Skip to content

chore(deps): Bump the cargo-minor group with 2 updates - #83

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-8f8b6019d0
Open

chore(deps): Bump the cargo-minor group with 2 updates#83
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/cargo-minor-8f8b6019d0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the cargo-minor group with 2 updates: oxidize-pdf and log.

Updates oxidize-pdf from 4.6.0 to 4.8.0

Release notes

Sourced from oxidize-pdf's releases.

v4.8.0

oxidize-pdf v4.8.0

See CHANGELOG.md for details.

Installation

Add to your Cargo.toml:

[dependencies]
oxidize-pdf = "4.8.0"

What's Changed

Full Changelog: bzsanti/oxidizePdf@v4.7.0...v4.8.0

v4.7.0

oxidize-pdf v4.7.0

See CHANGELOG.md for details.

Installation

Add to your Cargo.toml:

[dependencies]
oxidize-pdf = "4.7.0"

What's Changed

... (truncated)

Changelog

Sourced from oxidize-pdf's changelog.

[4.8.0] - 2026-08-27

Fixed

  • Semantic redaction no longer presents visual masking as irreversible removal (#541). Reports explicitly identify recoverable masking risks, and the security-grade API now removes exact direct-page ASCII Tj operands and complete literal TJ arrays backed by verified non-symbolic Standard-14 fonts. Both Tj and TJ replacements preserve the original text advance, including AFM glyph widths, numeric adjustments, character spacing, and word spacing. The API rebuilds the file without prior revisions or document-level auxiliary data and verifies output page streams before reporting irreversible success. It correlates each match with its declared bounding box, audits retained page resources and metadata during forensic reparse, and enforces input, page, entity, decoded-content, and operation budgets. It fails closed for annotations, XObjects, shadings, inline images, marked content, custom or ambiguous font encodings, partial or ambiguous matches, and malformed streams.

Added

  • Revision-aware semantic PDF comparison (#543). A bounded comparison API reports visual, textual, structural, metadata, security, and serialization differences, attributes changes to incremental revisions, and normalizes irrelevant serialization and timestamp noise.
  • Lossless tagged-PDF validation and incremental editing (#544). Public APIs inspect structure trees and PDF/UA findings, then apply bounded edits for attributes, MCID associations, ParentTree repair, element creation, and reparenting while preserving unrelated bytes and enforcing DocMDP policy.
  • Public outline and bookmark reading (#548). PdfDocument can now parse bounded bookmark hierarchies, styles, open state, direct and named destinations, GoTo actions, and all standard destination view modes into stable zero-based page indexes.
  • Lossless incremental OCR text layers (#542). Positioned, invisible Unicode text can now be appended to existing pages without rebuilding the document graph or changing the source-byte prefix. The editor exposes a policy-aware dry run, isolated streams and font resources, language, confidence, source-region and reading-order metadata, duplicate-layer detection, deterministic output, xref-table and xref-stream support, and validated atomic publication through PdfOcrConverter. Encrypted inputs and every DocMDP certification level fail closed because OCR changes page content.
  • Lossless incremental page reordering (#531). The new reorder_pdf_pages_lossless API preserves the source bytes, indirect page identities, inherited page attributes, and unrelated document objects while atomically applying an exact page permutation. Encrypted inputs fail closed.
  • DocMDP enforcement for incremental structural edits (#532). Lossless page reordering now permits ordinary approval signatures while parsing and enforcing certification transforms, rejecting every certified, malformed,

... (truncated)

Commits
  • 4de4ce1 Merge pull request #551 from bzsanti/release/v4.8.0
  • 0d7239b chore(release): prepare v4.8.0
  • bd15153 Merge pull request #550 from bzsanti/feat/issue-548-outline-reading
  • e307aa0 fix: address outline reader review findings
  • f449b32 Merge pull request #549 from bzsanti/feat/issue-544-tagged-pdf-validation
  • ac03e5e feat: add public outline reading API
  • 299105a feat: complete tagged PDF structure mutations
  • 8efca75 feat: complete lossless tagged PDF editing
  • dc0265c fix: address tagged PDF validation review findings
  • 2fcdb79 feat: add initial PDF-UA semantic findings (#544)
  • Additional commits viewable in compare view

Updates log from 0.4.33 to 0.4.34

Release notes

Sourced from log's releases.

0.4.34

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

Changelog

Sourced from log's changelog.

[0.4.34] - 2026-08-22

What's Changed

New Contributors

Full Changelog: rust-lang/log@0.4.33...0.4.34

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): Bump the cargo-minor group with 2 updates
1fd5527 
Bumps the cargo-minor group with 2 updates: [oxidize-pdf](https://github.com/bzsanti/oxidizePdf) and [log](https://github.com/rust-lang/log).


Updates `oxidize-pdf` from 4.6.0 to 4.8.0
- [Release notes](https://github.com/bzsanti/oxidizePdf/releases)
- [Changelog](https://github.com/bzsanti/oxidizePdf/blob/main/CHANGELOG.md)
- [Commits](bzsanti/oxidizePdf@v4.6.0...v4.8.0)

Updates `log` from 0.4.33 to 0.4.34
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](rust-lang/log@0.4.33...0.4.34)

---
updated-dependencies:
- dependency-name: oxidize-pdf
  dependency-version: 4.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cargo-minor
- dependency-name: log
  dependency-version: 0.4.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cargo-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants