Skip to content

deps: bump png from 0.17.16 to 0.18.1 - #28

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/png-0.18.1
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/png-0.18.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

Bumps png from 0.17.16 to 0.18.1.

Changelog

Sourced from png's changelog.

0.18.1

Additions

  • Added Filter::MinEntropy for encoding, which selects the filter that minimizes the Shannon entropy of the filtered row. (#647)
  • Made ScaledFloat::SCALING constant public. (#650)
  • Support skipping chunks without loading them into memory. (#630)
  • Allow full unfiltering for partial data, enabling progressive decoding use cases. (#664)

Changes

  • Improved Paeth unfilter auto-vectorization by changing how loop state is maintained. (#635)
  • Added portable_simd Paeth unfiltering for 3bpp and 4bpp images on nightly. (#632, #633)
  • Add early exit for adaptive filter selection when a perfect filter is found. (#646)
  • Ignore duplicate acTL chunks instead of producing errors. (#651)
  • Require IDAT chunk(s) before fdAT chunks, as mandated by PNG specification. (#653)
  • Enforce acTL frame counts to be valid PNG 4-byte integers (capped at 2^31-1). (#673)

Fixes

  • Fixed and improved intra-doc links in documentation comments. (#665)
  • Fixed nightly portable_simd build. (#675)

#630: image-rs/image-png#630 #632: image-rs/image-png#632 #633: image-rs/image-png#633 #635: image-rs/image-png#635 #645: image-rs/image-png#645 #646: image-rs/image-png#646 #647: image-rs/image-png#647 #650: image-rs/image-png#650 #651: image-rs/image-png#651 #653: image-rs/image-png#653 #664: image-rs/image-png#664 #665: image-rs/image-png#665 #673: image-rs/image-png#673 #675: image-rs/image-png#675

0.18.0

API Breaking Changes

  • Removed deprecated Info::encode and Encoder::set_srgb methods.

... (truncated)

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 5, 2026
@coderabbitai

coderabbitai Bot commented Oct 5, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: e688e554-1f22-49fb-93dd-9cd5e096c51e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

CodeRabbit Verify

  • Run CodeRabbit Verify to test the changes in this pull request.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/png-0.18.1 branch 6 times, most recently from c4b7542 to 46ee511 Compare October 13, 2026 18:30
@dependabot
dependabot Bot force-pushed the dependabot/cargo/png-0.18.1 branch 6 times, most recently from 9df23d5 to 8ccadc5 Compare October 26, 2026 07:16
@dependabot
dependabot Bot force-pushed the dependabot/cargo/png-0.18.1 branch from 8ccadc5 to 0257447 Compare November 3, 2026 11:51
Bumps [png](https://github.com/image-rs/image-png) from 0.17.16 to 0.18.1.
- [Changelog](https://github.com/image-rs/image-png/blob/master/CHANGES.md)
- [Commits](https://github.com/image-rs/image-png/commits)

---
updated-dependencies:
- dependency-name: png
  dependency-version: 0.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/png-0.18.1 branch from 0257447 to 54f5822 Compare November 3, 2026 16:11
@M3gA-Mind

Copy link
Copy Markdown
Collaborator

Thanks. png 0.18 now returns an Option<usize> where the test at src/pdf_render/mod_tests.rs:36 expects usize. It's a one-line test fix; we'll port it before merging.

M3gA-Mind added a commit that referenced this pull request Nov 11, 2026
png 0.18 returns output_buffer_size() as an Option, None only when the
size overflows usize. The test fixture is 80x120, so unwrap it.

Supersedes #28.
@M3gA-Mind

Copy link
Copy Markdown
Collaborator

Superseded by #63, which took zip 9.2, quick-xml 0.42 and png 0.18 together (separately they leave a lockfile cargo refuses under --locked) and has merged.

@M3gA-Mind M3gA-Mind closed this Nov 11, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 11, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/cargo/png-0.18.1 branch November 11, 2026 14:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant