
+        run: |
+          brew update
+          brew install libheif
 
       - name: Install from source
         run: python3 -m pip install ".[dev]" wheel setuptools
@@ -146,7 +148,9 @@ jobs:
           python-version: '3.10'
 
       - name: Install Libheif
-        run: brew install libheif
+        run: |
+          brew update
+          brew install libheif
 
       - name: Install from source
         run: python3 -m pip -v install ".[dev]"
@@ -185,7 +189,9 @@ jobs:
           python-version: '3.11'
 
       - name: Install Libheif
-        run: brew install libheif
+        run: |
+          brew update
+          brew install libheif
 
       - name: Install from source
         run: python3 -m pip -v install ".[dev]"
@@ -386,7 +392,9 @@ jobs:
           python-version: '3.12'
 
       - name: Install Libheif
-        run: brew install libheif
+        run: |
+          brew update
+          brew install libheif
 
       - name: Install from source
         run: |

.github/workflows/test-src-build-linux.yml

@@ -33,7 +33,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        docker_file: ["Alpine_3_20", "Alpine_3_21", "Almalinux_9", "Debian_12"]
+        docker_file: ["Alpine_3_21", "Alpine_3_22", "Almalinux_9", "Debian_12"]
 
     steps:
       - uses: actions/checkout@v6
@@ -69,7 +69,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        docker_file: ["Alpine_3_20", "Alpine_3_21", "Almalinux_9", "Debian_12"]
+        docker_file: ["Alpine_3_21", "Alpine_3_22", "Almalinux_9", "Debian_12"]
 
     steps:
       - uses: actions/checkout@v6

CHANGELOG.md

@@ -1,5 +1,17 @@
 All notable changes to this project will be documented in this file.
 
+## [1.4.0 - 2026-05-30]
+
+### Changed
+
+- `libheif` was updated from the `1.21.2` to `1.23.0` version. #426
+- `libde265` was updated from the `1.0.16` to `1.1.0` version. #426
+- `libx265` was updated from the `4.1` to `4.2` version. #426
+
+### Removed
+
+- `options.ALLOW_INCORRECT_HEADERS` option. Starting with `libheif` `1.22.0`, libheif itself rejects images whose decoded size does not match the `ispe` header. #426
+
 ## [1.3.0 - 2026-02-27]
 
 ### Added

docker/from_src/Alpine_3_21.Dockerfile

@@ -1,11 +1,14 @@
-FROM alpine:3.21 as base
+FROM alpine:3.20 as base
 
 RUN \
   apk add --no-cache \
     python3-dev \
     py3-pip \
     alpine-sdk \
-    libheif-dev \
+    cmake \
+    nasm \
+    x265-dev \
+    libde265-dev \
     py3-numpy \
     py3-pillow
 
@@ -16,6 +19,7 @@ COPY . /pillow_heif
 RUN \
   python3 -m venv --system-site-packages myenv && \
   source myenv/bin/activate && \
+  python3 pillow_heif/libheif/build_libs.py && \
   python3 -m pip install -v "pillow_heif/.[tests]"; \
   echo "**** Build Done ****" && \
   python3 -c "import pillow_heif; print(pillow_heif.libheif_info())" && \

docker/from_src/Alpine_3_20.Dockerfile docker/from_src/Alpine_3_22.Dockerfiledocker/from_src/Alpine_3_20.Dockerfile renamed to docker/from_src/Alpine_3_22.Dockerfile

@@ -1,14 +1,11 @@
-FROM alpine:3.20 as base
+FROM alpine:3.21 as base
 
 RUN \
   apk add --no-cache \
     python3-dev \
     py3-pip \
     alpine-sdk \
-    cmake \
-    nasm \
-    x265-dev \
-    libde265-dev \
+    libheif-dev \
     py3-numpy \
     py3-pillow
 
@@ -19,7 +16,6 @@ COPY . /pillow_heif
 RUN \
   python3 -m venv --system-site-packages myenv && \
   source myenv/bin/activate && \
-  python3 pillow_heif/libheif/build_libs.py && \
   python3 -m pip install -v "pillow_heif/.[tests]"; \
   echo "**** Build Done ****" && \
   python3 -c "import pillow_heif; print(pillow_heif.libheif_info())" && \

docs/options.rst

@@ -8,7 +8,6 @@ Options
 .. autodata:: pillow_heif.options.DEPTH_IMAGES
 .. autodata:: pillow_heif.options.QUALITY
 .. autodata:: pillow_heif.options.SAVE_HDR_TO_12_BIT
-.. autodata:: pillow_heif.options.ALLOW_INCORRECT_HEADERS
 .. autodata:: pillow_heif.options.SAVE_NCLX_PROFILE
 .. autodata:: pillow_heif.options.PREFERRED_ENCODER
 .. autodata:: pillow_heif.options.PREFERRED_DECODER

libheif/build_libs.py

@@ -17,9 +17,9 @@
 
 PH_LIGHT_VERSION = sys.maxsize <= 2**32 or getenv("PH_LIGHT_ACTION", "0") != "0"
 
-LIBX265_URL = "https://bitbucket.org/multicoreware/x265_git/downloads/x265_4.1.tar.gz"
-LIBDE265_URL = "https://github.com/strukturag/libde265/releases/download/v1.0.16/libde265-1.0.16.tar.gz"
-LIBHEIF_URL = "https://github.com/strukturag/libheif/releases/download/v1.21.2/libheif-1.21.2.tar.gz"
+LIBX265_URL = "https://bitbucket.org/multicoreware/x265_git/downloads/x265_4.2.tar.gz"
+LIBDE265_URL = "https://github.com/strukturag/libde265/releases/download/v1.1.0/libde265-1.1.0.tar.gz"
+LIBHEIF_URL = "https://github.com/strukturag/libheif/releases/download/v1.23.0/libheif-1.23.0.tar.gz"
 
 
 def download_file(url: str, out_path: str) -> bool:
@@ -154,8 +154,6 @@ def build_lib(url: str, name: str):
         if name == "x265":
             download_extract_to(url, lib_path)
             chdir(lib_path)
-            run(f"patch -p 1 -i {path.join(script_dir, 'x265_cmake_1.patch')}".split(), check=True)
-            run(f"patch -p 1 -i {path.join(script_dir, 'x265_cmake_2.patch')}".split(), check=True)
         else:
             build_path = path.join(lib_path, "build")
             makedirs(build_path, exist_ok=True)

libheif/windows/mingw-w64-libheif/PKGBUILD

@@ -4,7 +4,7 @@
 _realname=libheif
 pkgbase=mingw-w64-${_realname}
 pkgname=("${MINGW_PACKAGE_PREFIX}-${_realname}")
-pkgver=1.21.2
+pkgver=1.23.0
 pkgrel=1
 pkgdesc="HEIF image decoder/encoder library and tools (mingw-w64)"
 arch=('any')
@@ -22,7 +22,7 @@ depends=("${MINGW_PACKAGE_PREFIX}-gcc-libs"
          "${MINGW_PACKAGE_PREFIX}-libde265"
          "${MINGW_PACKAGE_PREFIX}-x265")
 source=("https://github.com/strukturag/libheif/releases/download/v${pkgver}/${_realname}-${pkgver}.tar.gz")
-sha256sums=('75f530b7154bc93e7ecf846edfc0416bf5f490612de8c45983c36385aa742b42')
+sha256sums=('4c9182b18897617182eed12ab5eb9f9d855b3aa3a736d6bdb31abc034ec7d393')
 
 build() {
   mkdir -p "${srcdir}"/build-${MSYSTEM} && cd "${srcdir}"/build-${MSYSTEM}