chore(deps): bump pypdf from 6.7.4 to 6.7.5 in /src/backend by dependabot[bot] · Pull Request #11454 · inventree/InvenTree

dependabot · 2026-03-03T04:11:43Z

Bumps pypdf from 6.7.4 to 6.7.5.

Release notes

Version 6.7.5, 2026-03-02

What's new

Security (SEC)

Improve the performance of the ASCIIHexDecode filter (#3666) by @stefan6419846

Full Changelog

Changelog

Sourced from pypdf's changelog.

Version 6.7.5, 2026-03-02

Security (SEC)

Improve the performance of the ASCIIHexDecode filter (#3666)

Full Changelog

Commits

7c2bcdd REL: 6.7.5
648c627 SEC: Improve the performance of the ASCIIHexDecode filter (#3666)
1aef6fb DEV: Update cache key handling in CI (#3665)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [pypdf](https://github.com/py-pdf/pypdf) from 6.7.4 to 6.7.5. - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@6.7.4...6.7.5) --- updated-dependencies: - dependency-name: pypdf dependency-version: 6.7.5 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

netlify · 2026-03-03T04:11:47Z

✅ Deploy Preview for inventree-web-pui-preview canceled.

Name	Link
🔨 Latest commit	`7826f4b`
🔍 Latest deploy log	https://app.netlify.com/projects/inventree-web-pui-preview/deploys/69a87b07a6eceb0008ba9c3a

codspeed-hq · 2026-03-04T18:45:38Z

Merging this PR will degrade performance by 7.11%

⚠️

Unknown Walltime execution environment detected

Using the Walltime instrument on standard Hosted Runners will lead to inconsistent data.

For the most accurate results, we recommend using CodSpeed Macro Runners: bare-metal machines fine-tuned for performance measurement consistency.

⚡ 2 improved benchmarks
❌ 1 regressed benchmark
✅ 41 untouched benchmarks

⚠️ Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

	Mode	Benchmark	`BASE`	`HEAD`	Efficiency
⚡	WallTime	`test_api_list_performance[/api/stock/location/]`	25 ms	20.5 ms	+22.19%
⚡	WallTime	`test_api_list_performance[/api/company/]`	20.3 ms	18.6 ms	+8.82%
❌	WallTime	`test_search_performance[supplierpart]`	39.5 ms	42.5 ms	-7.11%

_{Comparing dependabot/pip/src/backend/pypdf-6.7.5 (7826f4b) with master (cdcfdd8)¹}

No successful run was found on master (4d40435) during the generation of this report, so cdcfdd8 was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩

codecov · 2026-03-04T19:17:30Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.02%. Comparing base (948818b) to head (7826f4b).
⚠️ Report is 3 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #11454      +/-   ##
==========================================
- Coverage   88.05%   88.02%   -0.04%     
==========================================
  Files        1296     1296              
  Lines       59025    59186     +161     
  Branches     1935     1935              
==========================================
+ Hits        51974    52097     +123     
- Misses       6570     6608      +38     
  Partials      481      481

Flag	Coverage Δ
backend	`89.18% <ø> (-0.05%)`	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Components	Coverage Δ
Backend Apps	`91.67% <ø> (-0.05%)`	⬇️
Backend General	`93.37% <ø> (ø)`
Frontend	`70.91% <ø> (ø)`

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

github-actions · 2026-03-04T19:52:54Z

💔 All backports failed

Status	Branch	Result
❌	1.2.x	Backport failed because of merge conflicts You might need to backport the following PRs to 1.2.x: - chore(deps): bump the dependencies group across 2 directories with 18 updates (#11321)

Manual backport

To create the backport manually run:

backport --pr 11454

Questions ?

Please refer to the Backport tool documentation and see the Github Action logs for details

matmair · 2026-03-04T20:57:57Z

💚 All backports created successfully

Status	Branch	Result
✅	1.2.x

Questions ?

Please refer to the Backport tool documentation

…e#11454) * chore(deps): bump pypdf from 6.7.4 to 6.7.5 in /src/backend Bumps [pypdf](https://github.com/py-pdf/pypdf) from 6.7.4 to 6.7.5. - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@6.7.4...6.7.5) --- updated-dependencies: - dependency-name: pypdf dependency-version: 6.7.5 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> * fix style --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Matthias Mair <code@mjmair.com> (cherry picked from commit 3ed21e0) # Conflicts: # src/backend/requirements-3.14.txt # src/backend/requirements.txt

…11462) * chore(deps): bump pypdf from 6.7.4 to 6.7.5 in /src/backend Bumps [pypdf](https://github.com/py-pdf/pypdf) from 6.7.4 to 6.7.5. - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](py-pdf/pypdf@6.7.4...6.7.5) --- updated-dependencies: - dependency-name: pypdf dependency-version: 6.7.5 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> * fix style --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Matthias Mair <code@mjmair.com> (cherry picked from commit 3ed21e0) # Conflicts: # src/backend/requirements-3.14.txt # src/backend/requirements.txt Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot Bot assigned matmair Mar 3, 2026

dependabot Bot requested a review from SchrodingersGat as a code owner March 3, 2026 04:11

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 3, 2026

fix style

7826f4b

matmair added this to the 1.3.0 milestone Mar 4, 2026

matmair added backport Apply this label to a PR to enable auto-backport action backport-to-1.2.x security Relates to a security issue labels Mar 4, 2026

matmair approved these changes Mar 4, 2026

View reviewed changes

SchrodingersGat merged commit 3ed21e0 into master Mar 4, 2026
58 checks passed

SchrodingersGat deleted the dependabot/pip/src/backend/pypdf-6.7.5 branch March 4, 2026 19:52

matmair mentioned this pull request Mar 4, 2026

[1.2.x] chore(deps): bump pypdf from 6.7.4 to 6.7.5 in /src/backend (#11454) #11462

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump pypdf from 6.7.4 to 6.7.5 in /src/backend#11454

chore(deps): bump pypdf from 6.7.4 to 6.7.5 in /src/backend#11454
SchrodingersGat merged 2 commits intomasterfrom
dependabot/pip/src/backend/pypdf-6.7.5

dependabot Bot commented on behalf of github Mar 3, 2026

Uh oh!

netlify Bot commented Mar 3, 2026 •

edited

Loading

Uh oh!

codspeed-hq Bot commented Mar 4, 2026

Uh oh!

codecov Bot commented Mar 4, 2026 •

edited

Loading

Uh oh!

Uh oh!

github-actions Bot commented Mar 4, 2026

Uh oh!

matmair commented Mar 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Mar 3, 2026

Version 6.7.5, 2026-03-02

What's new

Security (SEC)

Version 6.7.5, 2026-03-02

Security (SEC)

Uh oh!

netlify Bot commented Mar 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for inventree-web-pui-preview canceled.

Uh oh!

codspeed-hq Bot commented Mar 4, 2026

Merging this PR will degrade performance by 7.11%

Performance Changes

Footnotes

Uh oh!

codecov Bot commented Mar 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Uh oh!

github-actions Bot commented Mar 4, 2026

💔 All backports failed

Manual backport

Questions ?

Uh oh!

matmair commented Mar 4, 2026

💚 All backports created successfully

Questions ?

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

netlify Bot commented Mar 3, 2026 •

edited

Loading

codecov Bot commented Mar 4, 2026 •

edited

Loading