Skip to content

v3.0.2

Choose a tag to compare

@cbenning cbenning released this 24 Mar 19:33
· 14 commits to main since this release

fix: address Dependabot security alerts and drop EOL Python 3.9

  • Bump Pillow floor to >=12.1.1 (fixes CVE out-of-bounds write on PSD
    images, Dependabot #241)
  • Raise requires-python to >=3.10 (Pillow 12.1.1 requires it; Python
    3.9 is EOL since Oct 2025)
  • Upgrade swiper to 12.1.3 (fixes prototype pollution, Dependabot #222)
  • Replace unmaintained react-helmet with react-helmet-async; wrap app
    in HelmetProvider (resolves React 19 peer dependency warning)
  • Drop Python 3.9 from CI matrix