Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 24, 2025

Bumps pypdf from 5.2.0 to 6.4.0.

Release notes

Sourced from pypdf's releases.

Version 6.4.0, 2025-11-23

What's new

Security (SEC)

New Features (ENH)

  • Parse and format comb fields in text widget annotations (#3519) by @​PJBrs

Robustness (ROB)

  • Silently ignore Adobe Ascii85 whitespace for suffix detection (#3528) by @​mbierma

Full Changelog

Version 6.3.0, 2025-11-16

What's new

New Features (ENH)

Bug Fixes (BUG)

Full Changelog

Version 6.2.0, 2025-11-09

What's new

New Features (ENH)

Bug Fixes (BUG)

Documentation (DOC)

Full Changelog

Version 6.1.3, 2025-10-22

What's new

Security (SEC)

Bug Fixes (BUG)

  • PageObject.scale() scales media box incorrectly (#3489) by @​Nid01

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 6.4.0, 2025-11-23

Security (SEC)

  • Reduce default limit for LZW decoding

New Features (ENH)

  • Parse and format comb fields in text widget annotations (#3519)

Robustness (ROB)

  • Silently ignore Adobe Ascii85 whitespace for suffix detection (#3528)

Full Changelog

Version 6.3.0, 2025-11-16

New Features (ENH)

  • Wrap and align text in flattened PDF forms (#3465)

Bug Fixes (BUG)

  • Fix missing "PreventGC" when cloning (#3520)
  • Preserve JPEG image quality by default (#3516)

Full Changelog

Version 6.2.0, 2025-11-09

New Features (ENH)

  • Add 'strict' parameter to PDFWriter (#3503)

Bug Fixes (BUG)

  • PdfWriter.append fails when there are articles being None (#3509)

Documentation (DOC)

  • Execute docs examples in CI (#3507)

Full Changelog

Version 6.1.3, 2025-10-22

Security (SEC)

  • Allow limiting size of LZWDecode streams (#3502)
  • Avoid infinite loop when reading broken DCT-based inline images (#3501)

Bug Fixes (BUG)

  • PageObject.scale() scales media box incorrectly (#3489)

Robustness (ROB)

  • Fail with explicit exception when image mode is an empty array (#3500)

Full Changelog

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [pypdf](https://github.com/py-pdf/pypdf) from 5.2.0 to 6.4.0.
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@5.2.0...6.4.0)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 6.4.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 24, 2025
@doomedraven doomedraven merged commit 4c9ed23 into master Nov 25, 2025
6 checks passed
@dependabot dependabot bot deleted the dependabot/pip/pypdf-6.4.0 branch November 25, 2025 07:11
doomedraven added a commit that referenced this pull request Nov 30, 2025
* Update AdaptixBeacon yara and add NitrogenBunnyDownloader yara

* add missing hash

* add missing update

* Gemini nags

* Additional Rhadamanthys patterns

* Switch Suricata installation to version 7.0

Comment out the repository for Suricata 8 and use Suricata 7.0 instead.

* Remove test_handle_process_invalid_data() from tests/test_analyzer.py

* Tweak Rhadamanthys patterns

- removed highly variable jump size in conditional jump (0x2e6 bytes code, size highly brittle)
- replaced eax register in nice characteristic pattern as it can only be eax, since pattern contains the xor eax, eax instruction by which the code zeroes)

* Rhadamanthys anti-anti detonation bypass

* Rhadamanthys detection patterns

* Enable protocol extended information to be generated without a TLS master secret (#2739)

* Update NitroBunnyDownloader yara

* Bump django from 5.1.13 to 5.1.14 (#2742)

Bumps [django](https://github.com/django/django) from 5.1.13 to 5.1.14.
- [Commits](django/django@5.1.13...5.1.14)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.1.14
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update startup.py

* Fix path handling for SHA256 calculation

* Update startup.py

* Monitor updates: see changelog for details

* analyzer: remove obsolete 'suspended' parameter from CommandPipeHandler

* Update routing.rst

* Fix error list entry format in demux.py

* prevent linux parsing errors (#2744)

* Rhadamanthys unhook bypass

* Add Suricata host (#2745)

* Rename surihhost to surihost in search.html

* Add 'surihost' key to Suricata alert mapping

* Update lib/cuckoo/common/web_utils.py

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

---------

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

* Monitor update: Add config option for monitor injection into supplied pid or "explorer" for shell: monitor=<pid/"explorer">

* SmokeLoader 2025

* Update installation step to include KnowledgeBaseBot

Install dependencies from both requirements files.

* Bump django from 5.1.13 to 5.1.14 (#2749)

Bumps [django](https://github.com/django/django) from 5.1.13 to 5.1.14.
- [Commits](django/django@5.1.13...5.1.14)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.1.14
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci: Update requirements.txt

* Refactor auto_answer.yml to streamline dependency installation

Updated the workflow to install dependencies using uv run with specified requirements files.

* fix docs

* Fix a bug that prevents terminal status from being reported by the agent (#2753)

Updates the POST /status endpoint to unset the async subprocess if the new status is terminal. This makes GET /status report the final analysis state, rather than the child process state.

* Fix 'machines' vars on Azure (#2755)

* Monitor update: Fix issue with RESUME: monitor message from NtResumeProcess hook

* Bump pypdf from 5.2.0 to 6.4.0 (#2757)

Bumps [pypdf](https://github.com/py-pdf/pypdf) from 5.2.0 to 6.4.0.
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@5.2.0...6.4.0)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 6.4.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Prevent on_complete execution for matched signatures (#2758)

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: enzok <7831008+enzok@users.noreply.github.com>
Co-authored-by: Yung Binary <93540406+YungBinary@users.noreply.github.com>
Co-authored-by: Kevin O'Reilly <kevoreilly@gmail.com>
Co-authored-by: Fernando Domínguez <6620286+FernandoDoming@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: David Santos <44490090+dsecuma@users.noreply.github.com>
Co-authored-by: Bart <3075118+bartblaze@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: GitHub Actions <action@github.com>
Co-authored-by: Josh Feather <142008135+josh-feather@users.noreply.github.com>
Co-authored-by: Lilian <86776930+Grand-Duc@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants