Skip to content

Update Pillow constraints for host tooling - #648

Open
Jacksper13 wants to merge 2 commits into
dev-v2.4.0from
dependabot-host-tooling-hygiene
Open

Update Pillow constraints for host tooling#648
Jacksper13 wants to merge 2 commits into
dev-v2.4.0from
dependabot-host-tooling-hygiene

Conversation

@Jacksper13

@Jacksper13 Jacksper13 commented Jul 23, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • require patched Pillow 12.3.x for the vendored Trezor image tooling
  • apply the dependency only on Python 3.10+, matching Pillow's supported interpreter range
  • align the trezorlib extra dependency and developer setup instructions

Context

These dependency alerts are for host-side Python tooling in the vendored Trezor tree. Passport firmware does not ship CPython or Pillow, so this is dependency hygiene for developer/build environments rather than a device-runtime fix.

Validation

  • parsed the Poetry dependency metadata
  • validated the PEP 508 requirement and Python marker
  • ran a Pillow 12.3 image resize/pixel-access smoke test on a repository asset

@Jacksper13
Jacksper13 marked this pull request as ready for review July 23, 2026 12:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant