Skip to content

chore(deps): bump lopdf from 0.42.0 to 0.44.0 - #10854

Merged
DOsinga merged 1 commit into
mainfrom
dependabot/cargo/lopdf-0.44.0
Aug 11, 2026
Merged

chore(deps): bump lopdf from 0.42.0 to 0.44.0#10854
DOsinga merged 1 commit into
mainfrom
dependabot/cargo/lopdf-0.44.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor

Bumps lopdf from 0.42.0 to 0.44.0.

Release notes

Sourced from lopdf's releases.

v0.44.0

What's Changed

New Contributors

Full Changelog: J-F-Liu/lopdf@v0.43.0...v0.44.0

v0.43.0

What's Changed

New Contributors

Full Changelog: J-F-Liu/lopdf@v0.42.0...v0.43.0

Changelog

Sourced from lopdf's changelog.

v0.44.0 (2026-07-10)

Add

  • Add back assets/test.pdf

Feat

  • Support incremental save of encrypted documents (#522)
  • Bound text extraction against decompression bombs
  • Bound load-time decompression via LoadOptions.max_decompressed_size
  • Bound stream decompression to guard against bombs
  • Make ttf-parser optional behind font_embedding feature

Fix

  • Reject incremental save of encrypted documents (#521)
  • Fix Document::get_toc() dropping entries when outline titles repeat (#517)
  • Add feature flag to font test
  • Only use criterion for non-wasm tests/benches

Move

  • Move resource files in tests to assets

Refactor

  • Make Document::get_page_content return Vec<u8> since it cannot fail

Test

  • Add tests demonstrating unbounded stream decompression

CI

  • CI skip performance test
  • Actually pass --no-default-features in the no-default-features matrix cell (#510)

v0.43.0 (2026-06-25)

Feat

  • Report encryption status in PdfMetadata

Commits
  • 8c454dd release v0.44.0 (#524)
  • 27a896b feat(writer): support incremental save of encrypted documents (#522)
  • 54742e0 fix(writer): reject incremental save of encrypted documents (#521)
  • 29435ab Fix Document::get_toc() dropping entries when outline titles repeat (#517)
  • 05072cb feat: bound text extraction against decompression bombs
  • 54018f6 feat: bound load-time decompression via LoadOptions.max_decompressed_size
  • abe5ad5 feat(object): bound stream decompression to guard against bombs
  • 89a6ef4 test: add tests demonstrating unbounded stream decompression
  • 78717ec CI skip performance test
  • 1e89efa refactor(document): make Document::get_page_content return Vec\<u8> since ...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 31, 2026
@github-actions
github-actions Bot enabled auto-merge July 31, 2026 17:58

DOsinga commented Aug 11, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

Bumps [lopdf](https://github.com/J-F-Liu/lopdf) from 0.42.0 to 0.44.0.
- [Release notes](https://github.com/J-F-Liu/lopdf/releases)
- [Changelog](https://github.com/J-F-Liu/lopdf/blob/main/CHANGELOG.md)
- [Commits](J-F-Liu/lopdf@v0.42.0...v0.44.0)

---
updated-dependencies:
- dependency-name: lopdf
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/lopdf-0.44.0 branch from 5af07d1 to ed068fc Compare August 11, 2026 08:45
@DOsinga
DOsinga merged commit ca65f8c into main Aug 11, 2026
25 checks passed
@DOsinga
DOsinga deleted the dependabot/cargo/lopdf-0.44.0 branch August 11, 2026 13:26
michaelneale added a commit that referenced this pull request Aug 11, 2026
* origin/main:
  chore(release): bump version to 1.46.0 (minor) (#10920)
  fix: secure Copilot API endpoint transport (#11129)
  fix(providers): map kimi_code provider name and pass correct provider to create_request (#11130)
  fix(cli): honor provider overrides on session resume (#10810)
  fix: enforce review check tool policy (#11128)
  chore(deps-dev): bump vite from 7.3.1 to 8.2.1 in /ui (#10977)
  chore(deps): bump jsonschema from 0.46.10 to 0.49.4 (#10857)
  chore(deps): bump sigstore-verify from 0.10.0 to 0.11.0 (#10856)
  chore(deps): bump lopdf from 0.42.0 to 0.44.0 (#10854)
  chore(deps): bump ctor from 0.2.9 to 0.6.3 (#10852)
  chore(deps-dev): bump @types/node from 20.19.37 to 26.1.2 in /ui (#10979)
  chore(deps-dev): bump @electron/fuses from 1.8.0 to 2.1.3 in /ui (#10978)
  chore(deps-dev): bump electron from 41.10.3 to 43.3.0 in /ui (#10974)
  fix(permissions): match extension owners exactly (#10455)
  fix: normalize critical command patterns (#10989)
  fix: keep LiteLLM default local (#10996)
  fix: encode GCP Vertex URL path segments (#10998)
  fix: make Open Plugins installs transactional (#10999)

# Conflicts:
#	Cargo.lock
#	ui/desktop/package.json
#	ui/pnpm-lock.yaml
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant