Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 12, 2026

Bumps pypdf from 6.2.0 to 6.6.0.

Release notes

Sourced from pypdf's releases.

Version 6.6.0, 2026-01-09

What's new

Security (SEC)

Deprecations (DEP)

New Features (ENH)

  • Embellishments to generated text appearance streams (#3571) by @​PJBrs

Bug Fixes (BUG)

Robustness (ROB)

Documentation (DOC)

Developer Experience (DEV)

Maintenance (MAINT)

Full Changelog

Version 6.5.0, 2025-12-21

What's new

New Features (ENH)

Robustness (ROB)

Developer Experience (DEV)

Full Changelog

Version 6.4.2, 2025-12-14

What's new

Bug Fixes (BUG)

  • Fix KeyError when flattening form field without /Font in resources (#3554) by @​jgillard

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 6.6.0, 2026-01-09

Security (SEC)

  • Improve handling of partially broken PDF files (#3594)

Deprecations (DEP)

  • Block common page content modifications when assigned to reader (#3582)

New Features (ENH)

  • Embellishments to generated text appearance streams (#3571)

Bug Fixes (BUG)

  • Do not consider multi-byte BOM-like sequences as BOMs (#3589)

Robustness (ROB)

  • Avoid empty FlateDecode outputs without warning (#3579)

Documentation (DOC)

  • Add outlines documentation and link it in User Guide (#3511)

Developer Experience (DEV)

  • Add PyPy 3.11 to test matrix and benchmarks (#3574)

Maintenance (MAINT)

  • Fix compatibility with Pillow >= 12.1.0 (#3590)

Full Changelog

Version 6.5.0, 2025-12-21

New Features (ENH)

  • Limit jbig2dec memory usage (#3576)
  • FontDescriptor: Initiate from embedded font resource (#3551)

Robustness (ROB)

  • Allow fallback to PBM files for jbig2dec without PNG support (#3567)
  • Use warning instead of error for early EOD for RunLengthDecode (#3548)

Developer Experience (DEV)

  • Test with macOS as well (#3401)

Full Changelog

Version 6.4.2, 2025-12-14

Bug Fixes (BUG)

  • Fix KeyError when flattening form field without /Font in resources (#3554)

Robustness (ROB)

  • Allow deleting non-existent annotations (#3559)

... (truncated)

Commits
  • 10df9c7 REL: 6.6.0
  • 2941657 SEC: Improve handling of partially broken PDF files (#3594)
  • 7126880 DEV: Update to urllib3 2.6.3 (#3593)
  • f189f07 DOC: Add outlines documentation and link it in User Guide (#3511)
  • a29e532 BUG: Do not consider multi-byte BOM-like sequences as BOMs (#3589)
  • d9ce594 MAINT: Converge on one shared Font class for text extraction and appearance s...
  • a65708c DEV: Check for JavaScript library updates on GitHub Pages (#3592)
  • 6951bb7 MAINT: Fix compatibility with Pillow >= 12.1.0 (#3590)
  • 97d47a0 TST: Improve test coverage (#3584)
  • bda80a4 DEV: Add PyPy 3.11 to test matrix and benchmarks (#3574)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pypdf](https://github.com/py-pdf/pypdf) from 6.2.0 to 6.6.0.
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.2.0...6.6.0)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 6.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jan 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant