Skip to content

build(deps): bump github.com/davidbyttow/govips/v2 from 2.16.0 to 2.17.0#885

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/github.com/davidbyttow/govips/v2-2.17.0
Open

build(deps): bump github.com/davidbyttow/govips/v2 from 2.16.0 to 2.17.0#885
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/github.com/davidbyttow/govips/v2-2.17.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 2, 2026

Bumps github.com/davidbyttow/govips/v2 from 2.16.0 to 2.17.0.

Release notes

Sourced from github.com/davidbyttow/govips/v2's releases.

v2.17.0

What's Changed

New Features

  • Add built-in vipsgen code generator for auto-generating C bridge wrappers
  • Add NewTransparentCanvas helper for creating transparent RGBA images
  • Add Grey() constructor for creating gradient images
  • Add fast Go image.Image interop: ToGoImage and NewImageFromGoImage
  • Add Loop API and preserve loop/delay metadata in RemoveMetadata
  • Add gravity function
  • Add PSD support
  • Add Magick Save, support ICO load
  • Add access options while loading image
  • Add additional image operation functions

Bug Fixes

  • Fix memory leak, panics, and race condition
  • Fix memory leak when using multi pages
  • Fix animated resize producing toilet-roll images
  • Fix CMYK ICC profile ignored when embedded profile exists
  • Fix TIFF tile dimensions zero-value crash
  • Fix JXL type detection for ISOBMFF containers with varying box sizes
  • Add runtime.KeepAlive to prevent GC finalization during CGo calls
  • Stop implicitly converting BMP files to PNG

Internal Improvements

  • Consolidate generated C bridge files into generated.{c,h,go}
  • Consolidate hand-written C bridge files into operations.{c,h,go}
  • Reduce hand-written C bridge code by using generated wrappers
  • Remove dead code (INT_TO_GBOOLEAN, unused max_alpha())
  • Split golden tests by format for better organization

Security

  • Update gopkg.in/yaml.v3 v3.0.0 to v3.0.1 (security fix)
  • Bump golang.org/x/net from 0.25.0 to 0.38.0

Other

  • Add new HEIC magic numbers
  • Document GIF quality param limitation with native gifsave
  • Add side effects import for golang.org/x/image/webp
Commits
  • 12bbea8 Consolidate C bridge files into operations and generated triplets
  • eeafe4c Reduce hand-written C bridge code by using generated wrappers (#507)
  • 19bfca8 add .claude
  • fbbf01c Update gopkg.in/yaml.v3 v3.0.0 to v3.0.1 (security fix)
  • 8798b31 Add new HEIC magic numbers (#490)
  • 9b16f82 Split golden tests by format for better organization (#247) (#506)
  • eb4bfbe Add Grey() constructor for creating gradient images (#287) (#505)
  • 4fffdd4 Add fast Go image.Image interop: ToGoImage and NewImageFromGoImage (#489, #48...
  • 328536f Preserve loop/delay metadata in RemoveMetadata, add Loop API (#381) (#503)
  • 84a97e8 Add NewTransparentCanvas helper for creating transparent RGBA images (#306) (...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/davidbyttow/govips/v2](https://github.com/davidbyttow/govips) from 2.16.0 to 2.17.0.
- [Release notes](https://github.com/davidbyttow/govips/releases)
- [Commits](davidbyttow/govips@v2.16.0...v2.17.0)

---
updated-dependencies:
- dependency-name: github.com/davidbyttow/govips/v2
  dependency-version: 2.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies for dependabot :) label Mar 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies for dependabot :)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants