Skip to content

chore(deps): bump lopdf from 0.40.0 to 0.42.0 - #135

Merged
hyperpolymath merged 2 commits into
mainfrom
dependabot/cargo/lopdf-0.42.0
Oct 20, 2026
Merged

hyperpolymath merged 2 commits into
mainfrom
dependabot/cargo/lopdf-0.42.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps lopdf from 0.40.0 to 0.42.0.

Changelog

Sourced from lopdf's changelog.

v0.42.0 (2026-06-23)

Feat

  • Add Content::decode_strict method for strict parsing

Fix

  • Limit array and dictionary nesting depth
  • Include subsequent ObjStm objects in xref stream range
  • Insert newline between concatenated content streams
  • Consume trailing comments in content streams

Test

  • Escape trailing whitespace in parser tests

v0.41.0 (2026-06-04)

Add

  • Add test to reproduce bug with replacing text in non-single character TJ Arrays
  • Add regression test PDF file
  • Add performance tests for document loading and page counting

Fix

  • Fix bug replacing text in non-single character TJ Arrays
  • fix clippy errors

Implement

  • Implement differences mapping

Release

  • Release 0.41

Removes

  • Removes nom_locate dependency to fix a performance regression introduced in v0.35.0.

Commits
  • 2ffc4b4 Release 0.42.0
  • c755394 fix(parser): limit array and dictionary nesting depth
  • 762be26 fix(writer): include subsequent ObjStm objects in xref stream range
  • afb9f00 fix(document): insert newline between concatenated content streams
  • 162257d fix(parser): consume trailing comments in content streams
  • 3549a24 feat(parser): add Content::decode_strict method for strict parsing
  • 81202a2 test(parser): escape trailing whitespace in parser tests
  • fff5d1c Update CHANGELOG
  • cc9b63e Release 0.41
  • 681cc9f fix clippy errors
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [lopdf](https://github.com/J-F-Liu/lopdf) from 0.40.0 to 0.42.0.
- [Release notes](https://github.com/J-F-Liu/lopdf/releases)
- [Changelog](https://github.com/J-F-Liu/lopdf/blob/main/CHANGELOG.md)
- [Commits](J-F-Liu/lopdf@v0.40.0...v0.42.0)

---
updated-dependencies:
- dependency-name: lopdf
  dependency-version: 0.42.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 19, 2026
@coderabbitai

coderabbitai Bot commented Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 3388aeed-36e2-40f9-9330-154dec928625

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@hyperpolymath
hyperpolymath merged commit 2a1c027 into main Oct 20, 2026
17 of 37 checks passed
@hyperpolymath
hyperpolymath deleted the dependabot/cargo/lopdf-0.42.0 branch October 20, 2026 22:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant