Skip to content

chore(deps): bump pypdf from 6.7.3 to 6.10.0 in /packages/opentelemetry-instrumentation-llamaindex#3971

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/packages/opentelemetry-instrumentation-llamaindex/pypdf-6.10.0
Closed

chore(deps): bump pypdf from 6.7.3 to 6.10.0 in /packages/opentelemetry-instrumentation-llamaindex#3971
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/packages/opentelemetry-instrumentation-llamaindex/pypdf-6.10.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 10, 2026

Bumps pypdf from 6.7.3 to 6.10.0.

Release notes

Sourced from pypdf's releases.

Version 6.10.0, 2026-04-10

What's new

Security (SEC)

New Features (ENH)

  • Skip MD5 key derivation for AES-256 encrypted PDFs (#3694) by @​Ygnas

Bug Fixes (BUG)

Documentation (DOC)

Full Changelog

Version 6.9.2, 2026-03-23

What's new

Security (SEC)

Robustness (ROB)

Full Changelog

Version 6.9.1, 2026-03-17

What's new

Security (SEC)

Full Changelog

Version 6.9.0, 2026-03-15

What's new

New Features (ENH)

Performance Improvements (PI)

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 6.10.0, 2026-04-10

Security (SEC)

  • Disallow custom XML entity declarations for XMP metadata (#3724)

New Features (ENH)

  • Skip MD5 key derivation for AES-256 encrypted PDFs (#3694)

Bug Fixes (BUG)

  • Use remove_orphans in compress_identical_objects (#3310)
  • Fix PdfReadError when xref table contains comments before trailer (#3710)
  • Correctly verify AES padding during decryption (#3699)
  • Fix stale object cache from non-authoritative object streams (#3698)
  • Fix extract_links pairing when annotations include non-links (#3687)

Documentation (DOC)

Full Changelog

Version 6.9.2, 2026-03-23

Security (SEC)

  • Avoid infinite loop in read_from_stream for broken files (#3693)

Robustness (ROB)

  • Resolve UnboundLocalError for xobjs in _get_image (#3684)

Full Changelog

Version 6.9.1, 2026-03-17

Security (SEC)

  • Improve performance and limit length of array-based content streams (#3686)

Full Changelog

Version 6.9.0, 2026-03-15

New Features (ENH)

  • Expose /Perms verification result on Encryption object (#3672)

Performance Improvements (PI)

  • Fix O(n²) performance in NameObject read/write (#3679)
  • Batch-parse all objects in ObjStm on first access (#3677)

Bug Fixes (BUG)

  • Avoid sharing array-based content streams between pages (#3681)
  • Avoid accessing invalid page when inserting blank page under some conditions (#3529)

... (truncated)

Commits
  • fd0aeca REL: 6.10.0
  • b15a374 SEC: Disallow custom XML entity declarations for XMP metadata (#3724)
  • d0d9de6 DEV: Update cryptography to 46.0.7 in ci.txt
  • 1e0e5be DOC: Include policies about AI and PoCs into security policy
  • 3155e04 Bump cryptography from 46.0.6 to 46.0.7 in /requirements (#3723)
  • 696b978 DEV: Bump codecov/codecov-action from 5 to 6 (#3701)
  • 5456731 TST: Extending typing to tests; cover generic and scripts folder files (#3660)
  • e00505e DOC: Add AI policy (#3717)
  • bd95bd8 Fix PdfReadError when xref table contains comments before trailer (#3710)
  • f3f501b DEV: Update pygments version to 2.20.0 (#3707)
  • Additional commits viewable in compare view

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 10, 2026
@dependabot dependabot bot force-pushed the dependabot/uv/packages/opentelemetry-instrumentation-llamaindex/pypdf-6.10.0 branch 2 times, most recently from 016284a to 40e76de Compare April 13, 2026 05:58
Bumps [pypdf](https://github.com/py-pdf/pypdf) from 6.7.3 to 6.10.0.
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.7.3...6.10.0)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 6.10.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/uv/packages/opentelemetry-instrumentation-llamaindex/pypdf-6.10.0 branch from 40e76de to 0c9edfb Compare April 15, 2026 11:11
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 15, 2026

Superseded by #3998.

@dependabot dependabot bot closed this Apr 15, 2026
@dependabot dependabot bot deleted the dependabot/uv/packages/opentelemetry-instrumentation-llamaindex/pypdf-6.10.0 branch April 15, 2026 20:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants