Skip to content

chore(deps): bump pypdf from 6.16.0 to 6.20.0 in /templates - #110

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/templates/pypdf-6.20.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/templates/pypdf-6.20.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 17, 2026

Copy link
Copy Markdown
Contributor

Bumps pypdf from 6.16.0 to 6.20.0.

Release notes

Sourced from pypdf's releases.

Version 6.20.0, 2026-10-09

What's new

Security (SEC)

New Features (ENH)

Performance Improvements (PI)

Bug Fixes (BUG)

Robustness (ROB)

Developer Experience (DEV)

Full Changelog

Version 6.19.0, 2026-09-16

What's new

Security (SEC)

Deprecations (DEP)

Performance Improvements (PI)

Bug Fixes (BUG)

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 6.20.0, 2026-10-09

Security (SEC)

  • Limit work per stream (filter count, accumulated decoding work) (#4173)

New Features (ENH)

  • Add support for BrotliDecode filter (PDF 2.0) (#4168)

Performance Improvements (PI)

  • Parse an embedded CFF font program once per stream (#4164)
  • Parse numbers, indirect references, names and nulls faster (#4148)
  • Do not inherit PdfObject from a Protocol (#4149)
  • Speed up cloning direct objects (#4152)

Bug Fixes (BUG)

  • Report the correct page number for identical pages (#4154)
  • Decrypt the XMP metadata stream unless /EncryptMetadata is false (#4151)

Robustness (ROB)

  • Accept an %%EOF marker that is not at the start of a line (#4136)
  • Font / _cmapy.py: More robust guards around fontTools (#4157)
  • Flatten the page tree iteratively (#4107)
  • Ignore invalid character codes for TrueType and Type1 font widths (#4117)
  • Restrict values to allowed range in CCITTFaxDecode (#4115)
  • Drop a /Kids entry resolving to null instead of raising a cycle error (#4108)

Developer Experience (DEV)

  • Declare official support for Python 3.15
  • Declare protocol data members on PdfReader and PdfWriter (#4106)

Full Changelog

Version 6.19.0, 2026-09-16

Security (SEC)

  • Limit size of alphabetical page labels (#4096)

Deprecations (DEP)

  • Replace PdfWriter method add_js (#3979)

Performance Improvements (PI)

  • Move static value out of loop body for appearance stream data (#4087)
  • Reduce number of full data lookups for attachment mapping API (#4081)

Bug Fixes (BUG)

  • Do not copy unrelated pages when appending pages with non-terminal fields (#4078)
  • Use page reference for existing internal link targets (#4076)
  • Arabic-Indic digits are reversed during text extraction (#4077)
  • Parse a string rect for add_uri into a rectangle (#4074)

... (truncated)

Commits
  • 0309ab7 REL: 6.20.0
  • 80a84d4 SEC: Limit work per stream (filter count, accumulated decoding work) (#4173)
  • 4c20fa8 DEV: Declare official support for Python 3.15
  • c64a4e4 ROB: Skip a Tj operator whose operand is not a string (#4171)
  • 4714175 MAINT: Fix A001 (Variable is shadowing a Python builtin) (#4167)
  • 921d778 ROB: Accept an %%EOF marker that is not at the start of a line (#4136)
  • 1a6b050 ROB: Skip a TJ operator whose operand is not an array (#4166)
  • 5b6a77a PI: Parse an embedded CFF font program once per stream (#4164)
  • 79423c1 PI: Parse numbers, indirect references, names and nulls faster (#4148)
  • 37e1cd6 ROB: Handle EOF when reading standard xref table (#4170)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pypdf](https://github.com/py-pdf/pypdf) from 6.16.0 to 6.20.0.
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.16.0...6.20.0)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 6.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 17, 2026 10:52
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants