rpms/jpegxl

Fork 0

Upstream update available: jpegxl 0.11.1 → 0.12.0 #4

New issue

Open

opened 2026-07-02 02:46:35 +03:00 by sbelikov · 0 comments

sbelikov commented

2026-07-02 02:46:35 +03:00

Owner

Upstream update available: `jpegxl` `0.11.1` → `0.12.0`

Package

Package: jpegxl
RPM name: jpegxl
Branch: niceos-5.2
Current EVR: 1:0.11.1-1
Update class: minor
Compare method: python_rpm
Update policy: leaf
Risk tags: github-upstream

Upstream

Upstream type: github
Upstream project: libjxl/libjxl
Upstream URL: github.com — libjxl
Detected version: 0.12.0
Tag/release: v0.12.0
Source: github_release_latest
Published: 2026-07-01T21:16:30Z
Release URL: github.com — v0.12.0
Source URL: api.github.com — v0.12.0
Pre-release: False

Signals

Security-relevant keywords detected: True
Policy blocked: False
Policy reason: -
Labels: ai-summary, bot, needs-build, needs-triage, priority/high, security-release, update/minor, upstream-update, upstream/github

NiceSOFT AI preliminary stability analysis

Risk Assessment for `libjxl 0.12.0` Update

Package: libjxl
Upstream Repository: GitHub (github.com — libjxl)
Update Type: Minor (version 0.12.0)

1. Risk Evaluation

Risk Level: Medium
Reasoning:
- The update introduces new features (e.g., buffering flag, jxltran tool) and performance improvements.
- The upstream repository is GitHub, which may lack official maintenance or security audits.
- Security keywords detected by the script (e.g., "security-related changes") suggest potential risks, though no specific CVEs are documented.
- ABI/API changes are minor but could affect existing applications if not properly tested.

2. Security/CVE

Status: Uncertain
Reasoning:
- No explicit CVEs or security patches are documented in the provided data.
- The update includes new features (e.g., jxltran) and API changes, but no known vulnerabilities are confirmed.
- Recommendation: Monitor for updates from the upstream repository (e.g., GitHub) and apply only if critical security fixes are available.

3. ABI/API Risks

Status: Low
Reasoning:
- The update is a minor version (0.12.0), and the package is a library (not a binary).
- ABI changes are unlikely in minor versions unless explicitly documented.
- Recommendation: Test the update in a controlled environment before applying to production systems.

4. Update Policy Compliance

Compliance Status: Not Applicable
Reasoning:
- The update is a minor version (leaf policy), but the upstream repository is not officially maintained (GitHub is a community-driven project).
- Recommendation: Apply the update only if it is necessary and tested thoroughly.

5. Recommendations

Apply the update if it is required for functionality or performance improvements.
Monitor for future security patches or updates from the upstream repository.
Test in a staging environment before deploying to production.
Avoid applying the update if the upstream repository is known to have security risks (e.g., lack of audits or patches).

Conclusion

The libjxl 0.12.0 update is minor and includes improvements, but its safety depends on the upstream repository's stability. While no explicit security risks are documented, the medium risk highlights the need for caution. Apply the update only if it is critical and tested thoroughly.

Источники, найденные web_search

Upstream release notes / description

Added

A new buffering flag is now available in the CLI, alongside support for
streaming input with buffered output. (#4634)
Introduced the new jxltran tool, which supports extracting codestreams from
jxlp boxes and packing raw codestreams into jxlc boxes. (#4161, #4165,
#4168, #4196)
Added the --reconstruct_jpeg flag to djxl to losslessly reconstruct a
JPEG and fail if impossible (mutually exclusive with --pixels_to_jpeg and
--jpeg_quality). (#4498)
Added JXL_DEC_UNSUPPORTED (kUnsupported) status code to the core API to
better indicate when requested features or operations are not supported by
the decoder. (#4390)
tools: added support for ProPhoto (#4824) and Adobe98 / AdobeRGB
(#4199) color space names in CLI arguments (cjxl / djxl).
decoder API: support for out-of-order jxlp boxes (ftyp minor version 1).
(#4741)
encoder API: JXL_ENC_FRAME_SETTING_OUTPUT_MODE frame setting to control how
the codestream is written to the output. Mode 0 (default) buffers the output
internally and produces a normally ordered, progressively decodable
codestream. Mode 1 uses seek-based streaming (reduces peak memory for large
images, requires a seekable output stream). Mode 2 uses out-of-order jxlp
boxes (reduces peak memory without requiring seeking, but requires a decoder
that supports ftyp minor version 1). (#4745)

Changed

Major overhaul for faster decoding and progressive lossless. (#4201, #4641,
#4811)
- Progressive lossless images are around 30-40% smaller and are now
  multithreaded increasing encoding performance by 2-5x.
- Lossless images with faster decoding are now 30-80% smaller and their
  decoding speeds properly scale as the faster decoding level increases
  from 1-4.
- Disabled global palette for progressive images, fixing glitchy progressive
  loading for indexed/low color images and restoring transparency support
  (Note: this causes a density/speed penalty for very low bit-depth images).
Numerous speed/memory usage improvements.
- Improved encoding speeds by SIMDifying EstimateCost (+5% performance) and
  speeding up uint-coding trials. (#4322, #4330)
- Accelerated modular encoding and decoding via SIMD optimizations for
  forward RCT transforms and upsampling (up to 4x faster). (#4332, #4384)
- Massive overhaul to histogram encoding and decoding, providing significant
  performance optimizations for modular mode. (#4123, #4132, #4136, #4185)
- Tweaked JPEG recompression logic to improve density and efficiency. (#4202)
- Fixed performance regressions in fast lossless modes and optimized
  text-like patch detection. (#4341, #4448)
- Refined x86 XCR0 CPU checks to prevent issues on specific hardware.
  (#4449)
- Migrated Windows release builds to use clang-cl, which improves
  performance across the board. (#4529)
- Improved use of SIMD in tree construction hot loop. (#4720)
- Improved spline caching. (#4857)
- Postponed JPEG coeffs allocation until first SOS. (#4863)
The default buffering level in the CLI has been changed to 2, greatly
improving encoding performance for images under 2048x2048. Additionally,
output is buffered by default to allow basic progressive loading. (#4635,
#4637, #4642)
Better Density/Speed tradeoff for lossless effort levels. (#4236)
Improved visual quality of gradients by using channel-offset blue noise
dithering instead of bayer when decoding to lower bitdepths. (#4305, #4559)
Lossy modular encoding quality/density improvements. (#3575)
local_tone_map tool: Now produces SDR output in the DisplayP3 color space
rather than Rec2020. Also added an optional third command-line argument to
dump the HDR image as a raw rgba1010102 file for use with the libultrahdr
example app. (#4210)
Significant improvements to EXR input/output handling for cjxl. Now supports
reading float32, multilayer, per-channel bitdepth, and writing greyscale
EXR images. (#4312, #4460)
The decoder API for JxlDecoderSetImageOutBuffer and
JxlDecoderSetPreviewOutBuffer has been clarified; their timeframes are now
non-intersecting, preventing accidental buffer overwrites. (#4671)
Layered JXL files are no longer coalesced when re-encoding with cjxl, and
can now be decoded to separate PNG/PAM files with djxl by using
--no_coalescing. (#4299)
The progressive flag -p in cjxl will now encode a more progressive image.
(#4258, #4699)
When lossy encoding, resampling 2 is now enabled at distance 10, and is up to
10x faster below effort 10 by using a faster downsampling method. (#4147)
Faster PNG compression. (#3819)
decoder API: documented that at most one preview image exists in a
codestream.
(#4671)
encoder API: corrected documentation for box size header in
JxlEncoderAddBox (0 means box extends to end of file, 1 means 64-bit size
follows). (#4081)
Performance & memory: tracked memory for temporary box/codestream storage
(#4852) and reduced allocation overhead in ValidateTree (#4851) and low
memory rendering pipeline. (#4495, #4496)
Quality: improved HDR behavior at effort 8+. (#3885)
tools: jxlinfo rewritten in C++ with human-friendly output formatting.
(#4300)
tools: image viewers now perform CMS color transforms in parallel across
threads. (#4326)

Deprecated

encoder API: JXL_ENC_FRAME_SETTING_BUFFERING mode 3 is deprecated; output
buffering should now be controlled via JXL_ENC_FRAME_SETTING_OUTPUT_MODE.
(#4745)

Removed

The jpegli codebase has been removed as it is now maintained as a separate
project at google/jpegli. (#4657)
Dropped GIMP plugin (libjxl-gimp-plugin). (#4875)

Fixed

Allows -E to be used in jpeg-transcoding again. (#4729)
Fixed an issue where Lossy Delta Palet

...[truncated 3130 chars]

NiceOS maintainer checklist

Confirm that the detected version is a stable upstream release.
Check upstream changelog for security fixes, ABI/API changes and build-system changes.
Check ABI/API compatibility and reverse dependencies.
Download source into NiceOS lookaside storage.
Update Version and related fields in SPECS/*.spec only if policy allows it.
Regenerate SOURCES/sources.lock.json, manifests, metadata and SBOM.
Build SRPM/RPM in a clean NiceOS buildroot.
Run package smoke tests.
Link PR/build logs and close this issue after update or triage.

Bot metadata

Tool: niceos_upstream_monitor.py 2.1.3-local-websearch-github-release-pages
Generated at: 2026-07-25T23:48:05Z

# Upstream update available: `jpegxl` `0.11.1` → `0.12.0` ## Package - Package: `jpegxl` - RPM name: `jpegxl` - Branch: `niceos-5.2` - Current EVR: `1:0.11.1-1` - Update class: `minor` - Compare method: `python_rpm` - Update policy: `leaf` - Risk tags: `github-upstream` ## Upstream - Upstream type: `github` - Upstream project: `libjxl/libjxl` - Upstream URL: <a href="https://github.com/libjxl/libjxl" target="_blank" rel="noopener noreferrer">github.com — libjxl</a> - Detected version: `0.12.0` - Tag/release: `v0.12.0` - Source: `github_release_latest` - Published: `2026-07-01T21:16:30Z` - Release URL: <a href="https://github.com/libjxl/libjxl/releases/tag/v0.12.0" target="_blank" rel="noopener noreferrer">github.com — v0.12.0</a> - Source URL: <a href="https://api.github.com/repos/libjxl/libjxl/tarball/v0.12.0" target="_blank" rel="noopener noreferrer">api.github.com — v0.12.0</a> - Pre-release: `False` ## Signals - Security-relevant keywords detected: `True` - Policy blocked: `False` - Policy reason: `-` - Labels: `ai-summary, bot, needs-build, needs-triage, priority/high, security-release, update/minor, upstream-update, upstream/github` ## NiceSOFT AI preliminary stability analysis ### Risk Assessment for `libjxl 0.12.0` Update **Package:** `libjxl` **Upstream Repository:** GitHub (<a href="https://github.com/libjxl/libjxl" target="_blank" rel="noopener noreferrer">github.com — libjxl</a>) **Update Type:** Minor (version 0.12.0) --- ### **1. Risk Evaluation** - **Risk Level:** **Medium** - **Reasoning:** - The update introduces **new features** (e.g., buffering flag, `jxltran` tool) and **performance improvements**. - The upstream repository is GitHub, which may lack official maintenance or security audits. - **Security keywords** detected by the script (e.g., "security-related changes") suggest potential risks, though no specific CVEs are documented. - **ABI/API changes** are minor but could affect existing applications if not properly tested. --- ### **2. Security/CVE** - **Status:** **Uncertain** - **Reasoning:** - No explicit CVEs or security patches are documented in the provided data. - The update includes **new features** (e.g., `jxltran`) and **API changes**, but no known vulnerabilities are confirmed. - **Recommendation:** Monitor for updates from the upstream repository (e.g., GitHub) and apply only if critical security fixes are available. --- ### **3. ABI/API Risks** - **Status:** **Low** - **Reasoning:** - The update is a **minor version** (0.12.0), and the package is a **library** (not a binary). - **ABI changes** are unlikely in minor versions unless explicitly documented. - **Recommendation:** Test the update in a controlled environment before applying to production systems. --- ### **4. Update Policy Compliance** - **Compliance Status:** **Not Applicable** - **Reasoning:** - The update is a **minor version** (leaf policy), but the upstream repository is **not officially maintained** (GitHub is a community-driven project). - **Recommendation:** Apply the update only if it is **necessary** and **tested** thoroughly. --- ### **5. Recommendations** 1. **Apply the update** if it is required for functionality or performance improvements. 2. **Monitor** for future security patches or updates from the upstream repository. 3. **Test** in a staging environment before deploying to production. 4. **Avoid** applying the update if the upstream repository is known to have security risks (e.g., lack of audits or patches). --- ### **Conclusion** The `libjxl 0.12.0` update is minor and includes improvements, but its safety depends on the upstream repository's stability. While no explicit security risks are documented, the **medium risk** highlights the need for caution. Apply the update only if it is critical and tested thoroughly. ### Источники, найденные web_search 1. <a href="https://github.com/libjxl/libjxl/releases/tag/v0.12.0" target="_blank" rel="noopener noreferrer">GitHub release API: libjxl/libjxl v0.12.0</a> 2. <a href="https://github.com/libjxl/libjxl/tree/v0.12.0" target="_blank" rel="noopener noreferrer">GitHub tag page: libjxl/libjxl v0.12.0</a> 3. <a href="https://github.com/libjxl/libjxl/releases" target="_blank" rel="noopener noreferrer">GitHub releases page: libjxl/libjxl</a> 4. <a href="https://github.com/libjxl/libjxl/compare/v0.11.1...v0.12.0" target="_blank" rel="noopener noreferrer">GitHub compare page: libjxl/libjxl v0.11.1...v0.12.0</a> 5. <a href="https://github.com/libjxl/libjxl" target="_blank" rel="noopener noreferrer">GitHub - libjxl/libjxl: JPEG XL image format reference implementation</a> 6. <a href="https://libjxl.readthedocs.io/en/latest/index.html" target="_blank" rel="noopener noreferrer">JPEG XL image format reference implementation — libjxl documentation</a> 7. <a href="https://github.com/libjxl/libjxl/blob/main/CHANGELOG.md" target="_blank" rel="noopener noreferrer">libjxl/CHANGELOG.md at main · libjxl/libjxl · GitHub</a> 8. <a href="https://deepwiki.com/libjxl/libjxl" target="_blank" rel="noopener noreferrer">libjxl/libjxl | DeepWiki</a> 9. <a href="https://archlinux.org/packages/extra/x86_64/libjxl/" target="_blank" rel="noopener noreferrer">Arch Linux - libjxl 0.12.0-1 (x86_64)</a> ## Upstream release notes / description ### Added - A new buffering flag is now available in the CLI, alongside support for streaming input with buffered output. (#4634) - Introduced the new `jxltran` tool, which supports extracting codestreams from `jxlp` boxes and packing raw codestreams into `jxlc` boxes. (#4161, #4165, #4168, #4196) - Added the `--reconstruct_jpeg` flag to `djxl` to losslessly reconstruct a JPEG and fail if impossible (mutually exclusive with `--pixels_to_jpeg` and `--jpeg_quality`). (#4498) - Added `JXL_DEC_UNSUPPORTED` (`kUnsupported`) status code to the core API to better indicate when requested features or operations are not supported by the decoder. (#4390) - tools: added support for `ProPhoto` (#4824) and `Adobe98` / `AdobeRGB` (#4199) color space names in CLI arguments (`cjxl` / `djxl`). - decoder API: support for out-of-order `jxlp` boxes (ftyp minor version 1). (#4741) - encoder API: `JXL_ENC_FRAME_SETTING_OUTPUT_MODE` frame setting to control how the codestream is written to the output. Mode 0 (default) buffers the output internally and produces a normally ordered, progressively decodable codestream. Mode 1 uses seek-based streaming (reduces peak memory for large images, requires a seekable output stream). Mode 2 uses out-of-order `jxlp` boxes (reduces peak memory without requiring seeking, but requires a decoder that supports ftyp minor version 1). (#4745) ### Changed - Major overhaul for faster decoding and progressive lossless. (#4201, #4641, #4811) - Progressive lossless images are around 30-40% smaller and are now multithreaded increasing encoding performance by 2-5x. - Lossless images with faster decoding are now 30-80% smaller and their decoding speeds properly scale as the faster decoding level increases from 1-4. - Disabled global palette for progressive images, fixing glitchy progressive loading for indexed/low color images and restoring transparency support (Note: this causes a density/speed penalty for very low bit-depth images). - Numerous speed/memory usage improvements. - Improved encoding speeds by SIMDifying `EstimateCost` (+5% performance) and speeding up uint-coding trials. (#4322, #4330) - Accelerated modular encoding and decoding via SIMD optimizations for forward RCT transforms and upsampling (up to 4x faster). (#4332, #4384) - Massive overhaul to histogram encoding and decoding, providing significant performance optimizations for modular mode. (#4123, #4132, #4136, #4185) - Tweaked JPEG recompression logic to improve density and efficiency. (#4202) - Fixed performance regressions in fast lossless modes and optimized text-like patch detection. (#4341, #4448) - Refined x86 `XCR0` CPU checks to prevent issues on specific hardware. (#4449) - Migrated Windows release builds to use `clang-cl`, which improves performance across the board. (#4529) - Improved use of SIMD in tree construction hot loop. (#4720) - Improved spline caching. (#4857) - Postponed JPEG coeffs allocation until first SOS. (#4863) - The default buffering level in the CLI has been changed to `2`, greatly improving encoding performance for images under 2048x2048. Additionally, output is buffered by default to allow basic progressive loading. (#4635, #4637, #4642) - Better Density/Speed tradeoff for lossless effort levels. (#4236) - Improved visual quality of gradients by using channel-offset blue noise dithering instead of bayer when decoding to lower bitdepths. (#4305, #4559) - Lossy modular encoding quality/density improvements. (#3575) - `local_tone_map` tool: Now produces SDR output in the `DisplayP3` color space rather than `Rec2020`. Also added an optional third command-line argument to dump the HDR image as a raw `rgba1010102` file for use with the `libultrahdr` example app. (#4210) - Significant improvements to EXR input/output handling for cjxl. Now supports reading float32, multilayer, per-channel bitdepth, and writing greyscale EXR images. (#4312, #4460) - The decoder API for `JxlDecoderSetImageOutBuffer` and `JxlDecoderSetPreviewOutBuffer` has been clarified; their timeframes are now non-intersecting, preventing accidental buffer overwrites. (#4671) - Layered JXL files are no longer coalesced when re-encoding with cjxl, and can now be decoded to separate PNG/PAM files with djxl by using `--no_coalescing`. (#4299) - The progressive flag `-p` in cjxl will now encode a more progressive image. (#4258, #4699) - When lossy encoding, resampling 2 is now enabled at distance 10, and is up to 10x faster below effort 10 by using a faster downsampling method. (#4147) - Faster PNG compression. (#3819) - decoder API: documented that at most one preview image exists in a codestream. (#4671) - encoder API: corrected documentation for box size header in `JxlEncoderAddBox` (0 means box extends to end of file, 1 means 64-bit size follows). (#4081) - Performance & memory: tracked memory for temporary box/codestream storage (#4852) and reduced allocation overhead in `ValidateTree` (#4851) and low memory rendering pipeline. (#4495, #4496) - Quality: improved HDR behavior at effort 8+. (#3885) - tools: `jxlinfo` rewritten in C++ with human-friendly output formatting. (#4300) - tools: image viewers now perform CMS color transforms in parallel across threads. (#4326) ### Deprecated - encoder API: `JXL_ENC_FRAME_SETTING_BUFFERING` mode 3 is deprecated; output buffering should now be controlled via `JXL_ENC_FRAME_SETTING_OUTPUT_MODE`. (#4745) ### Removed - The `jpegli` codebase has been removed as it is now maintained as a separate project at <a href="https://github.com/google/jpegli" target="_blank" rel="noopener noreferrer">google/jpegli</a>. (#4657) - Dropped GIMP plugin (`libjxl-gimp-plugin`). (#4875) ### Fixed - Allows -E to be used in jpeg-transcoding again. (#4729) - Fixed an issue where Lossy Delta Palet ...[truncated 3130 chars] ## NiceOS maintainer checklist - [ ] Confirm that the detected version is a stable upstream release. - [ ] Check upstream changelog for security fixes, ABI/API changes and build-system changes. - [ ] Check ABI/API compatibility and reverse dependencies. - [ ] Download source into NiceOS lookaside storage. - [ ] Update `Version` and related fields in `SPECS/*.spec` only if policy allows it. - [ ] Regenerate `SOURCES/sources.lock.json`, manifests, metadata and SBOM. - [ ] Build SRPM/RPM in a clean NiceOS buildroot. - [ ] Run package smoke tests. - [ ] Link PR/build logs and close this issue after update or triage. ## Bot metadata - Tool: `niceos_upstream_monitor.py 2.1.3-local-websearch-github-release-pages` - Generated at: `2026-07-25T23:48:05Z`

sbelikov added the

labels

2026-07-02 02:46:35 +03:00