Repository navigation
build(deps): bump pypdf from 6.16.1 to 6.19.0 in /backend - #94
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [pypdf](https://github.com/py-pdf/pypdf) from 6.16.1 to 6.19.0. - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@6.16.1...6.19.0) --- updated-dependencies: - dependency-name: pypdf dependency-version: 6.19.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
ECC Tools / Security EvidenceCommit: Security evidence gate passed (success) No security-sensitive scanner-evidence gap detected. Mode: enforce Scanned 1 changed file(s). No missing scanner-evidence signal was detected. Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
ECC Tools / PR Risk TaxonomyCommit: PR taxonomy clear (success) Scanned 1 changed file(s). No taxonomy bucket signals were detected. Scanned 1 changed file(s). No PR taxonomy bucket signals were detected. Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
ECC Tools / Reference Set ReadinessCommit: Reference set readiness gaps detected (neutral) Reference evidence present for 0/7 areas (0%) across 1 changed file(s). This check is based on files changed in this PR. Repository-level readiness is still reported by
Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
ECC Tools / Hosted Promotion ReadinessCommit: Hosted promotion readiness passed (success) No hosted promotion evidence gaps detected across 1 changed file(s); 0 corpus scenarios had matching evidence. This check compares PR file changes against the evaluator/RAG promotion corpus in No evaluator corpus scenarios matched this PR. Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Bumps pypdf from 6.16.1 to 6.19.0.
Release notes
Sourced from pypdf's releases.
... (truncated)
Changelog
Sourced from pypdf's changelog.
... (truncated)
Commits
d62cb58REL: 6.19.00d8b5a8SEC: Limit size of alphabetical page labels (#4096)959467aPI: Move static value out of loop body for appearance stream data (#4087)20822b2DEV: Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (#4093)25f2301DEP: Replace PdfWriter method add_js (#3979)a924438BUG: Do not copy unrelated pages when appending pages with non-terminal field...cf5cec2BUG: Use page reference for existing internal link targets (#4076)96d81f0BUG: Arabic-Indic digits are reversed during text extraction (#4077)2d21901DEV: Fix Color class for latest mypy (#4082)893a010MAINT: Split PdfDocCommon._flatten (#4070)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
High-level PR Summary
This PR updates the
pypdfdependency from version 6.16.1 to 6.19.0 in the backend requirements. The update includes important security fixes (limits on alphabetical page labels, FlateDecode recovery restrictions, font width entry limits, and token length restrictions), several bug fixes (page copying with non-terminal fields, text extraction for Arabic-Indic digits, internal link targets), performance improvements (appearance stream data handling, attachment mapping API), and a deprecation (replacement of theadd_jsmethod). This is a routine dependency maintenance update that brings security hardening and stability improvements to the PDF processing functionality.⏱️ Estimated Review Time: 5-15 minutes
💡 Review Order Suggestion
backend/requirements.txt