Version 7.0.0, 2026-11-06

What's new

Security (SEC)

• Make file identifiers non-deterministic (#4366) by @stefan6419846
• Block not strictly increasing offsets in object streams (#4364) by @stefan6419846
• Limit XFA form decoding work (#4363) by @stefan6419846
• Apply image size limits more strictly (#4361) by @stefan6419846

Deprecations (DEP)

• Cleanup deprecations for the next major release (#4306) by @stefan6419846
• Remove support for cryptography<43 (#4304) by @stefan6419846
• Drop support for Python 3.9 (#4292) by @stefan6419846

New Features (ENH)

• Allow setting border color for rectangle annotations (#4297) by @Ak4shh

Performance Improvements (PI)

• Speed up LZW decoding for clear table markers (#4354) by @stefan6419846
• Build right-to-left text runs with a single join (#4344) by @kholdrex
• Read every page label number tree once for all pages (#4321) by @kholdrex
• Decode the PNG Up predictor a row at a time (#4312) by @MartinThoma

Bug Fixes (BUG)

• Fix cloning of objects that require constructor arguments (#4262) by @Ak4shh
• Serialize XMP packets without an XML declaration (#4296) by @Ak4shh

Maintenance (MAINT)

• Generate Symbol and ZapfDingbats encodings from Adobe sources (#4333) by @plenaerts

Full Changelog