Version 6.21.3, 2026-10-27

What's new

Security (SEC)

• Use the validated page count after decrypting a document (#4270) by @stefan6419846
• Limit total number of cross-reference stream entries (#4269) by @stefan6419846
• Avoid excessive error messages (#4265) by @stefan6419846

Performance Improvements (PI)

• Read flat page label number trees once for all pages (#4251) by @kholdrex
• Collect the named destinations once when resolving links (#4249) by @MartinThoma
• Avoid scanning all objects in get_outline_root (#4245) by @kholdrex

Bug Fixes (BUG)

• Resolve indirect widths in CID font /W arrays (#4267) by @tim-hilde

Documentation (DOC)

• Block incremental writes of encrypted documents (#4246) by @metsw24-max

Developer Experience (DEV)

• Update to PyPy 3.12 and pinned requirements (#4244) by @stefan6419846

Maintenance (MAINT)

• Revert: Reject unsupported key lengths in the /Encrypt dictionary by @stefan6419846

Full Changelog