Version 6.15.0, 2026-08-06

What's new

Security (SEC)

• Improve performance of read_until_whitespace (#3947) by @stefan6419846
• Limit CID width range and width count when loading fonts (#3946) by @stefan6419846
• Limit token length for ToUnicode entries (#3944) by @stefan6419846

Deprecations (DEP)

• Deprecate previously missed inline_images setter as well (#3897) by @stefan6419846

New Features (ENH)

• Add ActualText tag when we produce RTL appearance stream (#3901) by @PJBrs
• Allow keeping original PDF header in non-incremental clone mode (#3918) by @pctablet505
• AppearanceStream: Add support for RTL appearance streams with Arabic characters (#3831) by @PJBrs
• Add actions base class (#3552) by @j-t-1

Bug Fixes (BUG)

• Expand low-bit samples for images without a filter (#3938) by @RavSinghChandan
• Decode low-bit DeviceRGB images as RGB instead of palette (#3929) by @RavSinghChandan
• Correctly handle IndirectObject in FlateDecode.decode DecodeParms (#3937) by @stefan6419846

Documentation (DOC)

• Image and attachment filenames are unsanitized (#3942) by @stefan6419846

Maintenance (MAINT)

• Update charset mappings (#3935) by @stefan6419846

Full Changelog