Open-source demos hosted on Dash Gallery

Plotly

Last update: Jan 7, 2023

Related tags

Overview

Dash Sample Apps

This repository hosts the code for over 100 open-source Dash apps written in Python or R. They can serve as a starting point for your own Dash app, as a learning tool to better understand how Dash works, as a reusable templates, and much more.

Most apps in this repository are hosted on Dash Gallery, which is our internal server running on Dash Enterprise Kubernetes. Note that you can find both open-sourced apps and demos for our licensed products, including Design Kit and Snapshot Engine. If you are interested in learning more, don't hesitate to reach out to get a demo. If you want to only see the open-sourced apps, select the "Open Source" tag.

Downloading and running a single app

Visit the releases page and download and unzip the app you want. Then cd into the app directory and install its dependencies in a virtual environment in the following way:

python -m venv venv
source venv/bin/activate  # Windows: \venv\scripts\activate
pip install -r requirements.txt

then you can run the app:

python app.py

Cloning this whole repository

To clone this repository, run:

git clone https://github.com/plotly/dash-sample-apps

Note this might take a long time since it copies over 100 apps available in the repo. If you just want to try one app, refer to the section above.

Contributing

To contribute to this repository, please see the contributing guide.

Comments

Add label properties app
Issue for app: #507

App pull request

[X] This is a new app

[ ] I am improving an existing app (redesigns/code "makeovers")

About

Playground deployment URL (new version): https://dash-playground.plotly.host/dash-label-properties

Old Python app repository link: https://github.com/plotly/canvas-portal/blob/master/apps/object-properties/app.py

Workflow

[X] I have created a branch in the appropriate monorepo, and the elements necessary for successful deployment are in place.

[X] If the app is a redesigned and/or restyled version of an existing gallery app, I've summarized the changes requested in the appropriate Streambed issue and confirm that they have been applied.

[X] If the app is on the Dash Gallery portal, I have added a link to the GitHub repository for the source code in the portal description.

[ ] If the app is a reimplementation of a Python gallery app for the DashR gallery, the app in this PR mimics, as closely as possible, the style and functionality of the existing app.=

[X] I have removed all Google Analytics code from the app's assets/ folder.

The pre-review review

I have addressed all of the following questions:

[x] Does everything in my code serve some purpose? (I have removed any dead and/or irrelevant code.)

[x] Does everything in my code have a clear purpose? (My code is readable and, where it isn't, it has been commented appropriately.)]

[x] Am I reinventing the wheel? (I have used appropriate packages to lessen the volume of code that needs to be maintained.)
opened by surchs 16
ct exploration app
App pull request

[x] This is a new app

[ ] I am improving an existing app (redesigns/code "makeovers")

About

Playground deployment URL (new version):

Current gallery app URL: (delete this line if inapplicable)

Python app repository link: (delete this line if you are working on a Python app)

Workflow

[ ] I have created a branch in the appropriate monorepo, and the elements necessary for successful deployment are in place.

[ ] If the app is a redesigned and/or restyled version of an existing gallery app, I've summarized the changes requested in the appropriate Streambed issue and confirm that they have been applied.

[ ] If the app is on the Dash Gallery portal, I have added a link to the GitHub repository for the source code in the portal description.

[ ] If the app is a reimplementation of a Python gallery app for the DashR gallery, the app in this PR mimics, as closely as possible, the style and functionality of the existing app.=

[ ] I have removed all Google Analytics code from the app's assets/ folder.

The pre-review review

I have addressed all of the following questions:

[ ] Does everything in my code serve some purpose? (I have removed any dead and/or irrelevant code.)

[ ] Does everything in my code have a clear purpose? (My code is readable and, where it isn't, it has been commented appropriately.)]

[ ] Am I reinventing the wheel? (I have used appropriate packages to lessen the volume of code that needs to be maintained.)
opened by emmanuelle 15
dash-mapd-demo application error

App name

dash-mapd-demo

Description of bug

https://dash-gallery.plotly.host/dash-mapd-demo/ application error More information in application logs: https://dash-gallery.plotly.host/Manager/apps/dash-mapd-demo/logs

How to replicate the bug

Visit https://dash-gallery.plotly.host/dash-mapd-demo/

Other notes
bug

opened by cldougl 15

analytics: remove Google Analytics in favor of Google Tag Manager

As per conversation here: https://github.com/plotly/marketing-team/issues/118#issuecomment-542334742

We'd like to put the Google Tag Manager script into our dash-sample-apps instead of using GA only.

GTM includes such tracking codes like Pardot, which the marketing team would find useful to add on the apps.

Paste this code as high in the <head> of the page as possible:

<!-- Google Tag Manager -->
<script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-N6T2RXG');</script>
<!-- End Google Tag Manager -->

Additionally, paste this code immediately after the opening <body> tag:

<!-- Google Tag Manager (noscript) -->
<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-N6T2RXG"
height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
<!-- End Google Tag Manager (noscript) -->

opened by VeraZab 14

Add pileup demo (#minor)
Issue for app: #[issue number here]

App pull request

[x] This is a new app

[ ] I am improving an existing app (redesigns/code "makeovers")

About

Playground deployment URL (new version):

Current gallery app URL: (delete this line if inapplicable)

Python app repository link: (delete this line if you are working on a Python app)

Workflow

[x] I have created a branch in the appropriate monorepo, and the elements necessary for successful deployment are in place.

[ ] If the app is a redesigned and/or restyled version of an existing gallery app, I've summarized the changes requested in the appropriate Streambed issue and confirm that they have been applied.

[ ] If the app is on the Dash Gallery portal, I have added a link to the GitHub repository for the source code in the portal description.

[ ] If the app is a reimplementation of a Python gallery app for the DashR gallery, the app in this PR mimics, as closely as possible, the style and functionality of the existing app.=

[ ] I have removed all Google Analytics code from the app's assets/ folder.

The pre-review review

I have addressed all of the following questions:

[ ] Does everything in my code serve some purpose? (I have removed any dead and/or irrelevant code.)

[ ] Does everything in my code have a clear purpose? (My code is readable and, where it isn't, it has been commented appropriately.)]

[ ] Am I reinventing the wheel? (I have used appropriate packages to lessen the volume of code that needs to be maintained.)

Post PR (at merge time)

[ ] When you are merging, make sure to write one of the following tags in the commit message (or it will default to patch):

#patch - An app has been updated or fixed

#minor - A new app has been added, or an app has been significantly reworked

#major - Breaking changes, make sure to discuss with dash-core before using this tag
opened by akmorrow13 8
Added dash-3d-image-partitioning
App pull request

This is a new app

3d image partitioning app, see https://github.com/plotly/dash-3d-image-partitioning

About

Playground deployment URL (new version): https://dash-playground.plotly.host/dash-3d-image-partitioning/

Current gallery app URL: (delete this line if inapplicable): https://dash-gallery.plotly.host/dash-3d-image-partitioning/

Workflow

[ x] I have created a branch in the appropriate monorepo, and the elements necessary for successful deployment are in place.

[ ] If the app is on the Dash Gallery portal, I have added a link to the GitHub repository for the source code in the portal description.

The pre-review review

I have addressed all of the following questions:

[x ] Does everything in my code serve some purpose? (I have removed any dead and/or irrelevant code.)

[x ] Does everything in my code have a clear purpose? (My code is readable and, where it isn't, it has been commented appropriately.)]
opened by nicholas-esterer 8
Canvas annotation app
Issue for app: #https://github.com/plotly/dash-customer-success/issues/255

App pull request

[x] This is a new app

[ ] I am improving an existing app (redesigns/code "makeovers")

About

Playground deployment URL (new version): https://dash-playground.plotly.host/dash-canvas-ocr/

Current gallery app URL: https://dash-gallery.plotly.host/dash-canvas-ocr/

Workflow

[ ] I have created a branch in the appropriate monorepo, and the elements necessary for successful deployment are in place.

[ ] If the app is a redesigned and/or restyled version of an existing gallery app, I've summarized the changes requested in the appropriate Streambed issue and confirm that they have been applied.

[ ] If the app is on the Dash Gallery portal, I have added a link to the GitHub repository for the source code in the portal description.

[ ] If the app is a reimplementation of a Python gallery app for the DashR gallery, the app in this PR mimics, as closely as possible, the style and functionality of the existing app.=

[ ] I have removed all Google Analytics code from the app's assets/ folder.

The pre-review review

I have addressed all of the following questions:

[ ] Does everything in my code serve some purpose? (I have removed any dead and/or irrelevant code.)

[ ] Does everything in my code have a clear purpose? (My code is readable and, where it isn't, it has been commented appropriately.)]

[ ] Am I reinventing the wheel? (I have used appropriate packages to lessen the volume of code that needs to be maintained.)
opened by ycaokris 8
DashR Oil and Gas
Issue for app: #[issue number here]

App pull request

[x] This is a new app

[x] I am improving an existing app (redesigns/code "makeovers")

About

Playground deployment URL (new version):

Current gallery app URL: (delete this line if inapplicable)

Python app repository link: (delete this line if you are working on a Python app)

Workflow

[x] I have created a branch in the appropriate monorepo, and the elements necessary for successful deployment are in place.

[x] If the app is a redesigned and/or restyled version of an existing gallery app, I've summarized the changes requested in the appropriate Streambed issue and confirm that they have been applied.

[x] If the app is on the Dash Gallery portal, I have added a link to the GitHub repository for the source code in the portal description.

[x] If the app is a reimplementation of a Python gallery app for the DashR gallery, the app in this PR mimics, as closely as possible, the style and functionality of the existing app.

The pre-review review

I have addressed all of the following questions:

[x] Does everything in my code serve some purpose? (I have removed any dead and/or irrelevant code.)

[x] Does everything in my code have a clear purpose? (My code is readable and, where it isn't, it has been commented appropriately.)]

[x] Am I reinventing the wheel? (I have used appropriate packages to lessen the volume of code that needs to be maintained.)

dashr
opened by KPhans 8
Dash opioid epidemic
Issue for app: #29

App pull request

[ ] This is a new app

[x] I am improving an existing app (redesigns/code "makeovers")

About

Playground deployment URL (new version): https://dash-playground.plotly.host/dash-opioid-epidemic/

Current gallery app URL: https://dash-gallery.plotly.host/dash-opioid-epidemic/

Workflow

[x] I have created a branch in the appropriate monorepo, and the elements necessary for successful deployment are in place.

[x] If the app is a redesigned and/or restyled version of an existing gallery app, I've summarized the changes requested in the appropriate Streambed issue and confirm that they have been applied.

[x] If the app is on the Dash Gallery portal, I have added a link to the GitHub repository for the source code in the portal description.

[x] If the app is a reimplementation of a Python gallery app for the DashR gallery, the app in this PR mimics, as closely as possible, the style and functionality of the existing app.

The pre-review review

I have addressed all of the following questions:

[x] Does everything in my code serve some purpose? (I have removed any dead and/or irrelevant code.)

[x] Does everything in my code have a clear purpose? (My code is readable and, where it isn't, it has been commented appropriately.)]

[x] Am I reinventing the wheel? (I have used appropriate packages to lessen the volume of code that needs to be maintained.)
opened by YunkeXiao 8
Superpixel modal
Issue for app: #514

App pull request

[ ] This is a new app

[X] I am improving an existing app (redesigns/code "makeovers")

About

Playground deployment URL (new version): https://dash-playground.plotly.host/dash-3d-image-partitioning/

Current gallery app URL: https://dash-gallery.plotly.host/dash-3d-image-partitioning/

Workflow

[X] I have created a branch in the appropriate monorepo, and the elements necessary for successful deployment are in place.

[X] If the app is a redesigned and/or restyled version of an existing gallery app, I've summarized the changes requested in the appropriate Streambed issue and confirm that they have been applied.

[X] If the app is on the Dash Gallery portal, I have added a link to the GitHub repository for the source code in the portal description.

[ ] If the app is a reimplementation of a Python gallery app for the DashR gallery, the app in this PR mimics, as closely as possible, the style and functionality of the existing app.=

[X] I have removed all Google Analytics code from the app's assets/ folder.

The pre-review review

I have addressed all of the following questions:

[X] Does everything in my code serve some purpose? (I have removed any dead and/or irrelevant code.)

[X] Does everything in my code have a clear purpose? (My code is readable and, where it isn't, it has been commented appropriately.)]

[ ] Am I reinventing the wheel? (I have used appropriate packages to lessen the volume of code that needs to be maintained.)
opened by surchs 7
In trainable segmentation, it is very slow to add annotations after a first segmentation has been performed

App name

https://dash-gallery.plotly.host/dash-image-segmentation/

Description of bug

After an initial segmentation has been performed, one often wishes to add new annotations to correct the model, but the loading component seems to be spinning forever and it is not possible to add new annotations. Unchecking "Show segmentation" does not seem to solve the problem.

Tagging you here @nicholas-esterer, I can also take a look after we decide together on priorities for the CZI apps.

Ideally it should not take more time to add new annotations than before the segmentation has been computed.

bug

opened by emmanuelle 7
Bump certifi from 2021.5.30 to 2022.12.7 in /apps/codecarbon-demo
Bumps certifi from 2021.5.30 to 2022.12.7.

Commits

9e9e840 2022.12.07

b81bdb2 2022.09.24

939a28f 2022.09.14

aca828a 2022.06.15.2

de0eae1 Only use importlib.resources's new files() / Traversable API on Python ≥3.11 ...

b8eb5e9 2022.06.15.1

47fb7ab Fix deprecation warning on Python 3.11 (#199)

b0b48e0 fixes #198 -- update link in license

9d514b4 2022.06.15

4151e88 Add py.typed to MANIFEST.in to package in sdist (#196)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump certifi from 2020.6.20 to 2022.12.7 in /apps/dash-chatbot
Bumps certifi from 2020.6.20 to 2022.12.7.

Commits

9e9e840 2022.12.07

b81bdb2 2022.09.24

939a28f 2022.09.14

aca828a 2022.06.15.2

de0eae1 Only use importlib.resources's new files() / Traversable API on Python ≥3.11 ...

b8eb5e9 2022.06.15.1

47fb7ab Fix deprecation warning on Python 3.11 (#199)

b0b48e0 fixes #198 -- update link in license

9d514b4 2022.06.15

4151e88 Add py.typed to MANIFEST.in to package in sdist (#196)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump certifi from 2020.4.5.1 to 2022.12.7 in /apps/dash-cytoscape-lda
Bumps certifi from 2020.4.5.1 to 2022.12.7.

Commits

9e9e840 2022.12.07

b81bdb2 2022.09.24

939a28f 2022.09.14

aca828a 2022.06.15.2

de0eae1 Only use importlib.resources's new files() / Traversable API on Python ≥3.11 ...

b8eb5e9 2022.06.15.1

47fb7ab Fix deprecation warning on Python 3.11 (#199)

b0b48e0 fixes #198 -- update link in license

9d514b4 2022.06.15

4151e88 Add py.typed to MANIFEST.in to package in sdist (#196)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump certifi from 2020.12.5 to 2022.12.7 in /apps/dash-aix360-heart
Bumps certifi from 2020.12.5 to 2022.12.7.

Commits

9e9e840 2022.12.07

b81bdb2 2022.09.24

939a28f 2022.09.14

aca828a 2022.06.15.2

de0eae1 Only use importlib.resources's new files() / Traversable API on Python ≥3.11 ...

b8eb5e9 2022.06.15.1

47fb7ab Fix deprecation warning on Python 3.11 (#199)

b0b48e0 fixes #198 -- update link in license

9d514b4 2022.06.15

4151e88 Add py.typed to MANIFEST.in to package in sdist (#196)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump certifi from 2020.12.5 to 2022.12.7 in /apps/dash-baseball-statistics
Bumps certifi from 2020.12.5 to 2022.12.7.

Commits

9e9e840 2022.12.07

b81bdb2 2022.09.24

939a28f 2022.09.14

aca828a 2022.06.15.2

de0eae1 Only use importlib.resources's new files() / Traversable API on Python ≥3.11 ...

b8eb5e9 2022.06.15.1

47fb7ab Fix deprecation warning on Python 3.11 (#199)

b0b48e0 fixes #198 -- update link in license

9d514b4 2022.06.15

4151e88 Add py.typed to MANIFEST.in to package in sdist (#196)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump pillow from 8.2.0 to 9.3.0 in /apps/dash-aix360-heart
Bumps pillow from 8.2.0 to 9.3.0.

Release notes

Sourced from pillow's releases.

9.3.0

https://pillow.readthedocs.io/en/stable/releasenotes/9.3.0.html

Changes

Initialize libtiff buffer when saving #6699 [@radarhere]

Limit SAMPLESPERPIXEL to avoid runtime DOS #6700 [@wiredfool]

Inline fname2char to fix memory leak #6329 [@nulano]

Fix memory leaks related to text features #6330 [@nulano]

Use double quotes for version check on old CPython on Windows #6695 [@hugovk]

GHA: replace deprecated set-output command with GITHUB_OUTPUT file #6697 [@nulano]

Remove backup implementation of Round for Windows platforms #6693 [@cgohlke]

Upload fribidi.dll to GitHub Actions #6532 [@nulano]

Fixed set_variation_by_name offset #6445 [@radarhere]

Windows build improvements #6562 [@nulano]

Fix malloc in _imagingft.c:font_setvaraxes #6690 [@cgohlke]

Only use ASCII characters in C source file #6691 [@cgohlke]

Release Python GIL when converting images using matrix operations #6418 [@hmaarrfk]

Added ExifTags enums #6630 [@radarhere]

Do not modify previous frame when calculating delta in PNG #6683 [@radarhere]

Added support for reading BMP images with RLE4 compression #6674 [@npjg]

Decode JPEG compressed BLP1 data in original mode #6678 [@radarhere]

pylint warnings #6659 [@marksmayo]

Added GPS TIFF tag info #6661 [@radarhere]

Added conversion between RGB/RGBA/RGBX and LAB #6647 [@radarhere]

Do not attempt normalization if mode is already normal #6644 [@radarhere]

Fixed seeking to an L frame in a GIF #6576 [@radarhere]

Consider all frames when selecting mode for PNG save_all #6610 [@radarhere]

Don't reassign crc on ChunkStream close #6627 [@radarhere]

Raise a warning if NumPy failed to raise an error during conversion #6594 [@radarhere]

Only read a maximum of 100 bytes at a time in IMT header #6623 [@radarhere]

Show all frames in ImageShow #6611 [@radarhere]

Allow FLI palette chunk to not be first #6626 [@radarhere]

If first GIF frame has transparency for RGB_ALWAYS loading strategy, use RGBA mode #6592 [@radarhere]

Round box position to integer when pasting embedded color #6517 [@radarhere]

Removed EXIF prefix when saving WebP #6582 [@radarhere]

Pad IM palette to 768 bytes when saving #6579 [@radarhere]

Added DDS BC6H reading #6449 [@ShadelessFox]

Added support for opening WhiteIsZero 16-bit integer TIFF images #6642 [@JayWiz]

Raise an error when allocating translucent color to RGB palette #6654 [@jsbueno]

Moved mode check outside of loops #6650 [@radarhere]

Added reading of TIFF child images #6569 [@radarhere]

Improved ImageOps palette handling #6596 [@PososikTeam]

Defer parsing of palette into colors #6567 [@radarhere]

Apply transparency to P images in ImageTk.PhotoImage #6559 [@radarhere]

Use rounding in ImageOps contain() and pad() #6522 [@bibinhashley]

Fixed GIF remapping to palette with duplicate entries #6548 [@radarhere]

Allow remap_palette() to return an image with less than 256 palette entries #6543 [@radarhere]

Corrected BMP and TGA palette size when saving #6500 [@radarhere]

... (truncated)

Changelog

Sourced from pillow's changelog.

9.3.0 (2022-10-29)

Limit SAMPLESPERPIXEL to avoid runtime DOS #6700 [wiredfool]

Initialize libtiff buffer when saving #6699 [radarhere]

Inline fname2char to fix memory leak #6329 [nulano]

Fix memory leaks related to text features #6330 [nulano]

Use double quotes for version check on old CPython on Windows #6695 [hugovk]

Remove backup implementation of Round for Windows platforms #6693 [cgohlke]

Fixed set_variation_by_name offset #6445 [radarhere]

Fix malloc in _imagingft.c:font_setvaraxes #6690 [cgohlke]

Release Python GIL when converting images using matrix operations #6418 [hmaarrfk]

Added ExifTags enums #6630 [radarhere]

Do not modify previous frame when calculating delta in PNG #6683 [radarhere]

Added support for reading BMP images with RLE4 compression #6674 [npjg, radarhere]

Decode JPEG compressed BLP1 data in original mode #6678 [radarhere]

Added GPS TIFF tag info #6661 [radarhere]

Added conversion between RGB/RGBA/RGBX and LAB #6647 [radarhere]

Do not attempt normalization if mode is already normal #6644 [radarhere]

... (truncated)

Commits

d594f4c Update CHANGES.rst [ci skip]

909dc64 9.3.0 version bump

1a51ce7 Merge pull request #6699 from hugovk/security-libtiff_buffer

2444cdd Merge pull request #6700 from hugovk/security-samples_per_pixel-sec

744f455 Added release notes

0846bfa Add to release notes

799a6a0 Fix linting

00b25fd Hide UserWarning in logs

05b175e Tighter test case

13f2c5a Prevent DOS with large SAMPLESPERPIXEL in Tiff IFD

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0