Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/open-webui/open-webui/pull/18818
**Author:** [@dependabot[bot]](https://github.com/apps/dependabot)
**Created:** 11/1/2025
**Status:** ❌ Closed
**Base:** `dev` ← **Head:** `dependabot/pip/backend/dev/pypdf-6.1.3`
---
### 📝 Commits (1)
- [`00f775a`](https://github.com/open-webui/open-webui/commit/00f775aad8afa76d98c2bbc56b1aa96aa8d2aa96) chore(deps): bump pypdf from 6.0.0 to 6.1.3 in /backend
### 📊 Changes
**1 file changed** (+1 additions, -1 deletions)
<details>
<summary>View changed files</summary>
📝 `backend/requirements.txt` (+1 -1)
</details>
### 📄 Description
Bumps [pypdf](https://github.com/py-pdf/pypdf) from 6.0.0 to 6.1.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/py-pdf/pypdf/releases">pypdf's releases</a>.</em></p>
<blockquote>
<h2>Version 6.1.3, 2025-10-22</h2>
<h2>What's new</h2>
<h3>Security (SEC)</h3>
<ul>
<li>Allow limiting size of LZWDecode streams (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3502">#3502</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
<li>Avoid infinite loop when reading broken DCT-based inline images (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3501">#3501</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
</ul>
<h3>Bug Fixes (BUG)</h3>
<ul>
<li>PageObject.scale() scales media box incorrectly (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3489">#3489</a>) by <a href="https://github.com/Nid01"><code>@Nid01</code></a></li>
</ul>
<h3>Robustness (ROB)</h3>
<ul>
<li>Fail with explicit exception when image mode is an empty array (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3500">#3500</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
</ul>
<p><a href="https://github.com/py-pdf/pypdf/compare/6.1.2...6.1.3">Full Changelog</a></p>
<h2>Version 6.1.2, 2025-10-19</h2>
<h2>What's new</h2>
<h3>Bug Fixes (BUG)</h3>
<ul>
<li>Fix handling of zero-length StreamObject (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3485">#3485</a>) by <a href="https://github.com/Likend"><code>@Likend</code></a></li>
</ul>
<h3>Robustness (ROB)</h3>
<ul>
<li>Deal with wrong size for incremental PDF files (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3495">#3495</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
<li>Improve handling for malformed cross-reference tables (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3483">#3483</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
</ul>
<h3>Developer Experience (DEV)</h3>
<ul>
<li>Use released Python 3.14 by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
<li>Use Mapping instead of dict in type hint of update_page_form_field_values (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3490">#3490</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
</ul>
<p><a href="https://github.com/py-pdf/pypdf/compare/6.1.1...6.1.2">Full Changelog</a></p>
<h2>Version 6.1.1, 2025-09-28</h2>
<h2>What's new</h2>
<h3>Bug Fixes (BUG)</h3>
<ul>
<li>Insert new embedded files in a sorted manner (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3477">#3477</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
<li>Fix name tree handling for embedded files with Kids-based inputs (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3475">#3475</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
<li>Make embedding files not break PDF/A-3 compliance (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3472">#3472</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
</ul>
<h3>Documentation (DOC)</h3>
<ul>
<li>Document AFRelationship handling for PDF/A and provide constants (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3478">#3478</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
</ul>
<p><a href="https://github.com/py-pdf/pypdf/compare/6.1.0...6.1.1">Full Changelog</a></p>
<h2>Version 6.1.0, 2025-09-21</h2>
<h2>What's new</h2>
<h3>New Features (ENH)</h3>
<ul>
<li>Enhance XMP metadata handling with creation and setter methods (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3410">#3410</a>) by <a href="https://github.com/Arya-A-Nair"><code>@Arya-A-Nair</code></a></li>
<li>Add all font metrics for base 14 Type 1 PDF fonts (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3363">#3363</a>) by <a href="https://github.com/PJBrs"><code>@PJBrs</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md">pypdf's changelog</a>.</em></p>
<blockquote>
<h2>Version 6.1.3, 2025-10-22</h2>
<h3>Security (SEC)</h3>
<ul>
<li>Allow limiting size of LZWDecode streams (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3502">#3502</a>)</li>
<li>Avoid infinite loop when reading broken DCT-based inline images (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3501">#3501</a>)</li>
</ul>
<h3>Bug Fixes (BUG)</h3>
<ul>
<li>PageObject.scale() scales media box incorrectly (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3489">#3489</a>)</li>
</ul>
<h3>Robustness (ROB)</h3>
<ul>
<li>Fail with explicit exception when image mode is an empty array (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3500">#3500</a>)</li>
</ul>
<p><a href="https://github.com/py-pdf/pypdf/compare/6.1.2...6.1.3">Full Changelog</a></p>
<h2>Version 6.1.2, 2025-10-19</h2>
<h3>Bug Fixes (BUG)</h3>
<ul>
<li>Fix handling of zero-length StreamObject (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3485">#3485</a>)</li>
</ul>
<h3>Robustness (ROB)</h3>
<ul>
<li>Deal with wrong size for incremental PDF files (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3495">#3495</a>)</li>
<li>Improve handling for malformed cross-reference tables (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3483">#3483</a>)</li>
</ul>
<h3>Developer Experience (DEV)</h3>
<ul>
<li>Use released Python 3.14</li>
<li>Use Mapping instead of dict in type hint of update_page_form_field_values (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3490">#3490</a>)</li>
</ul>
<p><a href="https://github.com/py-pdf/pypdf/compare/6.1.1...6.1.2">Full Changelog</a></p>
<h2>Version 6.1.1, 2025-09-28</h2>
<h3>Bug Fixes (BUG)</h3>
<ul>
<li>Insert new embedded files in a sorted manner (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3477">#3477</a>)</li>
<li>Fix name tree handling for embedded files with Kids-based inputs (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3475">#3475</a>)</li>
<li>Make embedding files not break PDF/A-3 compliance (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3472">#3472</a>)</li>
</ul>
<h3>Documentation (DOC)</h3>
<ul>
<li>Document AFRelationship handling for PDF/A and provide constants (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3478">#3478</a>)</li>
</ul>
<p><a href="https://github.com/py-pdf/pypdf/compare/6.1.0...6.1.1">Full Changelog</a></p>
<h2>Version 6.1.0, 2025-09-21</h2>
<h3>New Features (ENH)</h3>
<ul>
<li>Enhance XMP metadata handling with creation and setter methods (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3410">#3410</a>)</li>
<li>Add all font metrics for base 14 Type 1 PDF fonts (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3363">#3363</a>)</li>
<li>Allow deleting embedded files (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3461">#3461</a>)</li>
<li>Add support for Python in FIPS mode for document identifier (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3438">#3438</a>)</li>
</ul>
<h3>Bug Fixes (BUG)</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/py-pdf/pypdf/commit/4a613f3fbe7af8ef65bbae740ceabe35310db4ee"><code>4a613f3</code></a> REL: 6.1.3</li>
<li><a href="https://github.com/py-pdf/pypdf/commit/e51d07807ffcdaf18077b9486dadb3dc05b368da"><code>e51d078</code></a> SEC: Allow limiting size of LZWDecode streams (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3502">#3502</a>)</li>
<li><a href="https://github.com/py-pdf/pypdf/commit/f2864d6dd9bac7cecd3f4f54308b25ebbfa178f8"><code>f2864d6</code></a> SEC: Avoid infinite loop when reading broken DCT-based inline images (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3501">#3501</a>)</li>
<li><a href="https://github.com/py-pdf/pypdf/commit/b751ca2d3080dc24fa50393a0af5129643b3b6ce"><code>b751ca2</code></a> ROB: Fail with explicit exception when image mode is an empty array (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3500">#3500</a>)</li>
<li><a href="https://github.com/py-pdf/pypdf/commit/e13a1e0d1b01454d68973662adbeecc08b623c22"><code>e13a1e0</code></a> BUG: PageObject.scale() scales media box incorrectly (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3489">#3489</a>)</li>
<li><a href="https://github.com/py-pdf/pypdf/commit/0859b3579f5a0bd7a478c5405fb876a989e3b386"><code>0859b35</code></a> REL: 6.1.2</li>
<li><a href="https://github.com/py-pdf/pypdf/commit/623a700342c0a7506fc88b5d112d25f28593787b"><code>623a700</code></a> BUG: Fix handling of zero-length StreamObject (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3485">#3485</a>)</li>
<li><a href="https://github.com/py-pdf/pypdf/commit/16c4c443d062efbe4ac04cd8a2ee961b289743e7"><code>16c4c44</code></a> ROB: Deal with wrong size for incremental PDF files (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3495">#3495</a>)</li>
<li><a href="https://github.com/py-pdf/pypdf/commit/54c0dd71f323485f53ed47154c251899ac6b0c92"><code>54c0dd7</code></a> DEV: Use released Python 3.14</li>
<li><a href="https://github.com/py-pdf/pypdf/commit/9fad9ff0f2ded6c0792953547f968bb872161737"><code>9fad9ff</code></a> DEV: Use Mapping instead of dict in type hint of update_page_form_field_value...</li>
<li>Additional commits viewable in <a href="https://github.com/py-pdf/pypdf/compare/6.0.0...6.1.3">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/open-webui/open-webui/pull/18818
Author: @dependabot[bot]
Created: 11/1/2025
Status: ❌ Closed
Base:
dev← Head:dependabot/pip/backend/dev/pypdf-6.1.3📝 Commits (1)
00f775achore(deps): bump pypdf from 6.0.0 to 6.1.3 in /backend📊 Changes
1 file changed (+1 additions, -1 deletions)
View changed files
📝
backend/requirements.txt(+1 -1)📄 Description
Bumps pypdf from 6.0.0 to 6.1.3.
Release notes
Sourced from pypdf's releases.
... (truncated)
Changelog
Sourced from pypdf's changelog.
... (truncated)
Commits
4a613f3REL: 6.1.3e51d078SEC: Allow limiting size of LZWDecode streams (#3502)f2864d6SEC: Avoid infinite loop when reading broken DCT-based inline images (#3501)b751ca2ROB: Fail with explicit exception when image mode is an empty array (#3500)e13a1e0BUG: PageObject.scale() scales media box incorrectly (#3489)0859b35REL: 6.1.2623a700BUG: Fix handling of zero-length StreamObject (#3485)16c4c44ROB: Deal with wrong size for incremental PDF files (#3495)54c0dd7DEV: Use released Python 3.149fad9ffDEV: Use Mapping instead of dict in type hint of update_page_form_field_value...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.