Skip to content

Update sorl-thumbnail requirement from <12.10 to <13.1#574

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/sorl-thumbnail-lt-13.1
Open

Update sorl-thumbnail requirement from <12.10 to <13.1#574
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/sorl-thumbnail-lt-13.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 2, 2026

Updates the requirements on sorl-thumbnail to permit the latest version.

Release notes

Sourced from sorl-thumbnail's releases.

13.0.0

What's Changed

  • THUMBNAIL_STORAGE should now be an alias in the Django STORAGES setting. The old way of specifying a dotted path to a Storage module is still supported.
  • Fixed serialization to use storage aliases instead of backend class paths, ensuring storage OPTIONS (like bucket names and credentials) are preserved when thumbnails are cached and retrieved. Fixes issues with S3, Google Cloud Storage, and other cloud backends.
  • Confirmed support for Python 3.13 (on Django 5.1+).
  • Drop support for Python 3.8 and 3.9.
  • Add support for Django 5.2
  • Accept a tuple as blur radius use GaussianBlur from PIL (#773)
  • Fixed a performance issue in convert engine with _get_exif_orientation
  • Reduced logging in ThumbnailBackend when THUMBNAIL_DUMMY is activated
  • Privileged sRGB as default for ImageMagick colorspace

New Contributors

Full Changelog: jazzband/sorl-thumbnail@12.11.0...13.0.0

Changelog

Sourced from sorl-thumbnail's changelog.

13.0.0

  • THUMBNAIL_STORAGE should now be an alias in the Django STORAGES setting. The old way of specifying a dotted path to a Storage module is still supported.
  • Fixed serialization to use storage aliases instead of backend class paths, ensuring storage OPTIONS (like bucket names and credentials) are preserved when thumbnails are cached and retrieved. Fixes issues with S3, Google Cloud Storage, and other cloud backends.
  • Confirmed support for Python 3.13 (on Django 5.1+).
  • Drop support for Python 3.8 and 3.9.
  • Add support for Django 5.2
  • Accept a tuple as blur radius use GaussianBlur from PIL (#773)
  • Fixed a performance issue in convert engine with _get_exif_orientation
  • Reduced logging in ThumbnailBackend when THUMBNAIL_DUMMY is activated
  • Privileged sRGB as default for ImageMagick colorspace

12.11.0

  • Deprecated THUMBNAIL_KVSTORE. Only the Django cache-based store will be used in a future version.
  • Add support for Django 5.0 and 5.1
  • Add support for installing with optional dependencies.
  • Drop support for Django 3.2, 4.0 and 4.1

12.10.0

  • Fixed safe_filter application on various thumbnail template tags.
  • Fixed slow performance with external storages like S3.
  • Added support for Django 4.2.
  • Drop support for Python 3.7.
  • Confirmed Python 3.11 support.

12.9.0

  • Drop support for Django 2.2 and 3.1.
  • Added support for Django 4.1.
  • Drop support for Python 3.6.
  • Fixed various Pillow deprecation warnings.

12.8.0

  • Drop support for Django 3.0.
  • Added support for Django 3.2 and 4.0.
  • Confirmed Python 3.9 and 3.10 support.
  • Adapted size regex getting size from the identify output. #532
  • Display possible thumbnail command labels in command help.
  • Added Jazzband code of conduct.

12.7.0

... (truncated)

Commits
  • a115216 Updated Changelog for the upcoming 13.0.0 release
  • e5b1ab3 Missing quotes around URL in docs
  • 0c91ddb Missing quotes in release.yml
  • bc23aa6 [pre-commit.ci] pre-commit autoupdate
  • 2f4ac8d Drop support for Python 3.9
  • 2f0e95f Privileged sRGB as default for ImageMagick colorspace
  • 9a0cebe Update CHANGES.rst with serialization fix description
  • ce7c996 Change from Vagrant to Docker for running tests
  • 1ed3c83 Add support for Django 5.2
  • 92f1734 Refs #748 - Serialize storage alias whenever possible
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [sorl-thumbnail](https://github.com/jazzband/sorl-thumbnail) to permit the latest version.
- [Release notes](https://github.com/jazzband/sorl-thumbnail/releases)
- [Changelog](https://github.com/jazzband/sorl-thumbnail/blob/master/CHANGES.rst)
- [Commits](jazzband/sorl-thumbnail@v3.2.5...13.0.0)

---
updated-dependencies:
- dependency-name: sorl-thumbnail
  dependency-version: 13.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants