Skip to content

chore(deps): bump pypdf from 6.14.2 to 6.15.0 in /apps/backend - #260

Merged
parthrohit22 merged 1 commit into
devfrom
dependabot/pip/apps/backend/pypdf-6.15.0
Aug 8, 2026
Merged

chore(deps): bump pypdf from 6.14.2 to 6.15.0 in /apps/backend#260
parthrohit22 merged 1 commit into
devfrom
dependabot/pip/apps/backend/pypdf-6.15.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor

Bumps pypdf from 6.14.2 to 6.15.0.

Release notes

Sourced from pypdf's releases.

Version 6.15.0, 2026-08-06

What's new

Security (SEC)

Deprecations (DEP)

New Features (ENH)

  • Add ActualText tag when we produce RTL appearance stream (#3901) by @​PJBrs
  • Allow keeping original PDF header in non-incremental clone mode (#3918) by @​pctablet505
  • AppearanceStream: Add support for RTL appearance streams with Arabic characters (#3831) by @​PJBrs
  • Add actions base class (#3552) by @​j-t-1

Bug Fixes (BUG)

Documentation (DOC)

Maintenance (MAINT)

Full Changelog

Changelog

Sourced from pypdf's changelog.

Version 6.15.0, 2026-08-06

Security (SEC)

  • Improve performance of read_until_whitespace (#3947)
  • Limit CID width range and width count when loading fonts (#3946)
  • Limit token length for ToUnicode entries (#3944)

Deprecations (DEP)

  • Deprecate previously missed inline_images setter as well (#3897)

New Features (ENH)

  • Add ActualText tag when we produce RTL appearance stream (#3901)
  • Allow keeping original PDF header in non-incremental clone mode (#3918)
  • AppearanceStream: Add support for RTL appearance streams with Arabic characters (#3831)
  • Add actions base class (#3552)

Bug Fixes (BUG)

  • Expand low-bit samples for images without a filter (#3938)
  • Decode low-bit DeviceRGB images as RGB instead of palette (#3929)
  • Correctly handle IndirectObject in FlateDecode.decode DecodeParms (#3937)

Documentation (DOC)

  • Image and attachment filenames are unsanitized (#3942)

Maintenance (MAINT)

  • Update charset mappings (#3935)

Full Changelog

Commits
  • 7f226a2 REL: 6.15.0
  • 4959848 SEC: Improve performance of read_until_whitespace (#3947)
  • 51cb6ac SEC: Limit CID width range and width count when loading fonts (#3946)
  • afba808 SEC: Limit token length for ToUnicode entries (#3944)
  • aa2f37d DOC: Image and attachment filenames are unsanitized (#3942)
  • 760ba28 DOC: Further clarify security policy
  • 55bd85c BUG: Expand low-bit samples for images without a filter (#3938)
  • 4807cb4 ROB: Tolerate malformed /FontBBox when building font descriptors (#3895)
  • ce9320b DEV: Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 (#3941)
  • 8b6f6fd ENH: Add ActualText tag when we produce RTL appearance stream (#3901)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 7, 2026
@dependabot
dependabot Bot requested a review from parthrohit22 as a code owner August 7, 2026 21:35
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 7, 2026
Bumps [pypdf](https://github.com/py-pdf/pypdf) from 6.14.2 to 6.15.0.
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.14.2...6.15.0)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 6.15.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@parthrohit22
parthrohit22 force-pushed the dependabot/pip/apps/backend/pypdf-6.15.0 branch from 0ada3df to b23f02d Compare August 8, 2026 11:42
@parthrohit22
parthrohit22 merged commit ad6d656 into dev Aug 8, 2026
11 checks passed
@parthrohit22
parthrohit22 deleted the dependabot/pip/apps/backend/pypdf-6.15.0 branch August 8, 2026 12:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant