rbrooks/Quest-Board
Watch
1
0
Fork
You've already forked Quest-Board
 0
Code Issues 58 Pull requests 7 Projects Releases 76 Packages Wiki Activity Actions

chore(deps): update dependency pypdf to v6.21.4 [security] #1297

Merged
renovate-bot merged 1 commit from renovate/pypi-pypdf-vulnerability into main 2026-10-31 01:21:00 +00:00
Conversation 0 Commits 1 Files changed 1 +1 -1
renovate-bot commented 2026-10-31 00:39:29 +00:00
Contributor
Copy link

This PR contains the following updates:

Package Change Age Confidence
pypdf (changelog) ==6.21.2 → ==6.21.4 age confidence

pypdf has possible long runtimes when retrieving page labels

CVE-2026-119206 / GHSA-42gh-23hr-vphw

More information

Details

Impact

An attacker who uses this vulnerability can craft a PDF which leads to large runtimes. This requires retrieving the page labels of a file.

Patches

This has been fixed in pypdf==6.21.3.

Workarounds

If you cannot upgrade yet, consider applying the changes from PR #​4251.

Severity

  • CVSS Score: 7.1 / 10 (High)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

pypdf has possible large memory usage for exceptions in strict mode

CVE-2026-119207 / GHSA-4vqv-7265-gm2w

More information

Details

Impact

An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading an invalid dictionary.

Patches

This has been fixed in pypdf==6.21.3.

Workarounds

If you cannot upgrade yet, consider applying the changes from PR #​4265.

Severity

  • CVSS Score: 7.1 / 10 (High)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

pypdf has possible long runtimes/large memory usage for encrypted PDF files

CVE-2026-119208 / GHSA-62m5-6wh8-28x7

More information

Details

Impact

An attacker who uses this vulnerability can craft a PDF which leads to large runtimes/memory usage. This requires accessing the page count of an encrypted PDF file, which itself declares a wrong /Count value.

Patches

This has been fixed in pypdf==6.21.3.

Workarounds

If you cannot upgrade yet, consider applying the changes from PR #​4270.

Severity

  • CVSS Score: 7.1 / 10 (High)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

pypdf has possible large memory usage when parsing cross-reference streams

CVE-2026-119209 / GHSA-x3rh-gjgm-fmqc

More information

Details

Impact

An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires opening a file with cross-reference streams.

Patches

This has been fixed in pypdf==6.21.3.

Workarounds

If you cannot upgrade yet, consider applying the changes from PR #​4269.

Severity

  • CVSS Score: 7.1 / 10 (High)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search

CVE-2026-119203 / GHSA-5849-834g-hvw5

More information

Details

Impact

An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires opening an incomplete file without a trailer.

Patches

This has been fixed in pypdf==6.21.4.

Workarounds

If you cannot upgrade yet, consider applying the changes from PR #​4289.

Severity

  • CVSS Score: 7.1 / 10 (High)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

pypdf has possible large memory usage when parsing page tree

CVE-2026-119204 / GHSA-cggf-277g-3q54

More information

Details

Impact

An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the page tree with many shared resources.

Patches

This has been fixed in pypdf==6.21.4.

Workarounds

If you cannot upgrade yet, consider applying the changes from PR #​4290.

Severity

  • CVSS Score: 7.1 / 10 (High)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

pypdf has possible infinite loop when cloning dictionaries

CVE-2026-119205 / GHSA-mfr5-77xh-9j7h

More information

Details

Impact

An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires cloning/duplicating a DictionaryObject.

Patches

This has been fixed in pypdf==6.21.4.

Workarounds

If you cannot upgrade yet, consider applying the changes from PR #​4288.

Severity

  • CVSS Score: 7.1 / 10 (High)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

Release Notes

py-pdf/pypdf (pypdf)

v6.21.4

Compare Source

Security (SEC)
  • Limit the number of copied page attributes during flattening (#​4290)
  • Detect EOF when reading standard xref table trailer (#​4289)
  • Fix loop detection when cloning DictionaryObject (#​4288)
Documentation (DOC)
  • Exclude performance issues from security reports (#​4280)

Full Changelog

v6.21.3

Compare Source

Security (SEC)
  • Limit the number of copied page attributes during flattening (#​4290)
  • Detect EOF when reading standard xref table trailer (#​4289)
  • Fix loop detection when cloning DictionaryObject (#​4288)
Documentation (DOC)
  • Exclude performance issues from security reports (#​4280)

Full Changelog

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [pypdf](https://github.com/py-pdf/pypdf) ([changelog](https://pypdf.readthedocs.io/en/latest/meta/CHANGELOG.html)) | `==6.21.2` → `==6.21.4` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/pypdf/6.21.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/pypdf/6.21.2/6.21.4?slim=true) | --- ### pypdf has possible long runtimes when retrieving page labels [CVE-2026-119206](https://nvd.nist.gov/vuln/detail/CVE-2026-119206) / [GHSA-42gh-23hr-vphw](https://github.com/advisories/GHSA-42gh-23hr-vphw) <details> <summary>More information</summary> #### Details ##### Impact An attacker who uses this vulnerability can craft a PDF which leads to large runtimes. This requires retrieving the page labels of a file. ##### Patches This has been fixed in [pypdf==6.21.3](https://github.com/py-pdf/pypdf/releases/tag/6.21.3). ##### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#&#8203;4251](https://github.com/py-pdf/pypdf/pull/4251). #### Severity - CVSS Score: 7.1 / 10 (High) - Vector String: `CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N` #### References - [https://github.com/py-pdf/pypdf/security/advisories/GHSA-42gh-23hr-vphw](https://github.com/py-pdf/pypdf/security/advisories/GHSA-42gh-23hr-vphw) - [https://nvd.nist.gov/vuln/detail/CVE-2026-119206](https://nvd.nist.gov/vuln/detail/CVE-2026-119206) - [https://github.com/py-pdf/pypdf/pull/4251](https://github.com/py-pdf/pypdf/pull/4251) - [https://github.com/py-pdf/pypdf/commit/b891fef37000cd86baa6e9848a3387d080b3b03e](https://github.com/py-pdf/pypdf/commit/b891fef37000cd86baa6e9848a3387d080b3b03e) - [https://github.com/py-pdf/pypdf](https://github.com/py-pdf/pypdf) - [https://github.com/py-pdf/pypdf/releases/tag/6.21.3](https://github.com/py-pdf/pypdf/releases/tag/6.21.3) This data is provided by [OSV](https://osv.dev/vulnerability/GHSA-42gh-23hr-vphw) and the [GitHub Advisory Database](https://github.com/github/advisory-database) ([CC-BY 4.0](https://github.com/github/advisory-database/blob/main/LICENSE.md)). </details> --- ### pypdf has possible large memory usage for exceptions in strict mode [CVE-2026-119207](https://nvd.nist.gov/vuln/detail/CVE-2026-119207) / [GHSA-4vqv-7265-gm2w](https://github.com/advisories/GHSA-4vqv-7265-gm2w) <details> <summary>More information</summary> #### Details ##### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading an invalid dictionary. ##### Patches This has been fixed in [pypdf==6.21.3](https://github.com/py-pdf/pypdf/releases/tag/6.21.3). ##### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#&#8203;4265](https://github.com/py-pdf/pypdf/pull/4265). #### Severity - CVSS Score: 7.1 / 10 (High) - Vector String: `CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N` #### References - [https://github.com/py-pdf/pypdf/security/advisories/GHSA-4vqv-7265-gm2w](https://github.com/py-pdf/pypdf/security/advisories/GHSA-4vqv-7265-gm2w) - [https://nvd.nist.gov/vuln/detail/CVE-2026-119207](https://nvd.nist.gov/vuln/detail/CVE-2026-119207) - [https://github.com/py-pdf/pypdf/pull/4265](https://github.com/py-pdf/pypdf/pull/4265) - [https://github.com/py-pdf/pypdf/commit/64270258c0eced720f7960aecf8cef31afd39f8d](https://github.com/py-pdf/pypdf/commit/64270258c0eced720f7960aecf8cef31afd39f8d) - [https://github.com/py-pdf/pypdf](https://github.com/py-pdf/pypdf) - [https://github.com/py-pdf/pypdf/releases/tag/6.21.3](https://github.com/py-pdf/pypdf/releases/tag/6.21.3) This data is provided by [OSV](https://osv.dev/vulnerability/GHSA-4vqv-7265-gm2w) and the [GitHub Advisory Database](https://github.com/github/advisory-database) ([CC-BY 4.0](https://github.com/github/advisory-database/blob/main/LICENSE.md)). </details> --- ### pypdf has possible long runtimes/large memory usage for encrypted PDF files [CVE-2026-119208](https://nvd.nist.gov/vuln/detail/CVE-2026-119208) / [GHSA-62m5-6wh8-28x7](https://github.com/advisories/GHSA-62m5-6wh8-28x7) <details> <summary>More information</summary> #### Details ##### Impact An attacker who uses this vulnerability can craft a PDF which leads to large runtimes/memory usage. This requires accessing the page count of an encrypted PDF file, which itself declares a wrong `/Count` value. ##### Patches This has been fixed in [pypdf==6.21.3](https://github.com/py-pdf/pypdf/releases/tag/6.21.3). ##### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#&#8203;4270](https://github.com/py-pdf/pypdf/pull/4270). #### Severity - CVSS Score: 7.1 / 10 (High) - Vector String: `CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N` #### References - [https://github.com/py-pdf/pypdf/security/advisories/GHSA-62m5-6wh8-28x7](https://github.com/py-pdf/pypdf/security/advisories/GHSA-62m5-6wh8-28x7) - [https://nvd.nist.gov/vuln/detail/CVE-2026-119208](https://nvd.nist.gov/vuln/detail/CVE-2026-119208) - [https://github.com/py-pdf/pypdf/pull/4270](https://github.com/py-pdf/pypdf/pull/4270) - [https://github.com/py-pdf/pypdf/commit/82b91951dc74496bb3efe6465434f041bb6a5e6b](https://github.com/py-pdf/pypdf/commit/82b91951dc74496bb3efe6465434f041bb6a5e6b) - [https://github.com/py-pdf/pypdf](https://github.com/py-pdf/pypdf) - [https://github.com/py-pdf/pypdf/releases/tag/6.21.3](https://github.com/py-pdf/pypdf/releases/tag/6.21.3) This data is provided by [OSV](https://osv.dev/vulnerability/GHSA-62m5-6wh8-28x7) and the [GitHub Advisory Database](https://github.com/github/advisory-database) ([CC-BY 4.0](https://github.com/github/advisory-database/blob/main/LICENSE.md)). </details> --- ### pypdf has possible large memory usage when parsing cross-reference streams [CVE-2026-119209](https://nvd.nist.gov/vuln/detail/CVE-2026-119209) / [GHSA-x3rh-gjgm-fmqc](https://github.com/advisories/GHSA-x3rh-gjgm-fmqc) <details> <summary>More information</summary> #### Details ##### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires opening a file with cross-reference streams. ##### Patches This has been fixed in [pypdf==6.21.3](https://github.com/py-pdf/pypdf/releases/tag/6.21.3). ##### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#&#8203;4269](https://github.com/py-pdf/pypdf/pull/4269). #### Severity - CVSS Score: 7.1 / 10 (High) - Vector String: `CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N` #### References - [https://github.com/py-pdf/pypdf/security/advisories/GHSA-x3rh-gjgm-fmqc](https://github.com/py-pdf/pypdf/security/advisories/GHSA-x3rh-gjgm-fmqc) - [https://nvd.nist.gov/vuln/detail/CVE-2026-119209](https://nvd.nist.gov/vuln/detail/CVE-2026-119209) - [https://github.com/py-pdf/pypdf/pull/4269](https://github.com/py-pdf/pypdf/pull/4269) - [https://github.com/py-pdf/pypdf/commit/a93fe3a901fd00af38f0a105c3ba7175fa72dcb4](https://github.com/py-pdf/pypdf/commit/a93fe3a901fd00af38f0a105c3ba7175fa72dcb4) - [https://github.com/py-pdf/pypdf](https://github.com/py-pdf/pypdf) - [https://github.com/py-pdf/pypdf/releases/tag/6.21.3](https://github.com/py-pdf/pypdf/releases/tag/6.21.3) This data is provided by [OSV](https://osv.dev/vulnerability/GHSA-x3rh-gjgm-fmqc) and the [GitHub Advisory Database](https://github.com/github/advisory-database) ([CC-BY 4.0](https://github.com/github/advisory-database/blob/main/LICENSE.md)). </details> --- ### pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search [CVE-2026-119203](https://nvd.nist.gov/vuln/detail/CVE-2026-119203) / [GHSA-5849-834g-hvw5](https://github.com/advisories/GHSA-5849-834g-hvw5) <details> <summary>More information</summary> #### Details ##### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires opening an incomplete file without a `trailer`. ##### Patches This has been fixed in [pypdf==6.21.4](https://github.com/py-pdf/pypdf/releases/tag/6.21.4). ##### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#&#8203;4289](https://github.com/py-pdf/pypdf/pull/4289). #### Severity - CVSS Score: 7.1 / 10 (High) - Vector String: `CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N` #### References - [https://github.com/py-pdf/pypdf/security/advisories/GHSA-5849-834g-hvw5](https://github.com/py-pdf/pypdf/security/advisories/GHSA-5849-834g-hvw5) - [https://nvd.nist.gov/vuln/detail/CVE-2026-119203](https://nvd.nist.gov/vuln/detail/CVE-2026-119203) - [https://github.com/py-pdf/pypdf/pull/4289](https://github.com/py-pdf/pypdf/pull/4289) - [https://github.com/py-pdf/pypdf/commit/06593f993789a4b573dd955730c1a7051128bb2a](https://github.com/py-pdf/pypdf/commit/06593f993789a4b573dd955730c1a7051128bb2a) - [https://github.com/py-pdf/pypdf](https://github.com/py-pdf/pypdf) - [https://github.com/py-pdf/pypdf/releases/tag/6.21.4](https://github.com/py-pdf/pypdf/releases/tag/6.21.4) This data is provided by [OSV](https://osv.dev/vulnerability/GHSA-5849-834g-hvw5) and the [GitHub Advisory Database](https://github.com/github/advisory-database) ([CC-BY 4.0](https://github.com/github/advisory-database/blob/main/LICENSE.md)). </details> --- ### pypdf has possible large memory usage when parsing page tree [CVE-2026-119204](https://nvd.nist.gov/vuln/detail/CVE-2026-119204) / [GHSA-cggf-277g-3q54](https://github.com/advisories/GHSA-cggf-277g-3q54) <details> <summary>More information</summary> #### Details ##### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the page tree with many shared resources. ##### Patches This has been fixed in [pypdf==6.21.4](https://github.com/py-pdf/pypdf/releases/tag/6.21.4). ##### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#&#8203;4290](https://github.com/py-pdf/pypdf/pull/4290). #### Severity - CVSS Score: 7.1 / 10 (High) - Vector String: `CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N` #### References - [https://github.com/py-pdf/pypdf/security/advisories/GHSA-cggf-277g-3q54](https://github.com/py-pdf/pypdf/security/advisories/GHSA-cggf-277g-3q54) - [https://nvd.nist.gov/vuln/detail/CVE-2026-119204](https://nvd.nist.gov/vuln/detail/CVE-2026-119204) - [https://github.com/py-pdf/pypdf/pull/4290](https://github.com/py-pdf/pypdf/pull/4290) - [https://github.com/py-pdf/pypdf/commit/ea4ac663133f1b3de1d7a8f2e6fa239802fde79e](https://github.com/py-pdf/pypdf/commit/ea4ac663133f1b3de1d7a8f2e6fa239802fde79e) - [https://github.com/py-pdf/pypdf](https://github.com/py-pdf/pypdf) - [https://github.com/py-pdf/pypdf/releases/tag/6.21.4](https://github.com/py-pdf/pypdf/releases/tag/6.21.4) This data is provided by [OSV](https://osv.dev/vulnerability/GHSA-cggf-277g-3q54) and the [GitHub Advisory Database](https://github.com/github/advisory-database) ([CC-BY 4.0](https://github.com/github/advisory-database/blob/main/LICENSE.md)). </details> --- ### pypdf has possible infinite loop when cloning dictionaries [CVE-2026-119205](https://nvd.nist.gov/vuln/detail/CVE-2026-119205) / [GHSA-mfr5-77xh-9j7h](https://github.com/advisories/GHSA-mfr5-77xh-9j7h) <details> <summary>More information</summary> #### Details ##### Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires cloning/duplicating a `DictionaryObject`. ##### Patches This has been fixed in [pypdf==6.21.4](https://github.com/py-pdf/pypdf/releases/tag/6.21.4). ##### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#&#8203;4288](https://github.com/py-pdf/pypdf/pull/4288). #### Severity - CVSS Score: 7.1 / 10 (High) - Vector String: `CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N` #### References - [https://github.com/py-pdf/pypdf/security/advisories/GHSA-mfr5-77xh-9j7h](https://github.com/py-pdf/pypdf/security/advisories/GHSA-mfr5-77xh-9j7h) - [https://nvd.nist.gov/vuln/detail/CVE-2026-119205](https://nvd.nist.gov/vuln/detail/CVE-2026-119205) - [https://github.com/py-pdf/pypdf/pull/4288](https://github.com/py-pdf/pypdf/pull/4288) - [https://github.com/py-pdf/pypdf/commit/f176db1a1f7f9af3e472e69a843ef1175653b044](https://github.com/py-pdf/pypdf/commit/f176db1a1f7f9af3e472e69a843ef1175653b044) - [https://github.com/py-pdf/pypdf](https://github.com/py-pdf/pypdf) - [https://github.com/py-pdf/pypdf/releases/tag/6.21.4](https://github.com/py-pdf/pypdf/releases/tag/6.21.4) This data is provided by [OSV](https://osv.dev/vulnerability/GHSA-mfr5-77xh-9j7h) and the [GitHub Advisory Database](https://github.com/github/advisory-database) ([CC-BY 4.0](https://github.com/github/advisory-database/blob/main/LICENSE.md)). </details> --- ### Release Notes <details> <summary>py-pdf/pypdf (pypdf)</summary> ### [`v6.21.4`](https://github.com/py-pdf/pypdf/blob/HEAD/CHANGELOG.md#Version-6214-2026-10-28) [Compare Source](https://github.com/py-pdf/pypdf/compare/6.21.3...6.21.4) ##### Security (SEC) - Limit the number of copied page attributes during flattening ([#&#8203;4290](https://github.com/py-pdf/pypdf/issues/4290)) - Detect EOF when reading standard xref table trailer ([#&#8203;4289](https://github.com/py-pdf/pypdf/issues/4289)) - Fix loop detection when cloning DictionaryObject ([#&#8203;4288](https://github.com/py-pdf/pypdf/issues/4288)) ##### Documentation (DOC) - Exclude performance issues from security reports ([#&#8203;4280](https://github.com/py-pdf/pypdf/issues/4280)) [Full Changelog](https://github.com/py-pdf/pypdf/compare/6.21.3...6.21.4) ### [`v6.21.3`](https://github.com/py-pdf/pypdf/blob/HEAD/CHANGELOG.md#Version-6214-2026-10-28) [Compare Source](https://github.com/py-pdf/pypdf/compare/6.21.2...6.21.3) ##### Security (SEC) - Limit the number of copied page attributes during flattening ([#&#8203;4290](https://github.com/py-pdf/pypdf/issues/4290)) - Detect EOF when reading standard xref table trailer ([#&#8203;4289](https://github.com/py-pdf/pypdf/issues/4289)) - Fix loop detection when cloning DictionaryObject ([#&#8203;4288](https://github.com/py-pdf/pypdf/issues/4288)) ##### Documentation (DOC) - Exclude performance issues from security reports ([#&#8203;4280](https://github.com/py-pdf/pypdf/issues/4280)) [Full Changelog](https://github.com/py-pdf/pypdf/compare/6.21.3...6.21.4) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODguMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4OC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJzZWN1cml0eSJdfQ==-->
chore(deps): update dependency pypdf to v6.21.4 [security]
All checks were successful
CI / Summarisation accuracy eval harness (stub provider) (pull_request) Successful in 58s
Details
CI / Backend lint (ruff) (pull_request) Successful in 30s
Details
CI / Bot/backend version sync (pull_request) Successful in 28s
Details
CI / Feedback site tests (pull_request) Successful in 58s
Details
CI / Does this change touch the recording path? (pull_request) Successful in 14s
Details
CI / Which journeys does this change need? (pull_request) Successful in 14s
Details
CI / Docker image build (pull_request) Successful in 1m14s
Details
CI / Bot tests and audit (pull_request) Successful in 4m3s
Details
CI / Frontend (shard 2/2) (pull_request) Successful in 16m16s
Details
CI / Synthetic session harness (no GPU, no LLM) (pull_request) Successful in 10m14s
Details
CI / End-to-end journeys (desktop) (pull_request) Successful in 14m32s
Details
CI / Frontend (shard 1/2) (pull_request) Successful in 21m57s
Details
CI / Backend migration, tests, and audit (pull_request) Successful in 38m49s
Details
ba5a6e1ac4
renovate-bot scheduled this pull request to auto merge when all checks succeed 2026-10-31 00:39:33 +00:00
renovate-bot deleted branch renovate/pypi-pypdf-vulnerability 2026-10-31 01:21:00 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
backend
Issue related to the backend

  
bot
Issue related to the bot

  
bug
Something is not working

  
duplicate
This issue or pull request already exists

  
enhancement
New feature

  
frontend
Issue related to the frontend

  
help wanted
Need some help

  
invalid
Something is wrong

  
question
More information is needed

  
recording
Issue related to the recording system

  
security
Security hardening / vulnerability work

  
wontfix
This won't be fixed

No labels
backend
bot
bug
duplicate
enhancement
frontend
help wanted
invalid
question
recording
security
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
rbrooks/Quest-Board!1297
No description provided.