github-starred/open-webui
2
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-05-07 03:18:23 -05:00
Code Issues 1.3k Packages Projects Releases 126 Wiki Activity

[PR #21997] [CLOSED] chore(deps): bump pypdf from 6.7.0 to 6.7.4 in /backend #26390

New Issue
Closed
opened 2026-04-20 06:28:13 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-04-20 06:28:13 -05:00
Owner
Copy Link

📋 Pull Request Information

Original PR: https://github.com/open-webui/open-webui/pull/21997
Author: @dependabot[bot]
Created: 3/1/2026
Status: ❌ Closed

Base: dev ← Head: dependabot/pip/backend/dev/pypdf-6.7.4

📝 Commits (1)

  • c23185c chore(deps): bump pypdf from 6.7.0 to 6.7.4 in /backend

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 backend/requirements.txt (+1 -1)

📄 Description

Bumps pypdf from 6.7.0 to 6.7.4.

Release notes

Sourced from pypdf's releases.

Version 6.7.4, 2026-02-27

What's new

Security (SEC)

Robustness (ROB)

Full Changelog

Version 6.7.3, 2026-02-24

What's new

Security (SEC)

Full Changelog

Version 6.7.2, 2026-02-22

What's new

Security (SEC)

Bug Fixes (BUG)

Full Changelog

Version 6.7.1, 2026-02-17

What's new

Security (SEC)

Bug Fixes (BUG)

Robustness (ROB)

Full Changelog

Changelog

Sourced from pypdf's changelog.

Version 6.7.4, 2026-02-27

Security (SEC)

  • Allow limiting output length for RunLengthDecode filter (#3664)

Robustness (ROB)

  • Deal with invalid annotations in extract_links (#3659)

Full Changelog

Version 6.7.3, 2026-02-24

Security (SEC)

  • Use zlib decompression limit when retrieving XFA data (#3658)

Full Changelog

Version 6.7.2, 2026-02-22

Security (SEC)

  • Prevent infinite loop from circular xref /Prev references (#3655)

Bug Fixes (BUG)

  • Fix wrong LUT size error (#3651)
  • Fix handling of page boxes defined on /Pages (#3650)

Full Changelog

Version 6.7.1, 2026-02-17

Security (SEC)

  • Detect cyclic references when accessing TreeObject.children (#3645)
  • Limit size of /ToUnicode entries (#3646)
  • Limit FlateDecode recovery attempts (#3644)

Bug Fixes (BUG)

  • Avoid own object replacement logic in PageObject.replace_contents (#3638)
  • Fix UnboundLocalError when update_page_form_field_values with /Sig (#3634)

Robustness (ROB)

  • Avoid divison by zero when decoding FlateDecode PNG prediction (#3641)

Full Changelog

Commits
  • 1650bc3 REL: 6.7.4
  • f309c60 SEC: Allow limiting output length for RunLengthDecode filter (#3664)
  • 993f052 DEV: Bump actions/upload-artifact from 6 to 7 (#3662)
  • a3c996b DEV: Bump actions/download-artifact from 7 to 8 (#3663)
  • 37de320 ROB: Deal with invalid annotations in extract_links (#3659)
  • 05e6d3c REL: 6.7.3
  • 7a4c824 SEC: Use zlib decompression limit when retrieving XFA data (#3658)
  • 4f1260f REL: 6.7.2
  • 6ef86cb DOC: Sync release process with current status
  • f0a462d SEC: Prevent infinite loop from circular xref /Prev references (#3655)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/open-webui/pull/21997 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 3/1/2026 **Status:** ❌ Closed **Base:** `dev` ← **Head:** `dependabot/pip/backend/dev/pypdf-6.7.4` --- ### 📝 Commits (1) - [`c23185c`](https://github.com/open-webui/open-webui/commit/c23185c08f137b68cb3ac240de2c3892c15ac68a) chore(deps): bump pypdf from 6.7.0 to 6.7.4 in /backend ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `backend/requirements.txt` (+1 -1) </details> ### 📄 Description Bumps [pypdf](https://github.com/py-pdf/pypdf) from 6.7.0 to 6.7.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/py-pdf/pypdf/releases">pypdf's releases</a>.</em></p> <blockquote> <h2>Version 6.7.4, 2026-02-27</h2> <h2>What's new</h2> <h3>Security (SEC)</h3> <ul> <li>Allow limiting output length for RunLengthDecode filter (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3664">#3664</a>) by <a href="https://github.com/stefan6419846"><code>@​stefan6419846</code></a></li> </ul> <h3>Robustness (ROB)</h3> <ul> <li>Deal with invalid annotations in extract_links (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3659">#3659</a>) by <a href="https://github.com/stefan6419846"><code>@​stefan6419846</code></a></li> </ul> <p><a href="https://github.com/py-pdf/pypdf/compare/6.7.3...6.7.4">Full Changelog</a></p> <h2>Version 6.7.3, 2026-02-24</h2> <h2>What's new</h2> <h3>Security (SEC)</h3> <ul> <li>Use zlib decompression limit when retrieving XFA data (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3658">#3658</a>) by <a href="https://github.com/stefan6419846"><code>@​stefan6419846</code></a></li> </ul> <p><a href="https://github.com/py-pdf/pypdf/compare/6.7.2...6.7.3">Full Changelog</a></p> <h2>Version 6.7.2, 2026-02-22</h2> <h2>What's new</h2> <h3>Security (SEC)</h3> <ul> <li>Prevent infinite loop from circular xref /Prev references (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3655">#3655</a>) by <a href="https://github.com/rampageservices"><code>@​rampageservices</code></a></li> </ul> <h3>Bug Fixes (BUG)</h3> <ul> <li>Fix wrong LUT size error (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3651">#3651</a>) by <a href="https://github.com/stefan6419846"><code>@​stefan6419846</code></a></li> <li>Fix handling of page boxes defined on <code>/Pages</code> (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3650">#3650</a>) by <a href="https://github.com/stefan6419846"><code>@​stefan6419846</code></a></li> </ul> <p><a href="https://github.com/py-pdf/pypdf/compare/6.7.1...6.7.2">Full Changelog</a></p> <h2>Version 6.7.1, 2026-02-17</h2> <h2>What's new</h2> <h3>Security (SEC)</h3> <ul> <li>Detect cyclic references when accessing TreeObject.children (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3645">#3645</a>) by <a href="https://github.com/stefan6419846"><code>@​stefan6419846</code></a></li> <li>Limit size of <code>/ToUnicode</code> entries (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3646">#3646</a>) by <a href="https://github.com/stefan6419846"><code>@​stefan6419846</code></a></li> <li>Limit FlateDecode recovery attempts (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3644">#3644</a>) by <a href="https://github.com/stefan6419846"><code>@​stefan6419846</code></a></li> </ul> <h3>Bug Fixes (BUG)</h3> <ul> <li>Avoid own object replacement logic in <code>PageObject.replace_contents</code> (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3638">#3638</a>) by <a href="https://github.com/stefan6419846"><code>@​stefan6419846</code></a></li> <li>Fix UnboundLocalError when update_page_form_field_values with /Sig (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3634">#3634</a>) by <a href="https://github.com/John-Sharp"><code>@​John-Sharp</code></a></li> </ul> <h3>Robustness (ROB)</h3> <ul> <li>Avoid divison by zero when decoding FlateDecode PNG prediction (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3641">#3641</a>) by <a href="https://github.com/stefan6419846"><code>@​stefan6419846</code></a></li> </ul> <p><a href="https://github.com/py-pdf/pypdf/compare/6.7.0...6.7.1">Full Changelog</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md">pypdf's changelog</a>.</em></p> <blockquote> <h2>Version 6.7.4, 2026-02-27</h2> <h3>Security (SEC)</h3> <ul> <li>Allow limiting output length for RunLengthDecode filter (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3664">#3664</a>)</li> </ul> <h3>Robustness (ROB)</h3> <ul> <li>Deal with invalid annotations in extract_links (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3659">#3659</a>)</li> </ul> <p><a href="https://github.com/py-pdf/pypdf/compare/6.7.3...6.7.4">Full Changelog</a></p> <h2>Version 6.7.3, 2026-02-24</h2> <h3>Security (SEC)</h3> <ul> <li>Use zlib decompression limit when retrieving XFA data (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3658">#3658</a>)</li> </ul> <p><a href="https://github.com/py-pdf/pypdf/compare/6.7.2...6.7.3">Full Changelog</a></p> <h2>Version 6.7.2, 2026-02-22</h2> <h3>Security (SEC)</h3> <ul> <li>Prevent infinite loop from circular xref /Prev references (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3655">#3655</a>)</li> </ul> <h3>Bug Fixes (BUG)</h3> <ul> <li>Fix wrong LUT size error (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3651">#3651</a>)</li> <li>Fix handling of page boxes defined on <code>/Pages</code> (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3650">#3650</a>)</li> </ul> <p><a href="https://github.com/py-pdf/pypdf/compare/6.7.1...6.7.2">Full Changelog</a></p> <h2>Version 6.7.1, 2026-02-17</h2> <h3>Security (SEC)</h3> <ul> <li>Detect cyclic references when accessing TreeObject.children (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3645">#3645</a>)</li> <li>Limit size of <code>/ToUnicode</code> entries (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3646">#3646</a>)</li> <li>Limit FlateDecode recovery attempts (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3644">#3644</a>)</li> </ul> <h3>Bug Fixes (BUG)</h3> <ul> <li>Avoid own object replacement logic in <code>PageObject.replace_contents</code> (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3638">#3638</a>)</li> <li>Fix UnboundLocalError when update_page_form_field_values with /Sig (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3634">#3634</a>)</li> </ul> <h3>Robustness (ROB)</h3> <ul> <li>Avoid divison by zero when decoding FlateDecode PNG prediction (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3641">#3641</a>)</li> </ul> <p><a href="https://github.com/py-pdf/pypdf/compare/6.7.0...6.7.1">Full Changelog</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/py-pdf/pypdf/commit/1650bc31e807d8091464c228b7eabd6fef4c6c2a"><code>1650bc3</code></a> REL: 6.7.4</li> <li><a href="https://github.com/py-pdf/pypdf/commit/f309c6003746414dc7b5048c19e6d879ff2dc858"><code>f309c60</code></a> SEC: Allow limiting output length for RunLengthDecode filter (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3664">#3664</a>)</li> <li><a href="https://github.com/py-pdf/pypdf/commit/993f052748ad7ce0a16d738260f43aa0a9c06872"><code>993f052</code></a> DEV: Bump actions/upload-artifact from 6 to 7 (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3662">#3662</a>)</li> <li><a href="https://github.com/py-pdf/pypdf/commit/a3c996bffcb03a49e790e540e9229c8d75ff3da5"><code>a3c996b</code></a> DEV: Bump actions/download-artifact from 7 to 8 (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3663">#3663</a>)</li> <li><a href="https://github.com/py-pdf/pypdf/commit/37de32022e76018a48523795669e95432ba6191e"><code>37de320</code></a> ROB: Deal with invalid annotations in extract_links (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3659">#3659</a>)</li> <li><a href="https://github.com/py-pdf/pypdf/commit/05e6d3c03deaec6b16b53825465537ac9e7a1a14"><code>05e6d3c</code></a> REL: 6.7.3</li> <li><a href="https://github.com/py-pdf/pypdf/commit/7a4c8246ed48d9d328fb596942271da47b6d109c"><code>7a4c824</code></a> SEC: Use zlib decompression limit when retrieving XFA data (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3658">#3658</a>)</li> <li><a href="https://github.com/py-pdf/pypdf/commit/4f1260f1d0c0c7c307f03e88257f8eeb229d5954"><code>4f1260f</code></a> REL: 6.7.2</li> <li><a href="https://github.com/py-pdf/pypdf/commit/6ef86cbb3c6e7d0afc146fba92f0a90351bfcdbc"><code>6ef86cb</code></a> DOC: Sync release process with current status</li> <li><a href="https://github.com/py-pdf/pypdf/commit/f0a462d36971cf077d74492a348d0d06fd60ea4d"><code>f0a462d</code></a> SEC: Prevent infinite loop from circular xref /Prev references (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3655">#3655</a>)</li> <li>Additional commits viewable in <a href="https://github.com/py-pdf/pypdf/compare/6.7.0...6.7.4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypdf&package-manager=pip&previous-version=6.7.0&new-version=6.7.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-20 06:28:13 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
confirmed
confirmed issue
core
documentation
enhancement
good first issue
help wanted
non-core
pull-request
Mirrored from GitHub Pull Request
 python
question
testing wanted
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#26390
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?