Repository navigation
chore(deps): bump pypdf from 6.19.0 to 6.21.1 - #397
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [pypdf](https://github.com/py-pdf/pypdf) from 6.19.0 to 6.21.1. - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@6.19.0...6.21.1) --- updated-dependencies: - dependency-name: pypdf dependency-version: 6.21.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Owner: RAM.BULLS weekly Control Atlas maintenance, under Bryant's October 21 standing repair instruction. The existing Sunday 9:00 AM America/New_York job is active in the native Control Atlas project and explicitly references this PR as its next candidate. This one-line pypdf update addresses newly opened alerts #50–54 (four medium, one low). Current PR CI and Security are green. Next: confirm upstream release/advisory details and actual PDF-tool usage, verify the affected Python behavior and required final integration gate, then merge through protection and verify deployment. Reconcile fresh revisions before acting; do not dismiss the alerts or call the update deployed prematurely. The runner failure blocking #394 is separately fixed and deployed through #396, with incident #395 automatically resolved. This new dependency update is an owned weekly maintenance item; no founder decision is currently required. |
|
Weekly maintenance disposition: this remains the next bounded candidate after the deployed #399 repair. Alerts 50-54 are still open and the proposed 6.21.1 version covers their listed fixed versions. Existing CI is green, but it does not clearly exercise the installed Python PDF-tool path. Before merge, refresh this branch against current main and run the hosted |
|
Superseded by #413. |
Bumps pypdf from 6.19.0 to 6.21.1.
Release notes
Sourced from pypdf's releases.
... (truncated)
Changelog
Sourced from pypdf's changelog.
... (truncated)
Commits
1a6de8dREL: 6.21.1512d8ebSEC: Only open /DCTDecode image data with the Pillow JPEG plugin (#4222)7abdc8eDOC: Clarify security PR process1145329REL: 6.21.05ef728fSEC: Improve performance and limit field work (#4219)18bd298SEC: Limit stream parsing work (#4218)9f86100DEV: Ignore ruff rule ICN001 (#4206)1d64c39ENH: Allow custom fit modes for named destinations (#4181)14ea596DEV: Bump actions/download-artifact from 8.0.1 to 8.0.2 (#4204)c7c6d2aDEV: Bump actions/upload-artifact from 7.0.1 to 7.0.2 (#4205)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.