Skip to content

Update cairosvg requirement from >=2.8.2 to >=2.9.0 - #92

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/pip/cairosvg-gte-2.9.0
Sep 1, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/pip/cairosvg-gte-2.9.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026 •

Copy link
Copy Markdown
Contributor

Updates the requirements on cairosvg to permit the latest version.

Release notes

Sourced from cairosvg's releases.

2.9.0

WARNING: this is a security update.

Using a lot of recursively nested use tags could lead to long rendering times with relatively small inputs. CairoSVG now stops rendering when more than 100k use tags are rendered.

Using the --unsafe option allows to render larger documents.

  • Drop support of Python 3.9, add support of Python 3.14
Changelog

Sourced from cairosvg's changelog.

Version 2.9.0 released on 2026-03-13

WARNING: this is a security update.

Using a lot of recursively nested use tags could lead to long rendering times with relatively small inputs. CairoSVG now stops rendering when more than 100k use tags are rendered.

Using the --unsafe option allows to render larger documents.

  • Drop support of Python 3.9, add support of Python 3.14

Version 2.8.2 released on 2025-05-15

  • Allow both Unicode strings and bytes as input

Version 2.8.1 released on 2025-05-14

  • Allow both text- and bytes-based file objects as input

Version 2.8.0 released on 2025-05-12

  • Drop support of Python 3.7 and 3.8, add support of Python 3.12 and 3.13
  • Optimize math operations
  • Use pathlib
  • Close paths for ellipses and circles
  • Fix output ratio for SVG surfaces
  • Avoid endless loops when updating def attributes
  • Round PNG size
  • Don’t crash when more than 2 values are given to translate and scale functions

Version 2.7.1 released on 2023-08-05

  • Don’t draw clipPath when defined after reference
  • Handle evenodd fill rule with gradients and patterns
  • Fix ratio and clip for "image" tags with no size
  • Handle data-URLs in safe mode
  • Use f-strings

Version 2.7.0 released on 2023-03-20

... (truncated)

Commits
  • fe5cae5 Version 2.9.0
  • 6dde868 Abort when more than 100k referenced elements are rendered
  • a6b3a98 Cut long line again
  • ce8b51d Cut long line
  • b7818c9 Clarify unsafe option scope without removing security warning
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 1, 2026
Updates the requirements on [cairosvg](https://github.com/Kozea/CairoSVG) to permit the latest version.
- [Release notes](https://github.com/Kozea/CairoSVG/releases)
- [Changelog](https://github.com/Kozea/CairoSVG/blob/main/NEWS.rst)
- [Commits](Kozea/CairoSVG@2.8.2...2.9.0)

---
updated-dependencies:
- dependency-name: cairosvg
  dependency-version: 2.9.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/cairosvg-gte-2.9.0 branch from da3a5d2 to fffa7f1 Compare September 1, 2026 09:32
@github-actions
github-actions Bot merged commit f3b393a into main Sep 1, 2026
4 checks passed
@github-actions
github-actions Bot deleted the dependabot/pip/cairosvg-gte-2.9.0 branch September 1, 2026 09:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants