Skip to content

chore(deps): bump pypdf from 4.3.1 to 6.16.2 in /backend - #23

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/pypdf-6.16.2
Closed

chore(deps): bump pypdf from 4.3.1 to 6.16.2 in /backend#23
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/pypdf-6.16.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 6, 2026

Copy link
Copy Markdown

Bumps pypdf from 4.3.1 to 6.16.2.

Release notes

Sourced from pypdf's releases.

Version 6.16.2, 2026-08-23

What's new

Bug Fixes (BUG)

Robustness (ROB)

  • Improve RC4 fallback when cryptography can't provide it (#3853) by @​msylw

Full Changelog

Version 6.16.1, 2026-08-14

What's new

Security (SEC)

Full Changelog

Version 6.16.0, 2026-08-13

What's new

Security (SEC)

New Features (ENH)

  • AppearanceStream: Allow arbitrary rotations and apply rotations for annotation appearance streams (#3917) by @​PJBrs
  • AppearanceStream: Consider more encodings for Type1 core fonts (#3905) by @​PJBrs

Performance Improvements (PI)

  • Build /ToUnicode source-code bytes directly in parse_bfrange (#3952) by @​Anai-Guo

Bug Fixes (BUG)

Robustness (ROB)

  • AppearanceStream: Only escape parentheses for 8-bit fonts (#3961) by @​PJBrs
  • Recover the trailer from a cross-reference stream when rebuilding the xref (#3950) by @​Anai-Guo

Maintenance (MAINT)

  • Deduplicate CatalogAttributes and CatalogDictionary (#3940) by @​j-t-1

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 6.16.2, 2026-08-23

Bug Fixes (BUG)

  • Make remove_from_tree() work on outline items (#3939)
  • Be more lenient about space width in layout mode text extraction (#3992)
  • Do not scale the text leading by the font size (#3987)
  • Update annotation appearance stream matrix on page transform (#3968)
  • Allow repeated page references (#3959)

Robustness (ROB)

  • Improve RC4 fallback when cryptography can't provide it (#3853)

Full Changelog

Version 6.16.1, 2026-08-14

Security (SEC)

  • Limit iterations for outline retrieval and XForm text extraction (#3966)

Full Changelog

Version 6.16.0, 2026-08-13

Security (SEC)

  • Detect cycles in TreeObject.insert_child (#3964)

New Features (ENH)

  • AppearanceStream: Allow arbitrary rotations and apply rotations for annotation appearance streams (#3917)
  • AppearanceStream: Consider more encodings for Type1 core fonts (#3905)

Performance Improvements (PI)

  • Build /ToUnicode source-code bytes directly in parse_bfrange (#3952)

Bug Fixes (BUG)

  • Preserve internal Link annotations when appending/merging (#3953) (#3954)
  • Fix false inline image end markers (#3922)
  • Reject typeless non-page /Kids entries in strict mode (#3955)
  • Apply character spacing (Tc) per glyph in layout-mode extraction (#3951)
  • Keep the Adobe CMYK inversion when an explicit /Decode is present (#3943)

Robustness (ROB)

  • AppearanceStream: Only escape parentheses for 8-bit fonts (#3961)
  • Recover the trailer from a cross-reference stream when rebuilding the xref (#3950)

Maintenance (MAINT)

  • Deduplicate CatalogAttributes and CatalogDictionary (#3940)

Code Style (STY)

  • Type pages as a Sequence rather than a list (#3957)

... (truncated)

Commits
  • 1da0987 REL: 6.16.2
  • f6853cc BUG: Make remove_from_tree() work on outline items (#3939)
  • c6d38af BUG: Type character widths as float (#3996)
  • 882b3b2 STY: Type the XMP stream as StreamObject rather than ContentStream (#3995)
  • 4c8f707 STY: Accept any sequence of fit arguments in Fit (#3990)
  • 2450321 STY: Accept any sequence as the annotation border (#3991)
  • 2dcab8d MAINT: Skip test_appearance_stream_rtl when RTL support is unavailable (#3993)
  • 412975a BUG: Be more lenient about space width in layout mode text extraction (#3992)
  • ddbfea9 BUG: Interpolate the reader in the reset_translation error message (#3981)
  • c646ef2 ROB: Improve RC4 fallback when cryptography can't provide it (#3853)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
chore(deps): bump pypdf from 4.3.1 to 6.16.2 in /backend
589abb3 
Bumps [pypdf](https://github.com/py-pdf/pypdf) from 4.3.1 to 6.16.2.
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@4.3.1...6.16.2)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 6.16.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 6, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: backend, dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@Om-Talaviya

Om-Talaviya commented Sep 6, 2026

Copy link
Copy Markdown
Owner

Closing obsolete Dependabot PR and deleting branch as version updates are disabled.

@Om-Talaviya Om-Talaviya closed this Sep 6, 2026
@Om-Talaviya
Om-Talaviya deleted the dependabot/pip/backend/pypdf-6.16.2 branch September 6, 2026 18:27
@dependabot @github

dependabot Bot commented on behalf of github Sep 6, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Om-Talaviya