Commit dad37b7
authored
build(deps): update cairosvg requirement from ~=2.7 to ~=2.8 (#1304)
Updates the requirements on
[cairosvg](https://github.com/Kozea/CairoSVG) to permit the latest
version.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Kozea/CairoSVG/releases">cairosvg's
releases</a>.</em></p>
<blockquote>
<h2>2.8.2</h2>
<ul>
<li>Allow both Unicode strings and bytes as input</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Kozea/CairoSVG/blob/main/NEWS.rst">cairosvg's
changelog</a>.</em></p>
<blockquote>
<h1>Version 2.8.2 released on 2025-05-15</h1>
<ul>
<li>Allow both Unicode strings and bytes as input</li>
</ul>
<h1>Version 2.8.1 released on 2025-05-14</h1>
<ul>
<li>Allow both text- and bytes-based file objects as input</li>
</ul>
<h1>Version 2.8.0 released on 2025-05-12</h1>
<ul>
<li>Drop support of Python 3.7 and 3.8, add support of Python 3.12 and
3.13</li>
<li>Optimize math operations</li>
<li>Use pathlib</li>
<li>Close paths for ellipses and circles</li>
<li>Fix output ratio for SVG surfaces</li>
<li>Avoid endless loops when updating def attributes</li>
<li>Round PNG size</li>
<li>Don’t crash when more than 2 values are given to translate and scale
functions</li>
</ul>
<h1>Version 2.7.1 released on 2023-08-05</h1>
<ul>
<li>Don’t draw clipPath when defined after reference</li>
<li>Handle evenodd fill rule with gradients and patterns</li>
<li>Fix ratio and clip for "image" tags with no size</li>
<li>Handle data-URLs in safe mode</li>
<li>Use f-strings</li>
</ul>
<h1>Version 2.7.0 released on 2023-03-20</h1>
<p><strong>WARNING:</strong> this is a security update.</p>
<p>When processing SVG files, CairoSVG could access other files online,
possibly
leading to very long renderings or other security problems.</p>
<p>This feature is now disabled by default. External resources can still
be
accessed using the "unsafe" or the "url_fetcher"
parameter.</p>
<h1>Version 2.6.0 released on 2023-01-12</h1>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/Kozea/CairoSVG/commit/9e8c6ede00dd1c4495fca4809b4cabd628a85eb9"><code>9e8c6ed</code></a>
Version 2.8.2</li>
<li><a
href="https://github.com/Kozea/CairoSVG/commit/1c28b57bea389257f8a9ca01e9d1af5b98362050"><code>1c28b57</code></a>
De-duplicate input string encoding</li>
<li><a
href="https://github.com/Kozea/CairoSVG/commit/b4670eca955cb65eff8f6f8b1d1a457a2a3d3a3d"><code>b4670ec</code></a>
Merge pull request <a
href="https://redirect.github.com/Kozea/CairoSVG/issues/443">#443</a>
from marcelometal/ensure-bytestring-type-before-gzip</li>
<li><a
href="https://github.com/Kozea/CairoSVG/commit/245b3f20470b216c6254cd4ac1f250b2c5913716"><code>245b3f2</code></a>
Ensure bytestring is bytes before checking for gzip header</li>
<li><a
href="https://github.com/Kozea/CairoSVG/commit/e5128ec50c305bfd6f0c9eb6e77726e6c86817a8"><code>e5128ec</code></a>
Version 2.8.1</li>
<li><a
href="https://github.com/Kozea/CairoSVG/commit/abdb8f9bbe42f1cf62b85f6fb5350cb9b485a66c"><code>abdb8f9</code></a>
Allow both text- and bytes-based file objects as input</li>
<li><a
href="https://github.com/Kozea/CairoSVG/commit/37952cde77960d43c0e62ac7632d4929e9199433"><code>37952cd</code></a>
Version 2.8.0</li>
<li><a
href="https://github.com/Kozea/CairoSVG/commit/5b1c86010f6a44aa783bdfec4db2955b8877a5ac"><code>5b1c860</code></a>
Update setup.cfg</li>
<li><a
href="https://github.com/Kozea/CairoSVG/commit/500391d99c344c3a3fc802fd16240926b5a38cc4"><code>500391d</code></a>
Update supported Python versions</li>
<li><a
href="https://github.com/Kozea/CairoSVG/commit/abafa8ae248dc9cef0349adaa2f61849ea56920c"><code>abafa8a</code></a>
Don’t crash when more than 2 values are given to translate and
scale</li>
<li>Additional commits viewable in <a
href="https://github.com/Kozea/CairoSVG/compare/2.7.0...2.8.2">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>1 file changed
+1
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
8 | | - | |
| 8 | + | |
9 | 9 | | |
10 | 10 | | |
11 | 11 | | |
0 commit comments