Skip to content

build(deps): bump pypdf from 6.15.0 to 6.17.0 - #11

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pypdf-6.17.0
Open

build(deps): bump pypdf from 6.15.0 to 6.17.0#11
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pypdf-6.17.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor

Bumps pypdf from 6.15.0 to 6.17.0.

Release notes

Sourced from pypdf's releases.

Version 6.17.0, 2026-09-04

What's new

Security (SEC)

New Features (ENH)

  • _cmap.py: Also parse encoding for embedded CFF Type1 fonts (#4032) by @​PJBrs

Performance Improvements (PI)

Bug Fixes (BUG)

Robustness (ROB)

Documentation (DOC)

Code Style (STY)

Full Changelog

Version 6.16.2, 2026-08-23

What's new

Bug Fixes (BUG)

Robustness (ROB)

  • Improve RC4 fallback when cryptography can't provide it (#3853) by @​msylw

Full Changelog

Version 6.16.1, 2026-08-14

What's new

Security (SEC)

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 6.17.0, 2026-09-04

Security (SEC)

  • Limit value for Roman numerals (#4047)

New Features (ENH)

  • _cmap.py: Also parse encoding for embedded CFF Type1 fonts (#4032)

Performance Improvements (PI)

  • Cache repeated text extraction character lookups (#4036)

Bug Fixes (BUG)

  • Treat an empty /Filter array as no filter when extracting images (#4026)
  • Detect a duplicate dictionary key whose first value is falsy (#4024)
  • Make is_open=False collapse outline items (#3998)

Robustness (ROB)

  • Multiple changes for wrong inputs
  • Skip trailing duplicate %%EOF markers when locating startxref (#4015)
  • Do not crash on a non-array destination (#3976)
  • Handle annotations without subtype during merge (#3999)

Documentation (DOC)

  • Use AnnotationFlag enum instead of plain integers (#3997)

Code Style (STY)

  • Multiple small changes detected from test runs

Full Changelog

Version 6.16.2, 2026-08-23

Bug Fixes (BUG)

  • Make remove_from_tree() work on outline items (#3939)
  • Be more lenient about space width in layout mode text extraction (#3992)
  • Do not scale the text leading by the font size (#3987)
  • Update annotation appearance stream matrix on page transform (#3968)
  • Allow repeated page references (#3959)

Robustness (ROB)

  • Improve RC4 fallback when cryptography can't provide it (#3853)

Full Changelog

Version 6.16.1, 2026-08-14

Security (SEC)

  • Limit iterations for outline retrieval and XForm text extraction (#3966)

Full Changelog

... (truncated)

Commits
  • c76eed7 REL: 6.17.0
  • 89db7c4 SEC: Limit value for Roman numerals (#4047)
  • a667e9d ROB: Do not crash on a malformed embedded files name tree (#4037)
  • 816b120 ROB: Do not crash when a destination tree node entry is not an array (#4039)
  • 3818d66 ROB: Reject a page box that is not an array (#4041)
  • 939ae0c STY: Type read_object as the PdfObject it always returns (#4038)
  • 9c308b4 PI: Cache repeated text extraction character lookups (#4036)
  • 17d57a5 ROB: Do not crash when the XObject resources are not a dictionary (#4030)
  • 2f3ed6b ROB: Do not crash when the AcroForm entry is not a dictionary (#4029)
  • ea6ff22 ENH: _cmap.py: Also parse encoding for embedded CFF Type1 fonts (#4032)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pypdf](https://github.com/py-pdf/pypdf) from 6.15.0 to 6.17.0.
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.15.0...6.17.0)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 6.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants