Repository navigation
fix: release edit2docs 0.26.4 on Pillow 13 security chain - #14
Merged
Merged
Conversation
haesookimDev
marked this pull request as ready for review
October 22, 2026 07:02
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Final validation and publication result
Final result: exact-head PR CI39736807110 Python3.12/3.13 passed before merge ebbf602. Installed-wheel focused85 tests, pip-check, build/twine passed. Official v0.26.4 GitHub release published; wheel SHA2563335b3408f0f4fb52c5631aa1f5e5a89160fd17448b267eb162673f53359e79e. Workflow full219-lock clean install, actual policy API E2E and P0 MR!2272 merge completed. Existing Workflow10 baseline failures are documented, not hidden.
Detailed validation, baseline failures and remaining limitations. Service P0 did not merge to develop/main. Media/K8s/GPU/VSCode native OS logout E2E excluded.
Original change description
Release0.26.4 so Workflow can install the Pillow security-fixed dependency chain: Pillow13.0.0 and the actual xgen-pdf0.1.3 release wheel. Align module version with package metadata.
Only dependency/version metadata changes. Direct image/PDF consumers were inspected against Pillow13 removals; no application API edits indicated. Wheel and sdist builds passed. Focused installed-wheel rendering/preview/document compatibility tests and full Python3.12/3.13 PR CI are in progress and required before merge.
This is a prerequisite of the requested Runtime/Workflow security dependency update. No new audit exceptions or dependency overrides. After passing checks, main PR merge and a v0.26.4 tag trigger the existing GitHub wheel release policy. Service P0 will not merge to develop/main.