search

cisagov / con-pca-api

API Docker Container for Con-PCA
Creative Commons Zero v1.0 Universal
7 stars 0 forks source link

Bump pypdf2 from 2.10.3 to 2.10.7 #767

Closed dependabot[bot] closed 2 years ago

dependabot[bot] commented 2 years ago

Bumps pypdf2 from 2.10.3 to 2.10.7.

Release notes

Sourced from pypdf2's releases.

Version 2.10.7, 2022-09-11

What's Changed

Bug Fixes (BUG)

Testing (TST)

  • Use pytest.warns() for warnings, and .raises() for exceptions (#1325) by @​mgorny

New Contributors

Full Changelog: https://github.com/py-pdf/PyPDF2/compare/2.10.6...2.10.7

2.10.6

What's Changed

Two robustness issues were fixed by @​pubpub-zz - thank you :pray: The infinite loop issue might also be a security concern, depending on how you use PyPDF2.

Robustness (ROB):

  • Fix infinite loop due to Invalid object (#1331)
  • Fix image extraction issue with superfluous whitespaces (#1327)

Full Changelog: https://github.com/py-pdf/PyPDF2/compare/2.10.5...2.10.6

Version 2.10.5, 2022-09-04

What's Changed

New Features (ENH)

Bug Fixes (BUG)

Robustness (ROB)

Documentation (DOC)

  • Migration guide (PyPDF2 1.x ➔ 2.x) (#1324)

... (truncated)

Changelog

Sourced from pypdf2's changelog.

Version 2.10.7, 2022-09-11

Bug Fixes (BUG)

  • Fix Error in transformations (#1341)
  • Decode #23 in NameObject (#1342)

Testing (TST)

  • Use pytest.warns() for warnings, and .raises() for exceptions (#1325)

Full Changelog: https://github.com/py-pdf/PyPDF2/compare/2.10.6...2.10.7

Version 2.10.6, 2022-09-09

Robustness (ROB)

  • Fix infinite loop due to Invalid object (#1331)
  • Fix image extraction issue with superfluous whitespaces (#1327)

Full Changelog: https://github.com/py-pdf/PyPDF2/compare/2.10.5...2.10.6

Version 2.10.5, 2022-09-04

New Features (ENH)

  • Process XRefStm (#1297)
  • Auto-detect RTL for text extraction (#1309)

Bug Fixes (BUG)

  • Avoid scaling cropbox twice (#1314)

Robustness (ROB)

  • Fix offset correction in revised PDF (#1318)
  • Crop data of /U and /O in encryption dictionary to 48 bytes (#1317)
  • MultiLine bfrange in cmap (#1299)
  • Cope with 2 digit codes in bfchar (#1310)
  • Accept '/annn' charset as ASCII code (#1316)
  • Log errors during Float / NumberObject initialization (#1315)
  • Cope with corrupted entries in xref table (#1300)

Documentation (DOC)

  • Migration guide (PyPDF2 1.x ➔ 2.x) (#1324)
  • Creating a coverage report (#1319)
  • Fix AnnotationBuilder.free_text example (#1311)
  • Fix usage of page.scale by replacing it with page.scale_by (#1313)

Maintenance (MAINT)

  • PdfReaderProtocol (#1303)
  • Throw PdfReadError if Trailer can't be read (#1298)
  • Remove catching OverflowException (#1302)

Full Changelog: https://github.com/py-pdf/PyPDF2/compare/2.10.4...2.10.5

... (truncated)

Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 2 years ago

Superseded by #777.