Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/open-webui/open-webui/pull/22050
**Author:** [@dependabot[bot]](https://github.com/apps/dependabot)
**Created:** 3/1/2026
**Status:** ❌ Closed
**Base:** `dev` ← **Head:** `dependabot/uv/dev/pypdf-6.7.4`
---
### 📝 Commits (1)
- [`430b473`](https://github.com/open-webui/open-webui/commit/430b4737b7685780adb98fef82042fbc6cb4e50d) chore(deps): bump pypdf from 6.7.0 to 6.7.4
### 📊 Changes
**3 files changed** (+1364 additions, -1009 deletions)
<details>
<summary>View changed files</summary>
📝 `backend/requirements.txt` (+1 -1)
📝 `pyproject.toml` (+1 -1)
📝 `uv.lock` (+1362 -1007)
</details>
### 📄 Description
Bumps [pypdf](https://github.com/py-pdf/pypdf) from 6.7.0 to 6.7.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/py-pdf/pypdf/releases">pypdf's releases</a>.</em></p>
<blockquote>
<h2>Version 6.7.4, 2026-02-27</h2>
<h2>What's new</h2>
<h3>Security (SEC)</h3>
<ul>
<li>Allow limiting output length for RunLengthDecode filter (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3664">#3664</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
</ul>
<h3>Robustness (ROB)</h3>
<ul>
<li>Deal with invalid annotations in extract_links (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3659">#3659</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
</ul>
<p><a href="https://github.com/py-pdf/pypdf/compare/6.7.3...6.7.4">Full Changelog</a></p>
<h2>Version 6.7.3, 2026-02-24</h2>
<h2>What's new</h2>
<h3>Security (SEC)</h3>
<ul>
<li>Use zlib decompression limit when retrieving XFA data (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3658">#3658</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
</ul>
<p><a href="https://github.com/py-pdf/pypdf/compare/6.7.2...6.7.3">Full Changelog</a></p>
<h2>Version 6.7.2, 2026-02-22</h2>
<h2>What's new</h2>
<h3>Security (SEC)</h3>
<ul>
<li>Prevent infinite loop from circular xref /Prev references (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3655">#3655</a>) by <a href="https://github.com/rampageservices"><code>@rampageservices</code></a></li>
</ul>
<h3>Bug Fixes (BUG)</h3>
<ul>
<li>Fix wrong LUT size error (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3651">#3651</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
<li>Fix handling of page boxes defined on <code>/Pages</code> (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3650">#3650</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
</ul>
<p><a href="https://github.com/py-pdf/pypdf/compare/6.7.1...6.7.2">Full Changelog</a></p>
<h2>Version 6.7.1, 2026-02-17</h2>
<h2>What's new</h2>
<h3>Security (SEC)</h3>
<ul>
<li>Detect cyclic references when accessing TreeObject.children (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3645">#3645</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
<li>Limit size of <code>/ToUnicode</code> entries (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3646">#3646</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
<li>Limit FlateDecode recovery attempts (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3644">#3644</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
</ul>
<h3>Bug Fixes (BUG)</h3>
<ul>
<li>Avoid own object replacement logic in <code>PageObject.replace_contents</code> (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3638">#3638</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
<li>Fix UnboundLocalError when update_page_form_field_values with /Sig (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3634">#3634</a>) by <a href="https://github.com/John-Sharp"><code>@John-Sharp</code></a></li>
</ul>
<h3>Robustness (ROB)</h3>
<ul>
<li>Avoid divison by zero when decoding FlateDecode PNG prediction (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3641">#3641</a>) by <a href="https://github.com/stefan6419846"><code>@stefan6419846</code></a></li>
</ul>
<p><a href="https://github.com/py-pdf/pypdf/compare/6.7.0...6.7.1">Full Changelog</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md">pypdf's changelog</a>.</em></p>
<blockquote>
<h2>Version 6.7.4, 2026-02-27</h2>
<h3>Security (SEC)</h3>
<ul>
<li>Allow limiting output length for RunLengthDecode filter (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3664">#3664</a>)</li>
</ul>
<h3>Robustness (ROB)</h3>
<ul>
<li>Deal with invalid annotations in extract_links (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3659">#3659</a>)</li>
</ul>
<p><a href="https://github.com/py-pdf/pypdf/compare/6.7.3...6.7.4">Full Changelog</a></p>
<h2>Version 6.7.3, 2026-02-24</h2>
<h3>Security (SEC)</h3>
<ul>
<li>Use zlib decompression limit when retrieving XFA data (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3658">#3658</a>)</li>
</ul>
<p><a href="https://github.com/py-pdf/pypdf/compare/6.7.2...6.7.3">Full Changelog</a></p>
<h2>Version 6.7.2, 2026-02-22</h2>
<h3>Security (SEC)</h3>
<ul>
<li>Prevent infinite loop from circular xref /Prev references (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3655">#3655</a>)</li>
</ul>
<h3>Bug Fixes (BUG)</h3>
<ul>
<li>Fix wrong LUT size error (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3651">#3651</a>)</li>
<li>Fix handling of page boxes defined on <code>/Pages</code> (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3650">#3650</a>)</li>
</ul>
<p><a href="https://github.com/py-pdf/pypdf/compare/6.7.1...6.7.2">Full Changelog</a></p>
<h2>Version 6.7.1, 2026-02-17</h2>
<h3>Security (SEC)</h3>
<ul>
<li>Detect cyclic references when accessing TreeObject.children (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3645">#3645</a>)</li>
<li>Limit size of <code>/ToUnicode</code> entries (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3646">#3646</a>)</li>
<li>Limit FlateDecode recovery attempts (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3644">#3644</a>)</li>
</ul>
<h3>Bug Fixes (BUG)</h3>
<ul>
<li>Avoid own object replacement logic in <code>PageObject.replace_contents</code> (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3638">#3638</a>)</li>
<li>Fix UnboundLocalError when update_page_form_field_values with /Sig (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3634">#3634</a>)</li>
</ul>
<h3>Robustness (ROB)</h3>
<ul>
<li>Avoid divison by zero when decoding FlateDecode PNG prediction (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3641">#3641</a>)</li>
</ul>
<p><a href="https://github.com/py-pdf/pypdf/compare/6.7.0...6.7.1">Full Changelog</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/py-pdf/pypdf/commit/1650bc31e807d8091464c228b7eabd6fef4c6c2a"><code>1650bc3</code></a> REL: 6.7.4</li>
<li><a href="https://github.com/py-pdf/pypdf/commit/f309c6003746414dc7b5048c19e6d879ff2dc858"><code>f309c60</code></a> SEC: Allow limiting output length for RunLengthDecode filter (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3664">#3664</a>)</li>
<li><a href="https://github.com/py-pdf/pypdf/commit/993f052748ad7ce0a16d738260f43aa0a9c06872"><code>993f052</code></a> DEV: Bump actions/upload-artifact from 6 to 7 (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3662">#3662</a>)</li>
<li><a href="https://github.com/py-pdf/pypdf/commit/a3c996bffcb03a49e790e540e9229c8d75ff3da5"><code>a3c996b</code></a> DEV: Bump actions/download-artifact from 7 to 8 (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3663">#3663</a>)</li>
<li><a href="https://github.com/py-pdf/pypdf/commit/37de32022e76018a48523795669e95432ba6191e"><code>37de320</code></a> ROB: Deal with invalid annotations in extract_links (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3659">#3659</a>)</li>
<li><a href="https://github.com/py-pdf/pypdf/commit/05e6d3c03deaec6b16b53825465537ac9e7a1a14"><code>05e6d3c</code></a> REL: 6.7.3</li>
<li><a href="https://github.com/py-pdf/pypdf/commit/7a4c8246ed48d9d328fb596942271da47b6d109c"><code>7a4c824</code></a> SEC: Use zlib decompression limit when retrieving XFA data (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3658">#3658</a>)</li>
<li><a href="https://github.com/py-pdf/pypdf/commit/4f1260f1d0c0c7c307f03e88257f8eeb229d5954"><code>4f1260f</code></a> REL: 6.7.2</li>
<li><a href="https://github.com/py-pdf/pypdf/commit/6ef86cbb3c6e7d0afc146fba92f0a90351bfcdbc"><code>6ef86cb</code></a> DOC: Sync release process with current status</li>
<li><a href="https://github.com/py-pdf/pypdf/commit/f0a462d36971cf077d74492a348d0d06fd60ea4d"><code>f0a462d</code></a> SEC: Prevent infinite loop from circular xref /Prev references (<a href="https://redirect.github.com/py-pdf/pypdf/issues/3655">#3655</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/py-pdf/pypdf/compare/6.7.0...6.7.4">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/open-webui/open-webui/pull/22050
Author: @dependabot[bot]
Created: 3/1/2026
Status: ❌ Closed
Base:
dev← Head:dependabot/uv/dev/pypdf-6.7.4📝 Commits (1)
430b473chore(deps): bump pypdf from 6.7.0 to 6.7.4📊 Changes
3 files changed (+1364 additions, -1009 deletions)
View changed files
📝
backend/requirements.txt(+1 -1)📝
pyproject.toml(+1 -1)📝
uv.lock(+1362 -1007)📄 Description
Bumps pypdf from 6.7.0 to 6.7.4.
Release notes
Sourced from pypdf's releases.
Changelog
Sourced from pypdf's changelog.
Commits
1650bc3REL: 6.7.4f309c60SEC: Allow limiting output length for RunLengthDecode filter (#3664)993f052DEV: Bump actions/upload-artifact from 6 to 7 (#3662)a3c996bDEV: Bump actions/download-artifact from 7 to 8 (#3663)37de320ROB: Deal with invalid annotations in extract_links (#3659)05e6d3cREL: 6.7.37a4c824SEC: Use zlib decompression limit when retrieving XFA data (#3658)4f1260fREL: 6.7.26ef86cbDOC: Sync release process with current statusf0a462dSEC: Prevent infinite loop from circular xref /Prev references (#3655)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.