From a9ee7f6a8ea82e8185c75ae522afa25e587fe737 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 13 Jan 2026 20:23:55 +0000
Subject: [PATCH] build(deps): bump pypdf from 6.4.0 to 6.6.0 in
/testing/cucumber (#5422)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps [pypdf](https://github.com/py-pdf/pypdf) from 6.4.0 to 6.6.0.
Release notes
Sourced from pypdf's
releases.
Version 6.6.0, 2026-01-09
What's new
Security (SEC)
Deprecations (DEP)
New Features (ENH)
- Embellishments to generated text appearance streams (#3571)
by
@PJBrs
Bug Fixes (BUG)
Robustness (ROB)
Documentation (DOC)
Developer Experience (DEV)
Maintenance (MAINT)
Full
Changelog
Version 6.5.0, 2025-12-21
What's new
New Features (ENH)
Robustness (ROB)
Developer Experience (DEV)
Full
Changelog
Version 6.4.2, 2025-12-14
What's new
Bug Fixes (BUG)
- Fix KeyError when flattening form field without /Font in resources
(#3554)
by
@jgillard
... (truncated)
Changelog
Sourced from pypdf's
changelog.
Version 6.6.0, 2026-01-09
Security (SEC)
- Improve handling of partially broken PDF files (#3594)
Deprecations (DEP)
- Block common page content modifications when assigned to reader (#3582)
New Features (ENH)
- Embellishments to generated text appearance streams (#3571)
Bug Fixes (BUG)
- Do not consider multi-byte BOM-like sequences as BOMs (#3589)
Robustness (ROB)
- Avoid empty FlateDecode outputs without warning (#3579)
Documentation (DOC)
- Add outlines documentation and link it in User Guide (#3511)
Developer Experience (DEV)
- Add PyPy 3.11 to test matrix and benchmarks (#3574)
Maintenance (MAINT)
- Fix compatibility with Pillow >= 12.1.0 (#3590)
Full
Changelog
Version 6.5.0, 2025-12-21
New Features (ENH)
- Limit jbig2dec memory usage (#3576)
- FontDescriptor: Initiate from embedded font resource (#3551)
Robustness (ROB)
- Allow fallback to PBM files for jbig2dec without PNG support (#3567)
- Use warning instead of error for early EOD for RunLengthDecode (#3548)
Developer Experience (DEV)
- Test with macOS as well (#3401)
Full
Changelog
Version 6.4.2, 2025-12-14
Bug Fixes (BUG)
- Fix KeyError when flattening form field without /Font in resources
(#3554)
Robustness (ROB)
- Allow deleting non-existent annotations (#3559)
... (truncated)
Commits
10df9c7
REL: 6.6.0
2941657
SEC: Improve handling of partially broken PDF files (#3594)
7126880
DEV: Update to urllib3 2.6.3 (#3593)
f189f07
DOC: Add outlines documentation and link it in User Guide (#3511)
a29e532
BUG: Do not consider multi-byte BOM-like sequences as BOMs (#3589)
d9ce594
MAINT: Converge on one shared Font class for text extraction and
appearance s...
a65708c
DEV: Check for JavaScript library updates on GitHub Pages (#3592)
6951bb7
MAINT: Fix compatibility with Pillow >= 12.1.0 (#3590)
97d47a0
TST: Improve test coverage (#3584)
bda80a4
DEV: Add PyPy 3.11 to test matrix and benchmarks (#3574)
- Additional commits viewable in compare
view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
testing/cucumber/requirements.txt | 14 +++++++-------
1 file changed, 7 insertions(+), 7 deletions(-)
diff --git a/testing/cucumber/requirements.txt b/testing/cucumber/requirements.txt
index aa078aa00..14193eae0 100644
--- a/testing/cucumber/requirements.txt
+++ b/testing/cucumber/requirements.txt
@@ -7,7 +7,7 @@
behave==1.3.3 \
--hash=sha256:2b8f4b64ed2ea756a5a2a73e23defc1c4631e9e724c499e46661778453ebaf51 \
--hash=sha256:89bdb62af8fb9f147ce245736a5de69f025e5edfb66f1fbe16c5007493f842c0
- # via -r testing/cucumber/requirements.in
+ # via -r requirements.in
certifi==2025.11.12 \
--hash=sha256:97de8790030bbd5c2d96b7ec782fc2f7820ef8dba6db909ccf95449f2d062d4b \
--hash=sha256:d8ab5478f2ecd78af242878415affce761ca6bc54a22a27e026d7c25357c3316
@@ -290,15 +290,15 @@ pycryptodome==3.23.0 \
--hash=sha256:dea827b4d55ee390dc89b2afe5927d4308a8b538ae91d9c6f7a5090f397af1aa \
--hash=sha256:e3f2d0aaf8080bda0587d58fc9fe4766e012441e2eed4269a77de6aea981c8be \
--hash=sha256:eb8f24adb74984aa0e5d07a2368ad95276cf38051fe2dc6605cbcf482e04f2a7
- # via -r testing/cucumber/requirements.in
-pypdf==6.4.0 \
- --hash=sha256:4769d471f8ddc3341193ecc5d6560fa44cf8cd0abfabf21af4e195cc0c224072 \
- --hash=sha256:55ab9837ed97fd7fcc5c131d52fcc2223bc5c6b8a1488bbf7c0e27f1f0023a79
- # via -r testing/cucumber/requirements.in
+ # via -r requirements.in
+pypdf==6.6.0 \
+ --hash=sha256:4c887ef2ea38d86faded61141995a3c7d068c9d6ae8477be7ae5de8a8e16592f \
+ --hash=sha256:bca9091ef6de36c7b1a81e09327c554b7ce51e88dad68f5890c2b4a4417f1fd7
+ # via -r requirements.in
reportlab==4.4.5 \
--hash=sha256:0457d642aa76df7b36b0235349904c58d8f9c606a872456ed04436aafadc1510 \
--hash=sha256:849773d7cd5dde2072fedbac18c8bc909506c8befba8f088ba7b09243c6684cc
- # via -r testing/cucumber/requirements.in
+ # via -r requirements.in
requests==2.32.5 \
--hash=sha256:2462f94637a34fd532264295e186976db0f5d453d1cdd31473c85a6a161affb6 \
--hash=sha256:dbba0bac56e100853db0ea71b82b4dfd5fe2bf6d3754a8893c3af500cec7d7cf