Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 2, 2026

Bumps sorl-thumbnail from 12.11.0 to 13.0.0.

Release notes

Sourced from sorl-thumbnail's releases.

13.0.0

What's Changed

  • THUMBNAIL_STORAGE should now be an alias in the Django STORAGES setting. The old way of specifying a dotted path to a Storage module is still supported.
  • Fixed serialization to use storage aliases instead of backend class paths, ensuring storage OPTIONS (like bucket names and credentials) are preserved when thumbnails are cached and retrieved. Fixes issues with S3, Google Cloud Storage, and other cloud backends.
  • Confirmed support for Python 3.13 (on Django 5.1+).
  • Drop support for Python 3.8 and 3.9.
  • Add support for Django 5.2
  • Accept a tuple as blur radius use GaussianBlur from PIL (#773)
  • Fixed a performance issue in convert engine with _get_exif_orientation
  • Reduced logging in ThumbnailBackend when THUMBNAIL_DUMMY is activated
  • Privileged sRGB as default for ImageMagick colorspace

New Contributors

Full Changelog: jazzband/sorl-thumbnail@12.11.0...13.0.0

Changelog

Sourced from sorl-thumbnail's changelog.

13.0.0

  • THUMBNAIL_STORAGE should now be an alias in the Django STORAGES setting. The old way of specifying a dotted path to a Storage module is still supported.
  • Fixed serialization to use storage aliases instead of backend class paths, ensuring storage OPTIONS (like bucket names and credentials) are preserved when thumbnails are cached and retrieved. Fixes issues with S3, Google Cloud Storage, and other cloud backends.
  • Confirmed support for Python 3.13 (on Django 5.1+).
  • Drop support for Python 3.8 and 3.9.
  • Add support for Django 5.2
  • Accept a tuple as blur radius use GaussianBlur from PIL (#773)
  • Fixed a performance issue in convert engine with _get_exif_orientation
  • Reduced logging in ThumbnailBackend when THUMBNAIL_DUMMY is activated
  • Privileged sRGB as default for ImageMagick colorspace
Commits
  • a115216 Updated Changelog for the upcoming 13.0.0 release
  • e5b1ab3 Missing quotes around URL in docs
  • 0c91ddb Missing quotes in release.yml
  • bc23aa6 [pre-commit.ci] pre-commit autoupdate
  • 2f4ac8d Drop support for Python 3.9
  • 2f0e95f Privileged sRGB as default for ImageMagick colorspace
  • 9a0cebe Update CHANGES.rst with serialization fix description
  • ce7c996 Change from Vagrant to Docker for running tests
  • 1ed3c83 Add support for Django 5.2
  • 92f1734 Refs #748 - Serialize storage alias whenever possible
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [sorl-thumbnail](https://github.com/jazzband/sorl-thumbnail) from 12.11.0 to 13.0.0.
- [Release notes](https://github.com/jazzband/sorl-thumbnail/releases)
- [Changelog](https://github.com/jazzband/sorl-thumbnail/blob/master/CHANGES.rst)
- [Commits](jazzband/sorl-thumbnail@12.11.0...13.0.0)

---
updated-dependencies:
- dependency-name: sorl-thumbnail
  dependency-version: 13.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Feb 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants