Skip to content

[MAINT]: Bump tinytag from 2.2.1 to 2.3.0 in the security-minor-and-patch group across 1 directory - #211

Merged
Spencer Schoenberg (spencrr) merged 1 commit into
mainfrom
dependabot/uv/security-minor-and-patch-145fc96689
Oct 19, 2026
Merged

Spencer Schoenberg (spencrr) merged 1 commit into
mainfrom
dependabot/uv/security-minor-and-patch-145fc96689

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the security-minor-and-patch group with 1 update in the / directory: tinytag.

Updates tinytag from 2.2.1 to 2.3.0

Release notes

Sourced from tinytag's releases.

2.3.0

  • Add 'mime_type' attribute for audio MIME type/codec
  • Add 'is_lossless' attribute to indicate lossless audio
  • Add 'size' attribute to images for size in bytes
  • Add option to disable magic byte detection
  • Make XMP metadata available under 'other.xmp' field
  • Make bit depth available for lossy files providing it
  • Add .asf, .ogv and .wmv to list of supported file extensions
  • Mark deprecated 'extra' dictionary as obsolete
  • Fix incorrect key when adding common images to 'other' dictionary
  • Fix disc/track numbers not being returned as lists in 'as_dict()'
  • Only set audio properties with a positive value
  • Always read tags and audio properties in a single pass
  • ID3: Parse multi-value text frames correctly
  • ID3: Parse COMM and USLT frames correctly
  • ID3: Fix some errors in parsed size calculations
  • ID3: Exclude a few frames with custom structures
  • MPEG: Read VBRI and Xing Info headers for duration/bitrate
  • MPEG: Fix parsing of layer I and MPEG-2 layer III audio properties
  • MPEG: Fix slightly incorrect duration estimation
  • MPEG/MP4: Raise ParseError if header is invalid
  • MP4: Add 'image/bmp' and 'image/gif' MIME types
  • MP4: Fix infinite loop if size of certain sub-atoms is zero
  • MP4: Fix incorrect parsing of descriptor size
  • MP4: Don't read image data when image reading is disabled
  • OGG: Parse multi-stream files correctly
  • Speex: Don't read vendor string as comment
  • FLAC: Provide actual audio bitrate instead of overall bitrate
  • FLAC: Parse VORBIS_COMMENT and PICTURE blocks with invalid size
  • FLAC: Ignore subsequent STREAMINFO blocks
  • WAV: Include unknown fields in 'other' dictionary
  • WAV: Calculate bitrate/duration correctly
  • AIFF/WAV: Read whole ID3 chunk before parsing
  • ASF: Support parsing additional metadata objects
  • ASF: Stop parsing if object size is smaller than header
  • ASF: Make magic header detection more strict
  • Various performance improvements
  • Various code refactors
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the security-minor-and-patch group with 1 update in the / directory: [tinytag](https://github.com/tinytag/tinytag).


Updates `tinytag` from 2.2.1 to 2.3.0
- [Release notes](https://github.com/tinytag/tinytag/releases)
- [Commits](tinytag/tinytag@2.2.1...2.3.0)

---
updated-dependencies:
- dependency-name: tinytag
  dependency-version: 2.3.0
  dependency-type: indirect
  dependency-group: security-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team October 19, 2026 16:30
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 19, 2026
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

@spencrr
Spencer Schoenberg (spencrr) merged commit f72bde9 into main Oct 19, 2026
14 checks passed
@dependabot
dependabot Bot deleted the dependabot/uv/security-minor-and-patch-145fc96689 branch October 19, 2026 21:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant