Upgrading pillow 12 to 13

Removes deprecations scheduled for Pillow 13.0.0.

XMP info is no longer returned as a tuple.

Removes the undocumented GifImagePlugin._save_netpbm function.

Removes ExifTags.IFD.Makernote.

Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

Applies uclouvain/openjpeg#1621 to address OSV-2025-219.

Rejects JPEG streams whose scanlines are wider or have more components than expected.

Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)

Fixes a use-after-free when a libtiff encode error occurs.

Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit

Adds a decompression bomb check to grabclipboard() on Windows.

Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS

Fixes an out-of-bounds read in C getlist() and _putdata() when __len__ overstates length.

Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)

Adds a decompression bomb check when loading WmfStubImageFile at a different DPI.

Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)

Pillow: Out-of-bounds access in _imagingmorph on a zero-width image

Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS

Pillow: Heap buffer overflow in ImagingJpegDecode

Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels

Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)

Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips

Pillow: APNG background disposal allocates full canvas before decompression bomb check

Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()

Pillow: Infinite loop in MIC n_frames when the embedded TIFF

Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()

Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()

Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images

Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform

Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0

Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle

Pillow: Quadratic GIF comment copying during save

Pillow: MSP RLE decoder expands a tiny file into unbounded memory

Pillow: Invalid free in FreeType glyph rendering when a stroker is active

Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)

Pillow: Image.quantize() with empty palette leaks uninitialized stack memory

Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes

Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags

Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute mode

Pillow multi-frame loaders can reuse stale native image storage after mode transitions

Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion

Pillow: TarIO negative size field causes infinite CPU-spin loop

Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time

Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

Drops support for Python 3.10.

Adds support for Python 3.15.

Deprecates the IM image format.

Deprecates ImageQt align8to32() in favour of the raw encoder stride.

Deprecates JpegImageFile.load_djpeg.

Removes the type hint for the deprecated im.putdata(im.getdata()) pattern.