[PR #21988] [CLOSED] chore(deps): bump brotli from 1.1.0 to 1.2.0 in /backend #26381

New Issue

Closed

opened 2026-04-20 06:27:55 -05:00 by GiteaMirror · 0 comments

GiteaMirror commented 2026-04-20 06:27:55 -05:00

Owner

Copy Link

📋 Pull Request Information

Original PR: https://github.com/open-webui/open-webui/pull/21988
Author: @dependabot[bot]
Created: 3/1/2026
Status: ❌ Closed

Base: dev ← Head: dependabot/pip/backend/dev/brotli-1.2.0

---

📝 Commits (1)

• 699583b chore(deps): bump brotli from 1.1.0 to 1.2.0 in /backend

📊 Changes

2 files changed (+2 additions, -2 deletions)

View changed files

📝 backend/requirements-min.txt (+1 -1)
📝 backend/requirements.txt (+1 -1)

📄 Description

Bumps brotli from 1.1.0 to 1.2.0.

Release notes

Sourced from brotli's releases.

v1.2.0

SECURITY

• python: added Decompressor::can_accept_more_data method and optional output_buffer_limit argument Decompressor::process; that allows mitigation of unexpectedly large output; reported by Charles Chan (https://github.com/charleswhchan)

Added

• decoder / encoder: added static initialization to reduce binary size
• python: allow limiting decoder output (see SECURITY section)
• CLI: brcat alias; allow decoding concatenated brotli streams
• kt: pure Kotlin decoder
• cgo: support "raw" dictionaries
• build: Bazel modules

Removed

• java: dropped finalize() for native entities

Fixed

• java: in compress pass correct length to native encoder

Improved

• build: install man pages
• build: updated / fixed / refined Bazel buildfiles
• encoder: faster encoding
• cgo: link via pkg-config
• python: modernize extension / allow multi-phase module initialization

Changed

• decoder / encoder: static tables use "small" model (allows 2GiB+ binaries)

v1.2.0 RC2

What's Changed (compared to RC1)

• pick changes from Debian patch by @​copybara-service[bot] in google/brotli#1349
• pick changes from Alpine patch by @​copybara-service[bot] in google/brotli#1348
• pick VCPKG patches by @​copybara-service[bot] in google/brotli#1350
• fix copy-paste in Java decoder by @​copybara-service[bot] in google/brotli#1357

v1.2.0 RC1

IMPORTANT: though this is a pre-release for v1.2.0, it is expected that some changes will be added before release; most notably concerning build files: patches applied by Alpine, Debian, Conan, VCPKG will be partially/fully integrated.

SECURITY

• python: added Decompressor::can_accept_more_data method and optional output_buffer_limit argument Decompressor::process; that allows mitigation of unexpectedly large output; reported by Charles Chan (https://github.com/charleswhchan)

Added

• decoder / encoder: added static initialization to reduce binary size
• python: allow limiting decoder output (see SECURITY section)

... (truncated)

Changelog

Sourced from brotli's changelog.

[1.2.0] - 2025-10-27

SECURITY

• python: added Decompressor::can_accept_more_data method and optional output_buffer_limit argument Decompressor::process; that allows mitigation of unexpectedly large output; reported by Charles Chan (https://github.com/charleswhchan)

Added

• decoder / encoder: added static initialization to reduce binary size
• python: allow limiting decoder output (see SECURITY section)
• CLI: brcat alias; allow decoding concatenated brotli streams
• kt: pure Kotlin decoder
• cgo: support "raw" dictionaries
• build: Bazel modules

Removed

• java: dropped finalize() for native entities

Fixed

• java: in compress pass correct length to native encoder

Improved

• build: install man pages
• build: updated / fixed / refined Bazel buildfiles
• encoder: faster encoding
• cgo: link via pkg-config
• python: modernize extension / allow multi-phase module initialization

Changed

• decoder / encoder: static tables use "small" model (allows 2GiB+ binaries)

Commits

• 028fb5a release v1.2.0
• 390de5b build and test csharp decoder
• 3499acb regenerate go/kt/js/ts
• 8ca2312 fix release workflow
• ee771da fix copy-paste in Java decoder
• 42aee32 try to fix release workflow
• 392c06b redesign release resource uploading
• 1964cdb ramp up all GH actions plugins
• 61605b1 pick VCPKG patches
• 4b0f27b pick changes from Alpine patch
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/open-webui/pull/21988 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 3/1/2026 **Status:** ❌ Closed **Base:** `dev` ← **Head:** `dependabot/pip/backend/dev/brotli-1.2.0` --- ### 📝 Commits (1) - [`699583b`](https://github.com/open-webui/open-webui/commit/699583b8ddf75fafcae059be13610abef38c83ef) chore(deps): bump brotli from 1.1.0 to 1.2.0 in /backend ### 📊 Changes **2 files changed** (+2 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `backend/requirements-min.txt` (+1 -1) 📝 `backend/requirements.txt` (+1 -1) </details> ### 📄 Description Bumps [brotli](https://github.com/google/brotli) from 1.1.0 to 1.2.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/brotli/releases">brotli's releases</a>.</em></p> <blockquote> <h2>v1.2.0</h2> <h3>SECURITY</h3> <ul> <li>python: added <code>Decompressor::can_accept_more_data</code> method and optional <code>output_buffer_limit</code> argument <code>Decompressor::process</code>; that allows mitigation of unexpectedly large output; reported by Charles Chan (<a href="https://github.com/charleswhchan">https://github.com/charleswhchan</a>)</li> </ul> <h3>Added</h3> <ul> <li><strong>decoder / encoder: added static initialization to reduce binary size</strong></li> <li>python: allow limiting decoder output (see SECURITY section)</li> <li>CLI: <code>brcat</code> alias; allow decoding concatenated brotli streams</li> <li>kt: pure Kotlin decoder</li> <li>cgo: support &quot;raw&quot; dictionaries</li> <li>build: Bazel modules</li> </ul> <h3>Removed</h3> <ul> <li>java: dropped <code>finalize()</code> for native entities</li> </ul> <h3>Fixed</h3> <ul> <li>java: in <code>compress</code> pass correct length to native encoder</li> </ul> <h3>Improved</h3> <ul> <li>build: install man pages</li> <li>build: updated / fixed / refined Bazel buildfiles</li> <li>encoder: faster encoding</li> <li>cgo: link via pkg-config</li> <li>python: modernize extension / allow multi-phase module initialization</li> </ul> <h3>Changed</h3> <ul> <li>decoder / encoder: static tables use &quot;small&quot; model (allows 2GiB+ binaries)</li> </ul> <h2>v1.2.0 RC2</h2> <h2>What's Changed (compared to RC1)</h2> <ul> <li>pick changes from Debian patch by <a href="https://github.com/copybara-service"><code>@​copybara-service</code></a>[bot] in <a href="https://redirect.github.com/google/brotli/pull/1349">google/brotli#1349</a></li> <li>pick changes from Alpine patch by <a href="https://github.com/copybara-service"><code>@​copybara-service</code></a>[bot] in <a href="https://redirect.github.com/google/brotli/pull/1348">google/brotli#1348</a></li> <li>pick VCPKG patches by <a href="https://github.com/copybara-service"><code>@​copybara-service</code></a>[bot] in <a href="https://redirect.github.com/google/brotli/pull/1350">google/brotli#1350</a></li> <li>fix copy-paste in Java decoder by <a href="https://github.com/copybara-service"><code>@​copybara-service</code></a>[bot] in <a href="https://redirect.github.com/google/brotli/pull/1357">google/brotli#1357</a></li> </ul> <h2>v1.2.0 RC1</h2> <p><strong>IMPORTANT</strong>: though this is a pre-release for v1.2.0, it is expected that some changes will be added before release; most notably concerning build files: patches applied by Alpine, Debian, Conan, VCPKG will be partially/fully integrated.</p> <h3>SECURITY</h3> <ul> <li>python: added <code>Decompressor::can_accept_more_data</code> method and optional <code>output_buffer_limit</code> argument <code>Decompressor::process</code>; that allows mitigation of unexpectedly large output; reported by Charles Chan (<a href="https://github.com/charleswhchan">https://github.com/charleswhchan</a>)</li> </ul> <h3>Added</h3> <ul> <li><strong>decoder / encoder: added static initialization to reduce binary size</strong></li> <li>python: allow limiting decoder output (see SECURITY section)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/google/brotli/blob/master/CHANGELOG.md">brotli's changelog</a>.</em></p> <blockquote> <h2>[1.2.0] - 2025-10-27</h2> <h3>SECURITY</h3> <ul> <li>python: added <code>Decompressor::can_accept_more_data</code> method and optional <code>output_buffer_limit</code> argument <code>Decompressor::process</code>; that allows mitigation of unexpectedly large output; reported by Charles Chan (<a href="https://github.com/charleswhchan">https://github.com/charleswhchan</a>)</li> </ul> <h3>Added</h3> <ul> <li><strong>decoder / encoder: added static initialization to reduce binary size</strong></li> <li>python: allow limiting decoder output (see SECURITY section)</li> <li>CLI: <code>brcat</code> alias; allow decoding concatenated brotli streams</li> <li>kt: pure Kotlin decoder</li> <li>cgo: support &quot;raw&quot; dictionaries</li> <li>build: Bazel modules</li> </ul> <h3>Removed</h3> <ul> <li>java: dropped <code>finalize()</code> for native entities</li> </ul> <h3>Fixed</h3> <ul> <li>java: in <code>compress</code> pass correct length to native encoder</li> </ul> <h3>Improved</h3> <ul> <li>build: install man pages</li> <li>build: updated / fixed / refined Bazel buildfiles</li> <li>encoder: faster encoding</li> <li>cgo: link via pkg-config</li> <li>python: modernize extension / allow multi-phase module initialization</li> </ul> <h3>Changed</h3> <ul> <li>decoder / encoder: static tables use &quot;small&quot; model (allows 2GiB+ binaries)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/brotli/commit/028fb5a23661f123017c060daa546b55cf4bde29"><code>028fb5a</code></a> release v1.2.0</li> <li><a href="https://github.com/google/brotli/commit/390de5b472ec8c40a7b8e5029e47fd6493f7a755"><code>390de5b</code></a> build and test csharp decoder</li> <li><a href="https://github.com/google/brotli/commit/3499acbb7ac7818c1b929a8c9c5c5f8a634751da"><code>3499acb</code></a> regenerate go/kt/js/ts</li> <li><a href="https://github.com/google/brotli/commit/8ca2312c61f1f5853be0708f9b1d6a6ad002d2a4"><code>8ca2312</code></a> fix release workflow</li> <li><a href="https://github.com/google/brotli/commit/ee771daf20bab6533cbc629407c50cff1c87d9f1"><code>ee771da</code></a> fix copy-paste in Java decoder</li> <li><a href="https://github.com/google/brotli/commit/42aee3289154cb3e8db1c7a8ebfa639c857578b9"><code>42aee32</code></a> try to fix release workflow</li> <li><a href="https://github.com/google/brotli/commit/392c06bac05cc1d098ab105cbbda766f19853d92"><code>392c06b</code></a> redesign release resource uploading</li> <li><a href="https://github.com/google/brotli/commit/1964cdb1b9e16a2a0c27fbd3b2a3bccb2c1a8294"><code>1964cdb</code></a> ramp up all GH actions plugins</li> <li><a href="https://github.com/google/brotli/commit/61605b1cb34ba84ae71c13b383d850a59cac85b2"><code>61605b1</code></a> pick VCPKG patches</li> <li><a href="https://github.com/google/brotli/commit/4b0f27b6f985b4301ad5cec4a31b9792ecf252bc"><code>4b0f27b</code></a> pick changes from Alpine patch</li> <li>Additional commits viewable in <a href="https://github.com/google/brotli/compare/go/cbrotli/v1.1.0...v1.2.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- _{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

GiteaMirror added the pull-request label 2026-04-20 06:27:55 -05:00

GiteaMirror closed this issue 2026-04-20 06:27:55 -05:00

Sign in to join this conversation.

No Branch/Tag Specified

Branches Tags

main

dev

v0.9.2

v0.9.1

v0.9.0

v0.8.12

v0.8.11

v0.8.10

v0.8.9

v0.8.8

v0.8.7

v0.8.6

v0.8.5

v0.8.4

v0.8.3

v0.8.2

v0.8.1

v0.8.0

v0.7.2

v0.7.1

v0.7.0

v0.6.43

v0.6.42

v0.6.41

v0.6.40

v0.6.39

v0.6.38

v0.6.37

v0.6.36

v0.6.35

v0.6.34

v0.6.33

v0.6.32

v0.6.31

v0.6.30

v0.6.29

v0.6.28

v0.6.27

v0.6.26

v0.6.25

v0.6.24

v0.6.23

v0.6.22

v0.6.21

v0.6.20

v0.6.19

v0.6.18

v0.6.17

v0.6.16

v0.6.15

v0.6.14

v0.6.13

v0.6.12

v0.6.11

v0.6.10

v0.6.9

v0.6.8

v0.6.7

v0.6.6

v0.6.5

v0.6.4

v0.6.3

v0.6.2

v0.6.1

v0.6.0

v0.5.20

v0.5.19

v0.5.18

v0.5.17

v0.5.16

v0.5.15

v0.5.14

v0.5.13

v0.5.12

v0.5.11

v0.5.10

v0.5.9

v0.5.8

v0.5.7

v0.5.6

v0.5.5

v0.5.4

v0.5.3

v0.5.2

v0.5.1

v0.5.0

v0.4.8

v0.4.7

v0.4.6

v0.4.5

v0.4.4

v0.4.3

v0.4.2

v0.4.1

v0.4.0

v0.3.35

v0.3.34

v0.3.33

v0.3.32

v0.3.31

v0.3.30

v0.3.29

v0.3.28

v0.3.27

v0.3.26

v0.3.25

v0.3.24

v0.3.23

v0.3.22

v0.3.21

v0.3.20

v0.3.19

v0.3.18

v0.3.17

v0.3.16

v0.3.15

v0.3.14

v0.3.13

v0.3.12

v0.3.11

v0.3.10

v0.3.9

v0.3.8

v0.3.7

v0.3.6

v0.3.5

v0.3.4

v0.3.3

v0.3.2

v0.3.1

v0.3.0

v0.2.5

v0.2.4

v0.2.3

v0.2.2

v0.2.1

v0.2.0

v0.1.125

v0.1.124

v0.1.123

v0.1.122

v0.1.121

v0.1.120

v0.1.119

v0.1.118

v0.1.117

v0.1.116

v0.1.115

v0.1.114

v0.1.113

v0.1.112

v0.1.111

v0.1.110

v0.1.109

v0.1.108

v0.1.107

v0.1.106

v0.1.105

v0.1.104

v0.1.103

v0.1.102

Labels

Clear labels

bug

confirmed

confirmed issue

core

documentation

enhancement

good first issue

help wanted

non-core

pull-request

Mirrored from GitHub Pull Request

python

question

testing wanted

No Label pull-request

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

GiteaMirror ninjasurge

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/open-webui#26381