chore(deps): bump actions/setup-python from 5 to 6#2
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
chore(deps): bump actions/setup-python from 5 to 6#2dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v5...v6) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
AryanBV
added a commit
that referenced
this pull request
May 7, 2026
…NS + audit-bundle correction (ARY-348) Phase 13.9 + 13.10 + 13.11 + 13.12 — documentation pass for the non-CID Tier 1.5 extension that Phase 13 folded into v0.1.3, plus the cache-deletion follow-up. Three parallel general-purpose subagents drafted the four primary doc files; the parent applied the audit-bundle correction inline. ### docs/v0.1.3-implementation-design.md New §7 "Non-CID Tier 1.5 extension (Phase 13)" added between §6 (Probe pattern) and the closing Verification summary. ~547 words, 98 lines (file lines 497-594). Covers: motivation (M10 Decision B fold-in), dispatcher logic (subtype switch), helper inventory + fonts.py line numbers (verified by grep) for the 7 helpers, M.4/M.5 inline guards, _FONTFILE2_CACHE deletion rationale (commit 63eae36), _FONT_EXTEND_FAIL_EXCS centralisation in fonts.py, audit-bundle correction with locked numbers (glyf=6954, real=116, placeholder= 6838, cmap=118, unitsPerEm=2048), still-NOT-supported list (/FontFile3 ARY-279, /Type1, MacRoman, CJK, unitsPerEm mismatch). Verification list updated to include §7. ### docs/v0.1.3-release-notes.md Two new bullets added to §2 "What changed from the design doc": - #5 — Phase 13 fold-in (Decision B, ~250 LOC source + ~470 LOC test probes, audit-bundle framing error mention). - #6 — _FONTFILE2_CACHE deletion as root fix superseding ARY-349's patch; _FONT_EXTEND_FAIL_EXCS centralisation; surgeon's catch asymmetry fix. §7 "Open questions for v0.1.4" — removed the prior "Non-CID font extension" deferral entry (#3). Bullets #4-#5 renumbered to #3-#4. ### CHANGELOG.md Under [0.1.3] "### Changed (algorithm fixes)": new "Non-CID Tier 1.5 extension (Phase 13)" entry covering the dispatcher, helpers, M.4/M.5 guards, deterministic byte allocation, font_coverage_substituted surfacing, and the M10 SOW launch gate now passing end-to-end. New "### Removed" subsection added under [0.1.3]: - _FONTFILE2_CACHE + _font_dict_key removal entry. Documents the populate/evict mismatch + cross-Pdf id-recycling pollution that Phase 13.4 probes surfaced; notes that the cache had been a no-op since pikepdf 10.5.1 anyway. No public-API impact (the pdf parameter on font_has_codepoint, FontResolver.__init__, and FontResolverCache.__init__ was internal-only). - _FONT_EXTEND_FAIL_EXCS relocation entry. Moved from reflow.py to fonts.py (semantic home); reflow + structural + surgeon all import from fonts now. ### LIMITATIONS.md Replaced the inaccurate "Non-CID … cannot be extended" bullet under "## Font handling" with the corrected post-Phase-13 description: TrueType + WinAnsi + /FontFile2 supported; /FontFile3 (ARY-279), /Type1, MacRoman simple fonts (untested), and CJK 30k+ glyphs still unsupported. ### experiments/v013_audit_evidence/font_extension_bug.md Phase 13.9 inline corrections. Added a top-of-file banner documenting that the bundle was captured pre-Phase-13 and originally framed the fix as Tier 1 (cmap-only) on the assumption of 6,954 physical outlines. Block 3 preflight 4B re-inspected and found only 116 real glyphs; 6,838 are anonymous `glyph0XXXX` placeholders. Two inline `[v0.1.3 Phase 13 correction]` blocks mark the specific sentences that drift from this updated empirical truth — the "non-obvious detail" paragraph (lines ~131-141) and "findings worth Aryan's attention" item #2 (lines ~178-191). Original analysis preserved verbatim for reasoning-trail audit; corrections appended inline. ### tests/test_surgeon.py Phase 13.12.1 cleanup. test_unencodable_returns_failure docstring updated to note that this test now exercises the **non-CID extension's no-AGL-name failure path**: SIMPLE_PDF (reportlab_simple.pdf, /TrueType + /WinAnsiEncoding) routes to _extend_simple_tier_15 (Phase 13's dispatcher no longer rejects at is_cid_font), where _glyph_name_for_codepoint resolves CJK to uniXXXX (no AGL entry), and _inject_glyph_in_place fails because Carlito/Arial don't carry CJK outlines. Surfaces as font_extension_failed per _FONT_EXTEND_FAIL_EXCS. Test stays green; only the docstring updates. Verification (docs are not type/lint-checked, but the test docstring update was verified): - pytest -q: 823 passed, 12 skipped, 2 deselected (no regressions) - mypy --strict src/pdf_edit_engine/: 0 errors - ruff check src/ tests/: 0 issues - pytest -k test_unencodable_returns_failure: 1 passed (docstring update did not affect test behaviour) Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps actions/setup-python from 5 to 6.
Release notes
Sourced from actions/setup-python's releases.
... (truncated)
Commits
a309ff8Bump urllib3 from 2.6.0 to 2.6.3 in /tests/data (#1264)bfe8cc5Upgrade@actionsdependencies to Node 24 compatible versions (#1259)4f41a90Bump urllib3 from 2.5.0 to 2.6.0 in /tests/data (#1253)83679a8Bump@types/nodefrom 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel ...bfc4944Bump prettier from 3.5.3 to 3.6.2 (#1234)97aeb3eBump requests from 2.32.2 to 2.32.4 in /tests/data (#1130)443da59Bump actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pi...cfd55cagraalpy: add graalpy early-access and windows builds (#880)bba65e5Bump typescript from 5.4.2 to 5.9.3 and update docs/advanced-usage.md (#1094)18566f8Improve wording and "fix example" (remove 3.13) on testing against pre-releas...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)