Skip to content

Bump the "pdfding" group with 3 updates across multiple ecosystems#301

Merged
mrmn2 merged 1 commit into
masterfrom
dependabot/pdfding-e637c67930
Apr 12, 2026
Merged

Bump the "pdfding" group with 3 updates across multiple ecosystems#301
mrmn2 merged 1 commit into
masterfrom
dependabot/pdfding-e637c67930

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 12, 2026

Bumps the pdfding group with 9 updates:

Package From To
django 5.2.12 5.2.13
django-allauth 65.15.0 65.15.1
gunicorn 25.1.0 25.3.0
nh3 0.3.3 0.3.4
pypdfium2 5.6.0 5.7.0
pypdf 6.9.2 6.10.0
rapidfuzz 3.14.3 3.14.5
pytest 9.0.2 9.0.3
pytest-cov 7.0.0 7.1.0

Updates django from 5.2.12 to 5.2.13

Commits
  • 7d831a9 [5.2.x] Bumped version for 5.2.13 release.
  • 49e1e2b [5.2.x] Fixed CVE-2026-33034 -- Enforced DATA_UPLOAD_MAX_MEMORY_SIZE on body ...
  • 0b46789 [5.2.x] Fixed CVE-2026-33033 -- Mitigated potential DoS in MultiPartParser.
  • 397c220 [5.2.x] Fixed CVE-2026-4292 -- Disallowed instance creation via ModelAdmin.li...
  • 60ffa95 [5.2.x] Fixed CVE-2026-4277 -- Checked add permissions in GenericInlineModelA...
  • 1cc2a76 [5.2.x] Fixed CVE-2026-3902 -- Ignored headers with underscores in ASGIRequest.
  • 2a8a76a [5.2.x] Added stub release notes and release date for 5.2.13 and 4.2.30.
  • 90924f5 [5.2.x] Bumped black to 26.3.1.
  • 0ee44c6 [5.2.x] Applied Black's 2026 stable style.
  • 89b4d94 [5.2.x] Combined scripts confirm_release.sh and test_new_version.sh into veri...
  • Additional commits viewable in compare view

Updates django-allauth from 65.15.0 to 65.15.1

Commits

Updates gunicorn from 25.1.0 to 25.3.0

Release notes

Sourced from gunicorn's releases.

Gunicorn 25.3.0

Bug Fixes

  • HTTP/2 ASGI Body Duplication: Fix request body being received twice in HTTP/2 ASGI requests, causing JSON parsing errors with "Extra data" messages (#3558)

  • ASGI Chunked EOF Handling: Add finish() method to callback parser to handle chunked encoding edge case where connection closes before final CRLF after zero-chunk

  • HTTP/2 Documentation: Fix http_protocols examples to use comma-separated string instead of list syntax (#3561)

  • Chunked Encoding: Reject chunk extensions containing bare CR bytes per RFC 9112 (#3556)

  • Request Line Limit: Fix --limit-request-line 0 to mean unlimited as documented, instead of using default maximum. Works with both Python and fast C parser. (#3563)

Security

  • ASGI Parser Header Validation: Add security checks per RFC 9110/9112:
    • Reject duplicate Content-Length headers
    • Reject requests with both Content-Length and Transfer-Encoding
    • Reject chunked transfer encoding in HTTP/1.0
    • Reject stacked chunked encoding
    • Validate Transfer-Encoding values
    • Strict chunk size validation

Changes

  • Fast HTTP Parser: Update to gunicorn_h1c >= 0.6.3 for asgi_headers property and InvalidChunkExtension validation for bare CR rejection

  • ASGI PROXY Protocol: Add PROXY protocol v1/v2 support to callback parser

  • Docker Images: Update to Python 3.14

Gunicorn 25.2.0

New Features

  • Fast HTTP Parser (gunicorn_h1c 0.4.1): Integrate new exception types and limit parameters from gunicorn_h1c 0.4.1 for both WSGI and ASGI workers
    • Requires gunicorn_h1c >= 0.4.1 for http_parser='fast'
    • Falls back to Python parser in auto mode if version not met
    • Proper HTTP status codes for limit errors (414, 431)

Bug Fixes

  • uWSGI Async Workers: Fix InvalidUWSGIHeader: incomplete header error when using gevent or gthread workers with uwsgi protocol behind nginx. (#3552, [PR #3554](benoitc/gunicorn#3554))

... (truncated)

Commits
  • 9bce72c Update changelog with missing 25.3.0 changes
  • 2a15fdb Fix pylint isinstance-second-argument-not-valid-type warning
  • 8d08aaa Fix --limit-request-line 0 to mean unlimited
  • d40a374 Fix pytest-asyncio configuration and treq_asgi hex escapes
  • da8bd48 Remove unused AsyncRequest class
  • b00f125 Integrate gunicorn_h1c 0.6.3 with InvalidChunkExtension support
  • bdb2ebd Reject chunk extensions with bare CR bytes (RFC 9112)
  • 7057fc9 Fix http_protocols documentation to use string syntax
  • d43acb8 Update to gunicorn_h1c >= 0.6.2 for asgi_headers support
  • cbd27e8 Merge pull request #3559 from benleembruggen/fix/http2-asgi-body-duplication
  • Additional commits viewable in compare view

Updates nh3 from 0.3.3 to 0.3.4

Release notes

Sourced from nh3's releases.

v0.3.4

What's Changed

New Contributors

Full Changelog: messense/nh3@v0.3.3...v0.3.4

Commits

Updates pypdfium2 from 5.6.0 to 5.7.0

Release notes

Sourced from pypdfium2's releases.

5.7.0

Changes (Release 5.7.0)

Summary (pypdfium2)

  • PdfDocument: When encoding input filepath to UTF-8, use the surrogateescape error handler (except on Windows). This fixes loading some garbled filenames, where a default .encode("utf-8") call would raise UnicodeEncodeError. Thanks to Filipe Litaiff for the report.
  • Simplified output string handling. Access buffer directly instead of buffer.raw. This might be more efficient.
  • The CLI has moved from pypdfium2._cli to pypdfium2_cli, i.e. an own submodule. pypdfium2.__main__ and python3 -m pypdfium2 are deprecated. Use pypdfium2_cli.__main__ and python3 -m pypdfium2_cli or the pypdfium2 entrypoint instead. This has been necessary since a module's __main__.py implies its __init__.py, which gives us no chance to prepare before library init if __main__.py lives in the pypdfium2 module itself.
  • Added new helper PdfSysfontBase. Wraps FPDF_SYSFONTINFO and related APIs. Callers can subclass from PdfSysfontBase to inspect or alter the way PDFium uses system fonts. This is a first step towards implementing a warning mechanism for missing system fonts or substitution. Thanks to scyyh11 for related proposals, and especially a hint on passing the right pointer in callbacks.
  • Added PdfiumWarning (subclass of Warning). A PdfiumWarning is now issued on XFA forms load failure, with programmatic error code info, rather than just a log message.
  • Added new submodule stub pypdfium2_cfg, which can be imported before pypdfium2 for init-time configuration. The DEBUG_AUTOCLOSE setting has been moved to this module. In the future, pypdfium2_cfg may be extended to give callers control over how pypdfium2 initializes PDFium (e.g. custom font paths).
  • Split off pypdfium2_raw/version.py from pypdfium2/version.py, so that PDFIUM_INFO is now available from within pypdfium2_raw. This has been necessary to implement a target-specific workaround (see below).
  • build_native.py: When GCC is used, we now declare a custom_toolchain, with environment passthrough.
    • First, this avoids inconsistency across different platforms in pdfium's build config, with some expecting just gcc and others an arch-prefixed variant. This makes build_native.py more likely to work out of the box, relieving callers from the necessity to create symlinks, including our internal cibuildwheel callers.
    • Second, this allows you to use a different version of GCC, or in fact any other compatible compiler, including clang, by setting CC, CXX and TOOLPREFIX. This makes --clang-as-gcc more straightforward to implement.
    • Also, extra CFLAGS, CPPFLAGS, CXXFLAGS and LDFLAGS are now honored in this build mode.
  • Basic FreeBSD CI added (powered by cross-platform-actions), testing installation with libreoffice-pdfium.
    • On (Free)BSD with libreoffice-pdfium, pre-load implicit dependency libraries with mode=RTLD_GLOBAL to fix library load.

Commits between 5.6.0 and 5.7.0 (latest commit first):

  • f2a5380 [autorelease main] update 5.7.0
  • 77f58a1 Simplify sysfontinfo docs
  • 27c3a63 Align doc param name with actual param name
  • e3cc95c changelog: break some lines
  • 3aefaa0 Reland "Try to give GH API request a token"
  • 46795ee Revert "Try to give GH API request a token"
  • 47dffe8 Try to fix macOS and python < 3.8
  • de6a0d7 Try to give GH API request a token
  • 3ca4b06 Satisfy check-wheel-contents
  • 3d8423b Fix a typo that codespell didn't catch
  • edaf6ab FPDF_SYSFONTINFO wrapper + other progress (#417)
  • c085743 Move minitest script to utils/
  • 640e3b0 minitest: register exit handler only after successful library init
  • b85072a build(deps): bump extractions/setup-just from 3 to 4
  • 0bec727 Bump cibuildwheel to v3.4.1

... (truncated)

Commits
  • f2a5380 [autorelease main] update 5.7.0
  • 77f58a1 Simplify sysfontinfo docs
  • 27c3a63 Align doc param name with actual param name
  • e3cc95c changelog: break some lines
  • 3aefaa0 Reland "Try to give GH API request a token"
  • 46795ee Revert "Try to give GH API request a token"
  • 47dffe8 Try to fix macOS and python < 3.8
  • de6a0d7 Try to give GH API request a token
  • 3ca4b06 Satisfy check-wheel-contents
  • 3d8423b Fix a typo that codespell didn't catch
  • Additional commits viewable in compare view

Updates pypdf from 6.9.2 to 6.10.0

Release notes

Sourced from pypdf's releases.

Version 6.10.0, 2026-04-10

What's new

Security (SEC)

New Features (ENH)

  • Skip MD5 key derivation for AES-256 encrypted PDFs (#3694) by @​Ygnas

Bug Fixes (BUG)

Documentation (DOC)

Full Changelog

Changelog

Sourced from pypdf's changelog.

Version 6.10.0, 2026-04-10

Security (SEC)

  • Disallow custom XML entity declarations for XMP metadata (#3724)

New Features (ENH)

  • Skip MD5 key derivation for AES-256 encrypted PDFs (#3694)

Bug Fixes (BUG)

  • Use remove_orphans in compress_identical_objects (#3310)
  • Fix PdfReadError when xref table contains comments before trailer (#3710)
  • Correctly verify AES padding during decryption (#3699)
  • Fix stale object cache from non-authoritative object streams (#3698)
  • Fix extract_links pairing when annotations include non-links (#3687)

Documentation (DOC)

Full Changelog

Commits
  • fd0aeca REL: 6.10.0
  • b15a374 SEC: Disallow custom XML entity declarations for XMP metadata (#3724)
  • d0d9de6 DEV: Update cryptography to 46.0.7 in ci.txt
  • 1e0e5be DOC: Include policies about AI and PoCs into security policy
  • 3155e04 Bump cryptography from 46.0.6 to 46.0.7 in /requirements (#3723)
  • 696b978 DEV: Bump codecov/codecov-action from 5 to 6 (#3701)
  • 5456731 TST: Extending typing to tests; cover generic and scripts folder files (#3660)
  • e00505e DOC: Add AI policy (#3717)
  • bd95bd8 Fix PdfReadError when xref table contains comments before trailer (#3710)
  • f3f501b DEV: Update pygments version to 2.20.0 (#3707)
  • Additional commits viewable in compare view

Updates rapidfuzz from 3.14.3 to 3.14.5

Release notes

Sourced from rapidfuzz's releases.

Release 3.14.5

Fixed

  • fix release ci attempting to upload a pyodide wheel

Release 3.14.4

Added

  • add risc64 wheels
  • add support for taskflow 4.0.0

Changed

  • upgrade to Cython==3.2.4.

Fixed

  • fix type hints for extractOne when no score_cutoff is provided
Changelog

Sourced from rapidfuzz's changelog.

Changelog

[3.14.5] - 2026-08-07 ^^^^^^^^^^^^^^^^^^^^^ Fixed

* fix release ci attempting to upload a pyodide wheel

[3.14.4] - 2026-04-06
^^^^^^^^^^^^^^^^^^^^^
Added

  • add risc64 wheels
  • add support for taskflow 4.0.0

Changed

* upgrade to ``Cython==3.2.4``.

Fixed


* fix type hints for extractOne when no score_cutoff is provided

[3.14.3] - 2025-11-01

^^^^^^^^^^^^^^^^^^^^^

Fixed




    

  • add missing pypy and freethreaded linux wheels
    • 



Removed

  • drop s390x and ppc64le wheels since they are virtually unused and require extremly long to build under emulation

[3.14.2] - 2025-10-30 ^^^^^^^^^^^^^^^^^^^^^ Changed

* upgrade to ``Cython==3.1.6``
* enable free threading

[3.14.1] - 2025-09-08
^^^^^^^^^^^^^^^^^^^^^
Fixed


* Fully disable line tracing in release builds

[3.14.0] - 2025-08-27

^^^^^^^^^^^^^^^^^^^^^

Changed

&lt;/tr&gt;&lt;/table&gt;

</code></pre>

</blockquote>

<p>... (truncated)</p>

</details>

<details>

<summary>Commits</summary>


<ul>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/edf9f3c2d016c878dae1511301f8b4a501bba871&quot;&gt;&lt;code&gt;edf9f3c&lt;/code&gt;&lt;/a> fix release ci</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/3d8470bf60062dda5c200517f61a8ff43e3e9ef2&quot;&gt;&lt;code&gt;3d8470b&lt;/code&gt;&lt;/a> enable verbose publish</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/7fd4ee202b5e3cc9f158f505a33d934a68c14148&quot;&gt;&lt;code&gt;7fd4ee2&lt;/code&gt;&lt;/a> Bump the github-actions group across 1 directory with 3 updates</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/9691cf1bf985eaf59f6c968f3d7cd8e59054ebaa&quot;&gt;&lt;code&gt;9691cf1&lt;/code&gt;&lt;/a> tag release</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/fd16748843be7d1a4842604fa3429e3943e80e5c&quot;&gt;&lt;code&gt;fd16748&lt;/code&gt;&lt;/a> ci: switch riscv64 from QEMU to native RISE runner</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/7f7d58b91a2716eaaec939a72b476ab1bf1ead1b&quot;&gt;&lt;code&gt;7f7d58b&lt;/code&gt;&lt;/a> ci: add riscv64 wheel builds via QEMU</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/f4b56942bdbbb99bba556656ea8a0aef1e8c12f0&quot;&gt;&lt;code&gt;f4b5694&lt;/code&gt;&lt;/a> Bump pypa/cibuildwheel from 3.3.1 to 3.4.0 in the github-actions group</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/f2873ce9868285eca1d05d8645791d76a2b545fe&quot;&gt;&lt;code&gt;f2873ce&lt;/code&gt;&lt;/a> Bump the github-actions group across 1 directory with 3 updates</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/4e48509d858454ea994521f90ae8c5d66eb15073&quot;&gt;&lt;code&gt;4e48509&lt;/code&gt;&lt;/a> support Taskflow 4.0.0</li>

<li><a href="https://github.com/rapidfuzz/RapidFuzz/commit/70480396a66fadabd897407ce289978dec2c13c0&quot;&gt;&lt;code&gt;7048039&lt;/code&gt;&lt;/a> Bump the github-actions group across 1 directory with 4 updates</li>

<li>Additional commits viewable in <a href="https://github.com/rapidfuzz/RapidFuzz/compare/v3.14.3...v3.14.5&quot;&gt;compare view</a></li>

</ul>

</details>


<br />


Updates pytest from 9.0.2 to 9.0.3



Release notes

Sourced from pytest's releases.




9.0.3


pytest 9.0.3 (2026-04-07)


Bug fixes


    

  • 

    #12444: Fixed pytest.approx which now correctly takes into account ~collections.abc.Mapping keys order to compare them.
    

    • 

  • 

    #13634: Blocking a conftest.py file using the -p no: option is now explicitly disallowed.
    

    Previously this resulted in an internal assertion failure during plugin loading.
    

    Pytest now raises a clear UsageError explaining that conftest files are not plugins and cannot be disabled via -p.
    

    • 

  • 

    #13734: Fixed crash when a test raises an exceptiongroup with __tracebackhide__ = True.
    

    • 

  • 

    #14195: Fixed an issue where non-string messages passed to unittest.TestCase.subTest() were not printed.
    

    • 

  • 

    #14343: Fixed use of insecure temporary directory (CVE-2025-71176).
    

    • 



Improved documentation


    

  • #13388: Clarified documentation for -p vs PYTEST_PLUGINS plugin loading and fixed an incorrect -p example.
    • 

  • #13731: Clarified that capture fixtures (e.g. capsys and capfd) take precedence over the -s / --capture=no command-line options in Accessing captured output from a test function <accessing-captured-output>.
    • 

  • #14088: Clarified that the default pytest_collection hook sets session.items before it calls pytest_collection_finish, not after.
    • 

  • #14255: TOML integer log levels must be quoted: Updating reference documentation.
    • 



Contributor-facing changes


    

  • 

    #12689: The test reports are now published to Codecov from GitHub Actions.
The test statistics is visible on the web interface.
    

    -- by aleguy02
    

    • 








Commits






Updates pytest-cov from 7.0.0 to 7.1.0



Changelog

Sourced from pytest-cov's changelog.




7.1.0 (2026-03-21)


    

  • 

    Fixed total coverage computation to always be consistent, regardless of reporting settings.
Previously some reports could produce different total counts, and consequently can make --cov-fail-under behave different depending on
reporting options.
See [#641](https://github.com/pytest-dev/pytest-cov/issues/641) <https://github.com/pytest-dev/pytest-cov/issues/641>_.
    

    • 

  • 

    Improve handling of ResourceWarning from sqlite3.
    

    The plugin adds warning filter for sqlite3 ResourceWarning unclosed database (since 6.2.0).
It checks if there is already existing plugin for this message by comparing filter regular expression.
When filter is specified on command line the message is escaped and does not match an expected message.
A check for an escaped regular expression is added to handle this case.
    

    With this fix one can suppress ResourceWarning from sqlite3 from command line::
    

    pytest -W "ignore:unclosed database in <sqlite3.Connection object at:ResourceWarning" ...
    

    • 

  • 

    Various improvements to documentation.
Contributed by Art Pelling in [#718](https://github.com/pytest-dev/pytest-cov/issues/718) <https://github.com/pytest-dev/pytest-cov/pull/718>_ and
"vivodi" in [#738](https://github.com/pytest-dev/pytest-cov/issues/738) <https://github.com/pytest-dev/pytest-cov/pull/738>.
Also closed [#736](https://github.com/pytest-dev/pytest-cov/issues/736) <https://github.com/pytest-dev/pytest-cov/issues/736>.
    

    • 

  • 

    Fixed some assertions in tests.
Contributed by in Markéta Machová in [#722](https://github.com/pytest-dev/pytest-cov/issues/722) <https://github.com/pytest-dev/pytest-cov/pull/722>_.
    

    • 

  • 

    Removed unnecessary coverage configuration copying (meant as a backup because reporting commands had configuration side-effects before coverage 5.0).
    

    • 








Commits

    

  • 66c8a52 Bump version: 7.0.0 → 7.1.0
    • 

  • f707662 Make the examples use pypy 3.11.
    • 

  • 6049a78 Make context test use the old ctracer (seems the new sysmon tracer behaves di...
    • 

  • 8ebf20b Update changelog.
    • 

  • 861d30e Remove the backup context manager  - shouldn't be needed since coverage 5.0, ...
    • 

  • fd4c956 Pass the precision on the nulled total (seems that there's some caching goion...
    • 

  • 78c9c4e Only run the 3.9 on older deps.
    • 

  • 4849a92 Punctuation.
    • 

  • 197c35e Update changelog and hopefully I don't forget to publish release again :))
    • 

  • 14dc1c9 Update examples to use 3.11 and make the adhoc layout example look a bit more...
    • 

  • Additional commits viewable in compare view
    • 







Bumps the pdfding group with 1 update: alpinejs.


Updates alpinejs from 3.15.8 to 3.15.11



Release notes

Sourced from alpinejs's releases.




v3.15.11


What's Changed



New Contributors



Full Changelog: https://github.com/alpinejs/alpine/compare/v3.15.10...v3.15.11


v3.15.10


Fixed


    

  • Fix x-anchor crash during wire:navigate cleanup #4790
    • 



v3.15.9


What's Changed



New Contributors






... (truncated)





Commits





Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for alpinejs since your current version.






Bumps the pdfding group with 1 update: node.


Updates node from 22.22.1-bookworm-slim to 22.22.2-bookworm-slim


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.





Dependabot commands and options



You can trigger Dependabot actions by commenting on this PR:


    

  • @dependabot rebase will rebase this PR
    • 

  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • 

  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
    • 

  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
    • 

  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
    • 

  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
    • 

  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
    • 

  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    •

@dependabot
chore(deps): bump the pdfding group with 9 updates
638b212 
Bumps the pdfding group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [django](https://github.com/django/django) | `5.2.12` | `5.2.13` |
| [django-allauth](https://github.com/sponsors/pennersr) | `65.15.0` | `65.15.1` |
| [gunicorn](https://github.com/benoitc/gunicorn) | `25.1.0` | `25.3.0` |
| [nh3](https://github.com/messense/nh3) | `0.3.3` | `0.3.4` |
| [pypdfium2](https://github.com/pypdfium2-team/pypdfium2) | `5.6.0` | `5.7.0` |
| [pypdf](https://github.com/py-pdf/pypdf) | `6.9.2` | `6.10.0` |
| [rapidfuzz](https://github.com/rapidfuzz/RapidFuzz) | `3.14.3` | `3.14.5` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.2` | `9.0.3` |
| [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `7.0.0` | `7.1.0` |


Updates `django` from 5.2.12 to 5.2.13
- [Commits](django/django@5.2.12...5.2.13)

Updates `django-allauth` from 65.15.0 to 65.15.1
- [Commits](https://github.com/sponsors/pennersr/commits)

Updates `gunicorn` from 25.1.0 to 25.3.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@25.1.0...25.3.0)

Updates `nh3` from 0.3.3 to 0.3.4
- [Release notes](https://github.com/messense/nh3/releases)
- [Commits](messense/nh3@v0.3.3...v0.3.4)

Updates `pypdfium2` from 5.6.0 to 5.7.0
- [Release notes](https://github.com/pypdfium2-team/pypdfium2/releases)
- [Commits](pypdfium2-team/pypdfium2@5.6.0...5.7.0)

Updates `pypdf` from 6.9.2 to 6.10.0
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.9.2...6.10.0)

Updates `rapidfuzz` from 3.14.3 to 3.14.5
- [Release notes](https://github.com/rapidfuzz/RapidFuzz/releases)
- [Changelog](https://github.com/rapidfuzz/RapidFuzz/blob/main/CHANGELOG.rst)
- [Commits](rapidfuzz/RapidFuzz@v3.14.3...v3.14.5)

Updates `pytest` from 9.0.2 to 9.0.3
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.2...9.0.3)

Updates `pytest-cov` from 7.0.0 to 7.1.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v7.0.0...v7.1.0)
chore(deps): bump alpinejs from 3.15.8 to 3.15.11 in the pdfding group

Bumps the pdfding group with 1 update: [alpinejs](https://github.com/alpinejs/alpine/tree/HEAD/packages/alpinejs).


Updates `alpinejs` from 3.15.8 to 3.15.11
- [Release notes](https://github.com/alpinejs/alpine/releases)
- [Commits](https://github.com/alpinejs/alpine/commits/v3.15.11/packages/alpinejs)
chore(deps): bump node in the pdfding group

Bumps the pdfding group with 1 update: node.


Updates `node` from 22.22.1-bookworm-slim to 22.22.2-bookworm-slim

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pdfding
- dependency-name: django-allauth
  dependency-version: 65.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pdfding
- dependency-name: gunicorn
  dependency-version: 25.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pdfding
- dependency-name: nh3
  dependency-version: 0.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pdfding
- dependency-name: pypdfium2
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pdfding
- dependency-name: pypdf
  dependency-version: 6.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pdfding
- dependency-name: rapidfuzz
  dependency-version: 3.14.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pdfding
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: pdfding
- dependency-name: pytest-cov
  dependency-version: 7.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: pdfding
- dependency-name: alpinejs
  dependency-version: 3.15.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pdfding
- dependency-name: node
  dependency-version: 22.22.2-bookworm-slim
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pdfding
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 12, 2026
@dependabot dependabot Bot requested a review from mrmn2 as a code owner April 12, 2026 00:47
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 12, 2026
@mrmn2 mrmn2 merged commit 638b212 into master Apr 12, 2026
4 checks passed
@mrmn2 mrmn2 deleted the dependabot/pdfding-e637c67930 branch April 12, 2026 00:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mrmn2 mrmn2 Awaiting requested review from mrmn2 mrmn2 is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mrmn2