Skip to content

chore(deps): update pypdf requirement from >=6.12.0 to >=6.13.3 in /backend#110

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/pypdf-gte-6.12.2
Closed

chore(deps): update pypdf requirement from >=6.12.0 to >=6.13.3 in /backend#110
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/pypdf-gte-6.12.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 27, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on pypdf to permit the latest version.

Release notes

Sourced from pypdf's releases.

Version 6.13.3, 2026-06-17

What's new

Security (SEC)

Performance Improvements (PI)

Robustness (ROB)

Maintenance (MAINT)

Full Changelog

Changelog

Sourced from pypdf's changelog.

Version 6.13.3, 2026-06-17

Security (SEC)

  • Apply MAX_DECLARED_STREAM_LENGTH to streams without length as well (#3871)

Performance Improvements (PI)

  • Avoid per-pixel getpixel loop for 1-bit indexed images (#3854)

Robustness (ROB)

  • Several fixes

Maintenance (MAINT)

  • Make mypy assert messages consistent (#3849)

Full Changelog

Version 6.13.2, 2026-06-10

Security (SEC)

  • Detect multi-hop cyclic /Pages trees in _flatten to prevent SIGSEGV (#3847)

Robustness (ROB)

  • Fix UnboundLocalError in _read_standard_xref_table on a malformed entry (#3841)
  • Raise PdfStreamError on non-hexadecimal bytes in hex readers (#3832)

Full Changelog

Version 6.13.1, 2026-06-08

Security (SEC)

  • Prevent infinite loops when processing threads/articles (#3839)

Full Changelog

Version 6.13.0, 2026-06-05

Security (SEC)

  • Avoid infinite loops for outlines and text extraction (#3830)

New Features (ENH)

  • Add Japanese predefined CMaps (#3800)
  • Font: Collect all character widths, not only those that can be unicode mapped (#3798)

Robustness (ROB)

  • Recover a corrupt trailing startxref pointer (closes #3238) (#3826)
  • Handle /Pages node without /Kids during flattening (#3825)
  • Accept inline image EI marker at the end of a content stream (#3827)

Maintenance (MAINT)

  • Type the always-raising deprecation helpers as NoReturn (#3819)

... (truncated)

Commits
  • 9aa05e7 REL: 6.13.3
  • bbd083d SEC: Apply MAX_DECLARED_STREAM_LENGTH to streams without length as well (#3871)
  • d5cd266 ROB: Guard text operators against missing operands in extract_text (#3861)
  • 82f1f90 ROB: Tolerate malformed /Limits in index2label (#3858)
  • 0276a6f PI: Avoid per-pixel getpixel loop for 1-bit indexed images (#3854)
  • 41a9c3c MAINT: Make mypy assert messages consistent (#3849)
  • d1bba60 MAINT: Increase readability of PdfDocCommon (#3834)
  • 53b6fbc DEV: Bump codecov/codecov-action from 6.0.1 to 7.0.0 (#3859)
  • e07c223 MAINT: Enforce G004 (no f-strings in logging) (#3845)
  • 5270f76 ROB: Guard zero unitsPerEm in from_truetype_font_file (#3846)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label May 27, 2026
@dependabot dependabot Bot requested a review from vasu-devs as a code owner May 27, 2026 12:10
@dependabot dependabot Bot added python Pull requests that update python code dependencies Pull requests that update a dependency file labels May 27, 2026
@vercel

vercel Bot commented May 27, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
just-hire-me Ready Ready Preview, Comment Jun 22, 2026 6:28am

@dependabot dependabot Bot force-pushed the dependabot/pip/backend/pypdf-gte-6.12.2 branch from 99f10eb to 5044287 Compare May 27, 2026 13:58
@dependabot dependabot Bot force-pushed the dependabot/pip/backend/pypdf-gte-6.12.2 branch from 5044287 to 4681034 Compare May 27, 2026 18:19
@dependabot dependabot Bot force-pushed the dependabot/pip/backend/pypdf-gte-6.12.2 branch from 4681034 to 2e8ac73 Compare May 28, 2026 15:16
@dependabot dependabot Bot changed the title chore(deps): update pypdf requirement from >=6.11.0 to >=6.12.2 in /backend chore(deps): update pypdf requirement from >=6.11.0 to >=6.13.2 in /backend Jun 14, 2026
@dependabot dependabot Bot force-pushed the dependabot/pip/backend/pypdf-gte-6.12.2 branch from 2e8ac73 to 219fc94 Compare June 14, 2026 19:17
@dependabot dependabot Bot changed the title chore(deps): update pypdf requirement from >=6.11.0 to >=6.13.2 in /backend chore(deps): update pypdf requirement from >=6.12.0 to >=6.13.2 in /backend Jun 14, 2026
@dependabot dependabot Bot force-pushed the dependabot/pip/backend/pypdf-gte-6.12.2 branch from 219fc94 to 5db0191 Compare June 14, 2026 19:32
@dependabot dependabot Bot force-pushed the dependabot/pip/backend/pypdf-gte-6.12.2 branch from 5db0191 to 5bd669e Compare June 14, 2026 20:28
Updates the requirements on [pypdf](https://github.com/py-pdf/pypdf) to permit the latest version.
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.12.0...6.13.3)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 6.12.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): update pypdf requirement from >=6.12.0 to >=6.13.2 in /backend chore(deps): update pypdf requirement from >=6.12.0 to >=6.13.3 in /backend Jun 22, 2026
@dependabot dependabot Bot force-pushed the dependabot/pip/backend/pypdf-gte-6.12.2 branch from 5bd669e to bfdaa70 Compare June 22, 2026 06:28
@dependabot @github

dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #144.

@dependabot dependabot Bot closed this Jun 22, 2026
@dependabot dependabot Bot deleted the dependabot/pip/backend/pypdf-gte-6.12.2 branch June 22, 2026 06:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants