From ba581843497505638286fb084f97d825e37dacb0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 30 Nov 2025 20:50:51 -0800
Subject: [PATCH] chore(deps): bump image from 0.25.8 to 0.25.9 in /codex-rs
(#7421)
Bumps [image](https://github.com/image-rs/image) from 0.25.8 to 0.25.9.
Changelog
Sourced from image's
changelog.
Version 0.25.9
Features:
- Support extracting XMP metadata from PNG, JPEG, GIF, WebP and TIFF
files (#2567,
#2634,
#2644)
- Support reading IPTC metadata from PNG and JPG files (#2611)
- Support reading ICC profile from GIF files (#2644)
- Allow setting a specific DEFLATE compression level when writing PNG
(#2583)
- Initial support for 16-bit CMYK TIFF files (#2588)
- Allow extracting the alpha channel of a
Pixel in a
generic way (#2638)
Structural changes:
- EXR format decoding now only uses multi-threading via Rayon when the
rayon feature is enabled (#2643)
- Upgraded zune-jpeg to 0.5.x, ravif to 0.12.x, gif to 0.14.x
- pnm: parse integers in PBM/PGM/PPM headers without allocations (#2620)
- Replace
doc_auto_cfg with doc_cfg (#2637)
Bug fixes:
- Do not encode empty JPEG images (#2624)
- tga: reject empty images (#2614)
- tga: fix orientation flip for color mapped images (#2607)
- tga: adjust colormap lookup to match tga 2.0 spec (#2608)
Commits
5ceb6af
Merge pull request #2640
from Shnatsel/release-v0.25.9282d7b3
Merge pull request #2646
from oligamiq/main5412aee
Amend the note in accordance with the advice of 197g.4e8a4ed
Clarify default features in README and add usage noteca8fa52
Merge pull request #2644
from image-rs/gif-0.14d9bc8fe
mention GIF 0.14 changes053220a
Provide gif's XMP and ICC metadata2ec20b3
Prepare codec with gif@0.1431939fa
Mention EXR rayon changec7f68be
Merge pull request #2643
from Shnatsel/really-optional-rayon- Additional commits viewable in compare
view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
codex-rs/Cargo.lock | 27 +++++++++++++++++++++------
codex-rs/Cargo.toml | 2 +-
2 files changed, 22 insertions(+), 7 deletions(-)
diff --git a/codex-rs/Cargo.lock b/codex-rs/Cargo.lock
index 511831a19..2320afeec 100644
--- a/codex-rs/Cargo.lock
+++ b/codex-rs/Cargo.lock
@@ -3293,9 +3293,9 @@ dependencies = [
[[package]]
name = "image"
-version = "0.25.8"
+version = "0.25.9"
source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "529feb3e6769d234375c4cf1ee2ce713682b8e76538cb13f9fc23e1400a591e7"
+checksum = "e6506c6c10786659413faa717ceebcb8f70731c0a60cbae39795fdf114519c1a"
dependencies = [
"bytemuck",
"byteorder-lite",
@@ -3303,8 +3303,8 @@ dependencies = [
"num-traits",
"png",
"tiff",
- "zune-core",
- "zune-jpeg",
+ "zune-core 0.5.0",
+ "zune-jpeg 0.5.5",
]
[[package]]
@@ -6408,7 +6408,7 @@ dependencies = [
"half",
"quick-error",
"weezl",
- "zune-jpeg",
+ "zune-jpeg 0.4.19",
]
[[package]]
@@ -8093,13 +8093,28 @@ version = "0.4.12"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "3f423a2c17029964870cfaabb1f13dfab7d092a62a29a89264f4d36990ca414a"
+[[package]]
+name = "zune-core"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "111f7d9820f05fd715df3144e254d6fc02ee4088b0644c0ffd0efc9e6d9d2773"
+
[[package]]
name = "zune-jpeg"
version = "0.4.19"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "2c9e525af0a6a658e031e95f14b7f889976b74a11ba0eca5a5fc9ac8a1c43a6a"
dependencies = [
- "zune-core",
+ "zune-core 0.4.12",
+]
+
+[[package]]
+name = "zune-jpeg"
+version = "0.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc6fb7703e32e9a07fb3f757360338b3a567a5054f21b5f52a666752e333d58e"
+dependencies = [
+ "zune-core 0.5.0",
]
[[package]]
diff --git a/codex-rs/Cargo.toml b/codex-rs/Cargo.toml
index 49f9e9d16..44270c4eb 100644
--- a/codex-rs/Cargo.toml
+++ b/codex-rs/Cargo.toml
@@ -136,7 +136,7 @@ icu_decimal = "2.1"
icu_locale_core = "2.1"
icu_provider = { version = "2.1", features = ["sync"] }
ignore = "0.4.23"
-image = { version = "^0.25.8", default-features = false }
+image = { version = "^0.25.9", default-features = false }
indexmap = "2.12.0"
insta = "1.43.2"
itertools = "0.14.0"