Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Deprecate support for FreeType 2.9.0 #8356

Merged
merged 5 commits into from
Sep 9, 2024

Conversation

hugovk
Copy link
Member

@hugovk hugovk commented Sep 6, 2024

We need FreeType >= 2.9.1 in some places in Pillow 10.4.0.

FreeType 2.9.1 was released on 2018-05-02.

FreeType 2.10.4 fixes a severe vulnerability: "All users should update immediately".

If deprecated in Pillow 11.0.0 (2024-10), it can be removed in Pillow 12.0.0 (2025-10).

Checking some distros from https://repology.org/project/freetype/versions:

distro FreeType
Alpine 3.17 2.12.1
Alpine 3.18 2.12.1
Alpine 3.19 2.12.1
Alpine 3.20 2.12.1
Amazon Linux 2 2.8 / 2.4.11
Arch 2.13.3
CentOS Stream 9 2.10.4
Debian 11 Bullseye 2.10.4
Debian 12 Bookworm 2.12.1
Fedora 39 2.13.1
Fedora 40 2.13.2
Ubuntu 20.04 Focal 2.10.1
Ubuntu 22.04 Jammy 2.11.1
Ubuntu 24.04 Noble 2.13.2

Removing those distros which will be EOL before 2025-10 and sorting by FreeType version:

distro FreeType
CentOS Stream 9 2.10.4
Debian 11 Bullseye 2.10.4
Ubuntu 22.04 Jammy 2.11.1
Alpine 3.19 2.12.1
Alpine 3.20 2.12.1
Debian 12 Bookworm 2.12.1
Ubuntu 24.04 Noble 2.13.2
Arch 2.13.3

All of these are newer than 2.9.1.


For reference, we deprecated support for FreeType 2.7 in Pillow 8.1.0 (issue #5075, PR #5098), and removed it in 9.0.0 (#5777).

@hugovk hugovk added the Deprecation Feature that will be removed in the future label Sep 6, 2024
@radarhere
Copy link
Member

We need FreeType >= 2.9.1 in some places in Pillow 10.4.0.

For reference, this is referring to variation fonts - https://pillow.readthedocs.io/en/stable/releasenotes/6.1.0.html#variation-fonts

docs/deprecations.rst Outdated Show resolved Hide resolved
Tests/test_imagefont.py Outdated Show resolved Hide resolved
hugovk and others added 2 commits September 7, 2024 12:32
Co-authored-by: Andrew Murray <3112309+radarhere@users.noreply.github.com>
docs/deprecations.rst Outdated Show resolved Hide resolved
Co-authored-by: Andrew Murray <3112309+radarhere@users.noreply.github.com>
@radarhere radarhere merged commit 906f932 into python-pillow:main Sep 9, 2024
47 checks passed
@hugovk hugovk deleted the deprecate-freetype-2.9.0 branch September 9, 2024 04:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Deprecation Feature that will be removed in the future
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants