build(deps): bump pypdf from 6.7.3 to 6.8.0
Closed
Number: #3
Type: Pull Request
State: Closed
Type: Pull Request
State: Closed
Author:
dependabot[bot]
Association: Unknown
Comments: 1
Association: Unknown
Comments: 1
Created:
March 11, 2026 at 01:05 AM UTC
(3 months ago)
(3 months ago)
Updated:
March 18, 2026 at 10:16 PM UTC
(3 months ago)
(3 months ago)
Closed:
March 18, 2026 at 10:15 PM UTC
(3 months ago)
(3 months ago)
Time to Close:
8 days
Labels:
dependencies python:uv
dependencies python:uv
Description:
Bumps pypdf from 6.7.3 to 6.8.0.
Release notes
Sourced from pypdf's releases.
Version 6.8.0, 2026-03-09
What's new
Security (SEC)
- Limit allowed
/Lengthvalue of stream (#3675) by@stefan6419846New Features (ENH)
- Add /IRT (in-reply-to) support for markup annotations (#3631) by
@costajohntDocumentation (DOC)
- Avoid using
PageObject.replace_contentson PdfReader (#3669) by@stefan6419846- Document how to disable jbig2dec calls by
@stefan6419846Version 6.7.5, 2026-03-02
What's new
Security (SEC)
- Improve the performance of the ASCIIHexDecode filter (#3666) by
@stefan6419846Version 6.7.4, 2026-02-27
What's new
Security (SEC)
- Allow limiting output length for RunLengthDecode filter (#3664) by
@stefan6419846Robustness (ROB)
- Deal with invalid annotations in extract_links (#3659) by
@stefan6419846
Changelog
Sourced from pypdf's changelog.
Version 6.8.0, 2026-03-09
Security (SEC)
- Limit allowed
/Lengthvalue of stream (#3675)New Features (ENH)
- Add /IRT (in-reply-to) support for markup annotations (#3631)
Documentation (DOC)
- Avoid using
PageObject.replace_contentson PdfReader (#3669)- Document how to disable jbig2dec calls
Version 6.7.5, 2026-03-02
Security (SEC)
- Improve the performance of the ASCIIHexDecode filter (#3666)
Version 6.7.4, 2026-02-27
Security (SEC)
- Allow limiting output length for RunLengthDecode filter (#3664)
Robustness (ROB)
- Deal with invalid annotations in extract_links (#3659)
Commits
a869eceREL: 6.8.03c550b3SEC: Limit allowed/Lengthvalue of stream (#3675)5dae0e2MAINT: Document and test XMP security (#3674)b9f66abDEV: Change toloadfilestrategy for PyPy in CI (#3671)071118bMAINT: Remove excessive logging in extract_links while not clear (#3670)43add64DEV: Timeout PyPy tests after one minute4228dd2DOC: Avoid usingPageObject.replace_contentson PdfReader (#3669)0e9792dENH: Add /IRT (in-reply-to) support for markup annotations (#3631)ede6db9DOC: Document how to disable jbig2dec calls6d0fa2fMAINT: Move and rename _xobj_image_helpers.py (#3661)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
Package Dependencies
Technical Details
| ID: | 14687508 |
| UUID: | 4055055842 |
| Node ID: | PR_kwDORZkZ7c7JjJ4F |
| Host: | GitHub |
| Repository: | figonzal1/python-agentframework |