pretix / pretix

Ticket shop application for conferences, festivals, concerts, tech events, shows, exhibitions, workshops, barcamps, etc.
https://pretix.eu
Other
1.73k stars 431 forks source link

Update pypdf requirement from ==3.9.* to ==4.2.* #4148

Closed dependabot[bot] closed 1 week ago

dependabot[bot] commented 2 weeks ago

Updates the requirements on pypdf to permit the latest version.

Release notes

Sourced from pypdf's releases.

Version 4.2.0, 2024-04-07

What's new

New Features (ENH)

Bug Fixes (BUG)

Robustness (ROB)

Documentation (DOC)

Developer Experience (DEV)

Maintenance (MAINT)

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 4.2.0, 2024-04-07

New Features (ENH)

  • Allow multiple charsets for NameObject.read_from_stream (#2585)
  • Add support for /Kids in page labels (#2562)
  • Allow to update fields on many pages (#2571)
  • Tolerate PDF with invalid xref pointed objects (#2335)
  • Add Enforce from PDF2.0 in viewer_preferences (#2511)
  • Add += and -= operators to ArrayObject (#2510)

Bug Fixes (BUG)

  • Fix merge_page sometimes generating unknown operator 'QQ' (#2588)
  • Fix fields update where annotations are kids of field (#2570)
  • Process CMYK images without a filter correctly (#2557)
  • Extract text in layout mode without finding resources (#2555)
  • Prevent recursive loop in some PDF files (#2505)

Robustness (ROB)

  • Tolerate "truncated" xref (#2580)
  • Replace error by warning for EOD in RunLengthDecode/ASCIIHexDecode (#2334)
  • Rebuild xref table if one entry is invalid (#2528)
  • Robustify stream extraction (#2526)

Documentation (DOC)

  • Update release process for latest changes (#2564)
  • Encryption/decryption: Clone document instead of copying all pages (#2546)
  • Minor improvements (#2542)
  • Update annotation list (#2534)
  • Update references and formatting (#2529)
  • Correct threads reference, plus minor changes (#2521)
  • Minor readability increases (#2515)
  • Simplify PaperSize examples (#2504)
  • Minor improvements (#2501)

Developer Experience (DEV)

  • Remove unused dependencies (#2572)
  • Remove page labels PR link from message (#2561)
  • Fix changelog generator regarding whitespace and handling of "Other" group (#2492)
  • Add REL to known PR prefixes (#2554)
  • Release using the REL commit instead of git tag (#2500)
  • Unify code between PdfReader and PdfWriter (#2497)
  • Bump softprops/action-gh-release from 1 to 2 (#2514)

Maintenance (MAINT)

  • Ressources → Resources (and internal name childs) (#2550)
  • Fix typos found by codespell (#2549)
  • Update Read the Docs configuration (#2538)
  • Add root_object, _info and _ID to PdfReader (#2495)

Testing (TST)

... (truncated)

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
cla-bot[bot] commented 2 weeks ago

Hey there! :) Thank you very much for offering a contribution to pretix! For legal reasons, we need you to sign a Contributor License Agreement in order to be able to merge the code. Sorry for the hassle :( Please download the agreement from https://pretix.eu/about/en/cla and send a signed copy to support@pretix.eu. Feel free to also contact us there or via comments here if you have any questions!

raphaelm commented 1 week ago

superseded by https://github.com/pretix/pretix/pull/4159

dependabot[bot] commented 1 week ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.