Commit Graph

1180 Commits

Author SHA1 Message Date
Jeffrey 'Alex' Clark
17e6f08f83 Rename copilot-instructions.md -> AGENTS.md 2026-04-22 16:28:06 -04:00
Jeffrey 'Alex' Clark
718edc5cc7 Add .github/copilot-instructions.md
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-22 14:06:09 -04:00
Jeffrey 'Alex' Clark
ecef4fb33f
Add STRIDE threat model to security docs (#9562) 2026-04-22 12:33:03 -04:00
Hugo van Kemenade
2593703e51 Hash pin GitHub Actions 2026-04-17 15:54:41 +03:00
Jeffrey 'Alex' Clark
0c0bdf8d5a Update security docs
- docs/handbook/security.rst
- .github/SECURITY.md

Co-authored-by: Andrew Murray <3112309+radarhere@users.noreply.github.com>
2026-04-15 13:07:37 -04:00
Andrew Murray
b27ae0b2fd Reorder to match dependencies order 2026-04-15 22:46:51 +10:00
Andrew Murray
237ab0763c Remove unneeded ? from matchStrings regex 2026-04-15 22:46:51 +10:00
Andrew Murray
658d9ce258 Updated wheels path regex 2026-04-15 22:46:51 +10:00
Hugo van Kemenade
433e46471e
Move dependency versions to single JSON and enable Renovate (#9559) 2026-04-15 15:43:14 +03:00
Jeffrey 'Alex' Clark
2d89dcc7eb
Update .github/FUNDING.yml
Co-authored-by: Andrew Murray <3112309+radarhere@users.noreply.github.com>
2026-04-14 22:37:55 -04:00
Jeffrey 'Alex' Clark
c07f7e56a1 Add python-pillow GitHub Sponsors to FUNDING.yml
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-14 19:54:25 -04:00
Jeffrey 'Alex' Clark
9f24881521 Add STRIDE threat model to security docs
- Update .github/SECURITY.md with threat model summary and link to handbook
- Add docs/handbook/security.rst with full STRIDE analysis (14 threats
  across Spoofing, Tampering, Repudiation, Information Disclosure,
  Denial of Service, and Elevation of Privilege categories)
- Add prioritised mitigation recommendations
- Link security.rst into the handbook toctree

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-14 12:13:45 -04:00
Hugo van Kemenade
6dd03edba8
Use GitLab as data source for FreeType
Co-authored-by: Andrew Murray <3112309+radarhere@users.noreply.github.com>
2026-04-13 15:39:38 +03:00
Hugo van Kemenade
65767a0cf7
Use GitLab as data source for libtiff
Co-authored-by: Andrew Murray <3112309+radarhere@users.noreply.github.com>
2026-04-12 12:08:07 +03:00
Hugo van Kemenade
a49c63208a Move dependency versions to single JSON and enable Renovate 2026-04-12 12:07:07 +03:00
Andrew Murray
4b911c889b
Correct environment URL (#9558) 2026-04-11 20:22:22 +10:00
Andrew Murray
3157407762
Remove or protect secrets in Actions (#9544) 2026-04-11 17:05:49 +10:00
Hugo van Kemenade
eda14b6c4a Restrict nightly Anaconda uploads to environment 2026-04-10 16:33:18 +03:00
Hugo van Kemenade
5ada8c8306
Use github.event.repository.fork (#9551) 2026-04-09 18:43:23 +03:00
Jeffrey 'Alex' Clark
b97034ae02 Link to New draft security advisory 2026-04-08 20:01:39 -04:00
Jeffrey 'Alex' Clark
8f625f19ef
Update .github/SECURITY.md
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
2026-04-08 16:17:52 -04:00
Jeffrey 'Alex' Clark
8edb7734b5
Update .github/SECURITY.md
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
2026-04-08 14:52:36 -04:00
Jeffrey 'Alex' Clark
05860779a1
Update .github/SECURITY.md
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
2026-04-08 14:52:19 -04:00
Jeffrey 'Alex' Clark
ab02e810b0 Update security policy 2026-04-08 13:16:37 -04:00
Andrew Murray
ed89b93940 Use github.event.repository.fork 2026-04-08 21:51:43 +10:00
Hugo van Kemenade
7cf4dac7ae
Move Homebrew dependencies into Brewfile (#9546) 2026-04-07 19:09:30 +10:00
Hugo van Kemenade
43a3e5ca21 Remove Codecov token 2026-04-06 23:35:44 +03:00
Andrew Murray
20307667f9 Remove deprecated option to allow Python 3.13t wheels 2026-04-03 15:51:01 +11:00
renovate[bot]
c39eda6348
Update github-actions (#9533) 2026-04-03 15:20:29 +11:00
Hugo van Kemenade
abb1d2bf6e
Remove Debian 12 and Fedora 42 from CI (#9530) 2026-04-02 18:11:35 +11:00
Andrew Murray
4dc9398402 Remove manylinux2014 2026-04-02 07:55:58 +11:00
Andrew Murray
30b3dff0cb Remove Amazon Linux 2 2026-04-02 07:55:58 +11:00
Andrew Murray
cf4a8ee0b9 Updated xz to 5.8.3 2026-04-01 08:26:13 +11:00
Andrew Murray
65c4f4ea8d Updated libjpeg-turbo to 3.1.4 2026-03-28 13:19:27 +11:00
Andrew Murray
27de86483d Switch iOS back to macos-15-intel 2026-03-27 21:54:45 +11:00
Andrew Murray
f176f5dad6
Update libpng to 1.6.56 (#9499) 2026-03-27 08:57:45 +11:00
Hugo van Kemenade
e7f150df7f
Update freetype to 2.14.3 (#9485) 2026-03-25 14:37:14 +02:00
Hugo van Kemenade
3a83d6abc3
Enable colour in CI logs (#9486) 2026-03-25 10:54:16 +11:00
Andrew Murray
f0b5f56e9f
Updated libavif to 1.4.1 (#9479) 2026-03-24 22:34:11 +11:00
Andrew Murray
4e85badfc1 Updated freetype to 2.14.3 2026-03-23 21:23:24 +11:00
Andrew Murray
fc0f65998f
Updated harfbuzz to 13.2.1 (#9461) 2026-03-23 21:21:51 +11:00
Andrew Murray
e34c7bee91 Updated Ghostscript to 10.7.0 2026-03-17 10:56:32 +11:00
Hugo van Kemenade
c66ab56b4b
Update harfbuzz to 13.0.1 (#9453) 2026-03-10 16:12:57 +02:00
Andrew Murray
686174b5cc Updated libavif to 1.4.0 2026-03-10 20:26:31 +11:00
Andrew Murray
42a4af5c81
Merge branch 'main' into harfbuzz 2026-03-09 22:41:04 +11:00
Andrew Murray
28524f2069
Update freetype to 2.14.2 (#9449) 2026-03-09 22:39:27 +11:00
Andrew Murray
5450f9d08a Updated harfbuzz to 13.0.1 2026-03-08 07:12:17 +11:00
Andrew Murray
c68cc49d8e
Upgrade CI from macos-15-intel to macos-26-intel (#9454) 2026-03-05 22:51:03 +11:00
renovate[bot]
0fae74731d
Update actions/download-artifact action to v8 (#9451) 2026-03-03 16:36:24 +11:00
Hugo van Kemenade
f273619682 Test on macos-26-intel 2026-03-02 15:44:23 +02:00