[dependabot]

Bumps github.com/pdfcpu/pdfcpu from 0.15.0 to 0.16.1.

Release notes

Sourced from github.com/pdfcpu/pdfcpu's releases.

v0.16.1

Security and stability update with no public API changes. Requires Go 1.26 or later.

This release fixes a denial-of-service vulnerability in grayscale and Indexed image rendering, including CalRGB palette handling. Processing a crafted PDF could cause an index-out-of-range panic and terminate the calling process if the panic was not recovered.

Versions v0.16.0 and earlier are affected. Applications extracting or rendering images from untrusted PDFs should upgrade to v0.16.1. See GHSA-6524-w46v-6399.

Improvements:

• Harden PDF parsing, image processing, JSON input handling, and signature-data parsing.
• Prevent panics when rendering grayscale and Indexed images, including palette bounds and Decode mapping checks.
• Strengthen external-link checks and reporting of problematic links; redact URL passwords in reports and CLI output.
• Improve structural validation of embedded files, 3D annotations, and multimedia dictionaries.
• Report JavaScript and supported media presence during validation without executing content or displaying script code.
• Report invalid zero-offset xref entries as skipped in relaxed validation and reject them in strict mode (#612).
• Fix strict validation of PDF dates ending in Z (#1493).
• Update the TIFF dependency to v1.0.7.

v0.16.0

This release updates the Go API and configuration model, improves automation and PDF validation, and includes processing fixes and security hardening.

Changes since v0.16.0-rc.1

• Protect image buffer allocations against integer overflow and enforce resource limits before decoding each TIFF page.
• Fix default-configuration handling (#1492): synchronize access to the cached default configuration and return independent clones to callers.

Security advisories

This release includes fixes covered by six security advisories.

• Integer overflow in image buffer allocation
• Traditional cross-reference tables bypass configured XRef limits
• Packed RGB image samples can cause an index-out-of-range panic during image extraction
• Missing BitsPerComponent can cause a nil-pointer panic during image extraction
• Integer overflow in XRef stream /W array can cause denial of service
• Off-by-one revision mapping weakens PDF signature modification reporting

Highlights

• Updated Go API — Explicit contexts for long-running operations, optional progress reporting, and reusable caller-owned configuration.
• Configuration redesign — Schema-aware loading, explicit initialization and reset, plus read-only and stateless operation.
• Automation and container preparation — Signal cancellation, safer output replacement, password-file inputs, and verified execution under arbitrary user IDs.
• Stronger PDF validation — Improved malformed-input handling, graph-traversal safeguards, and compatibility warnings for selected relaxed-validation decisions.

... (truncated)

Commits

• 2f7a89a bump version
• b4ff51e Redact URL passwords in link validation reports and CLI output
• 98098e1 fix Indexed image Decode mapping and palette clamping
• b895d85 fix #612
• a251c31 fix #1493
• d0282ae refresh TIFF references for zeroed directory padding
• 10aa9df move reference inventory tests to regression repository
• b1be5ed validate 3D annotations and views
• 21d22d7 report active content during validation
• ba94f4a validate media rendition dictionaries
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)