pypdfium2

Changes (Release 5.0.0b1)

Summary (pypdfium2)

API changes

• Rendering / Bitmap
  • Removed PdfDocument.render() (see deprecation rationale in v4.25 changelog). Instead, use PdfPage.render() with a loop or process pool.
  • Removed PdfBitmap.get_info() and PdfBitmapInfo, which existed mainly on behalf of data transfer with PdfDocument.render(). Instead, take the info from the PdfBitmap object directly. (If using an adapter that copies, you may want to store the relevant info in variables to avoid holding a reference to the original buffer.)
  • PdfBitmap.fill_rect(): Changed argument order. The color parameter now goes first.
  • PdfBitmap.to_numpy(): If the bitmap is single-channel (grayscale), use a 2d shape to avoid needlessly wrapping each pixel value in a list.
  • PdfBitmap.from_pil(): Removed recopy parameter.
• Pageobjects
  • Renamed PdfObject.get_pos() to .get_bounds().
  • Renamed PdfImage.get_size() to .get_px_size().
  • PdfImage.extract(): Removed fb_render option because it does not fit in this API. If the image's rendered bitmap is desired, use .get_bitmap(render=True) in the first place.
• PdfDocument.get_toc(): Replaced PdfOutlineItem namedtuple with method-oriented wrapper classes PdfBookmark and PdfDest, so callers may retrieve only the properties they actually need. This is closer to pdfium's original API and exposes the underlying raw objects. Provides signed count as-is rather than splitting in n_kids and is_closed. Also distinguishes between dest is None and a dest with unknown mode.
• Renamed misleading PdfMatrix.mirror() parameters v, h to invert_x, invert_y, as the terms horizontal/vertical flip commonly refer to the transformation applied, not the axis around which is being flipped (i.e. the previous v meant flipping around the Y axis, which is vertical, but the resulting transform is inverting the X coordinates and thus actually horizontal). No behavior change if you did not use keyword arguments.
• get_text_range(): Removed implicit translation of default calls to get_text_bounded(), as pdfium reverted FPDFText_GetText() to UCS-2, which resolves the allocation concern. However, callers are encouraged to explicitly use get_text_bounded() for full Unicode support.
• Removed legacy version flags.

Improvements and new features

• Added PdfPosConv and PdfBitmap.get_posconv(page) helper for bidirectional translation between page and bitmap coordinates.
• Added PdfObject.get_quad_points() to get the corner points of an image or text object.
• Exposed PdfPage.flatten() (previously semi-private _flatten()), after having found out how to correctly use it. Added check and updated docs accordingly.
• With PdfImage.get_bitmap(render=True), added scale_to_original option (defaults to True) to temporarily scale the image to its pixel size. Thanks to Lei Zhang for the suggestion.
• Added context manager support to PdfDocument, so it can be used in a with-statement, because opening from a file path binds a file descriptor (usually on the C side), which should be released explicitly, given OS limits.
• If document loading failed, err_code is now assigned to the PdfiumError instance so callers may programmatically handle the error subtype.
• In PdfPage.render(), added a new option use_bgra_on_transparency. If there is page content with transparency, using BGR(x) may slow down PDFium. Therefore, it is recommended to set this option to True if dynamic (page-dependent) pixel format selection is acceptable. Alternatively, you might want to use only BGRA via force_bitmap_format=pypdfium2.raw.FPDFBitmap_BGRA (at the cost of occupying more memory compared to BGR).
• In PdfBitmap.new_*() methods, avoid use of .from_raw(), and instead call the constructor directly, as most parameters are already known on the caller side when creating a bitmap.
• In the rendering CLI, added --invert-lightness --exclude-images post-processing options to render with selective lightness inversion. This may be useful to achieve a "dark theme" for light PDFs while preserving different colors, but goes at the cost of performance. (PDFium also provides a color scheme option, but this only allows you to set colors for certain object types, which are then forced on all instances of the type in question. This may flatten different colors into one, leading to a loss of visual information.)
• Corrected some null pointer checks: we have to use bool(ptr) rather than ptr is None.
• Improved startup performance by deferring imports of optional dependencies to the point where they are actually needed, to avoid overhead if you do not use them.
• Simplified version classes (no API change expected).

Platforms

• Experimental Android support added (cf. PEP 738). arm64_v8a, armeabi_v7a, x86_64, x86 are now handled in setup and should implicitly download the right binaries. We do not publish any android wheels at this time (for one thing, PyPI/warehouse does not support them yet). However, we might want to package arm64_v8a (and maybe armeabi_v7a) wheels in the future. Note, android support is provided on a best effort basis, and largely untested (only arm64 Termux prior to PEP 738 has been tested on the author's phone). Please report success or failure.
• Experimental iOS support added as well (cf. PEP 730). arm64 device and simulator, and x86_64 simulator are now handled and should implicitly download the right binaries. However, this is untested and may not be enough to get all the way through. In particular, the PEP hints that the binary needs to be moved to a Frameworks location, in which case you'd also need to change the library search path. No iOS wheels will be provided at this time. However, if there are testers and an actual demand, iOS arm64 wheels may be enabled in the future.
• Note, we have no intent to package wheels for the simulators (android x86_64/x86, ios arm64_simu/x86_64), as they are only relevant to developers, and installing from source with implicit binary download should be roughly equialvent.

Setup

• Avoid needlessly calling _get_libc_ver(). Instead, call it only on Linux. A negative side effect of calling this unconditionally is that, on non-Linux platforms, an empty string may be returned, in which case the musllinux handler would be reached, which uses non-public API and isn't meant to be called on other platforms (though it seems to have passed).
• If packaging with PDFIUM_PLATFORM=sourcebuild, forward the platform tag determined by bdist_wheel's wrapper, rather than using the underlying sysconfig.get_platform() directly. This may provide more accurate results, e.g. on macOS.

Project

• Made the runfile fail fast and propagate errors via bash -eu. This is actually quite important to avoid potentially continuing on a broken state in CI.
• CI: Added Linux aarch64 (GH now provides free runners) and Python 3.13 to the test matrix.
• Merged tests_old/ back into tests/.
• Migrated from deprecated .reuse/dep5/.reuse/dep5-wheel to more visible REUSE.toml/REUSE-wheel.toml.
• Docs: Improved logic when to include the unreleased version warning and upcoming changelog.
• Bumped minimum pdfium requirement in conda recipe to >6635 (effectively >=6638), due to new errchecks that are not version-guarded.
• Cleanly split out conda packaging into an own file, and confined it to the conda/ directory, to avoid polluting the main setup code.

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.30.1 and 5.0.0b1 (latest commit first):

• 8ea3c9f [autorelease main] update 5.0.0b1
• c439329 fix typos
• 6d04fac Take out android for now
• 28ef5b3 docs/conf.py: take out problematic assertion
• 936314f CI/debugging: add verbose: true
• 0882a90 conda_raw: fix upload path
• efcf088 conda_raw: temporarily comment out schedule
• e2a760e fix spelling
• 029327a v5 devel branch (#307)
• 9e55a45 Comment TestPyPI back in

</details>

<details> <summary>PDFium commit log</summary>

Commits between 6899 and 6996 (latest commit first):

• 012fe571c Fix unnecessary tree traversal in SearchNameNodeByNameInternal()
• 3c2bfd785 Refactor SearchNameNodeByNameInternal()
• a9f2f0f33 Use CIDToGIDMap to fill font widths in FPDFText_LoadCidType2Font()
• 0d2d104ba Roll goldctl from 78856799f02f to 9389855cfb14
• d69e9855e Add even better compiler-support section to README.md
• 6c386f729 Always initialize CFX_SkiaDeviceDriver::m_bRgbByteOrder
• a78c76720 Add supported compilers section to README.md
• ef5fcdf6e Remove some MSVC-specific code
• fa6581277 Allow options and input files in any order in pdfium_test
• 170de1e03 Fix stack-use-after-scope in pdfium_test
• 2febc2869 Fix FPDFText_GetLooseCharBox() to handle rotation
• 4c7464b07 Add tests to show FPDFText_GetLooseCharBox() bug with rotated text
• 89a94c1b9 Fix test helper to get correct indices from rotated_text.pdf
• 603caea4e Add a helper to FPDFTextEmbedderTest for use with rotated_text.pdf
• da069983b Roll libpng from cf7c36ed084c to 28213bcabe21 (1 revision)
• 859f92a77 Check the font width array generated by FPDFText_LoadCidType2Font()
• efe66807a Add GetWidthsArrayForCidFont() helper to fpdf_edit_embeddertest.cpp
• f6da7d235 Add comment for subtle code in CPDF_StreamContentParser
• fab1b6d64 Add debugging data to help diagnose a hang in fread()
• 6be4f3be7 Rename pdfium_unsafe_buffers_paths.txt file
• e99f1e8d5 Avoid out of bounds crash when reading fonts
• 594caeb0e Avoid fixed-offset NULL-deref in XFA_Node::InsertChildAndNotify().
• aacaea19d [AGG] Only add positive dash lengths and gap lengths
• b4cf887f7 Add pixel test for negative dash scales
• 3cd0a262c Use AutoRestorer in CPDF_StreamParser::ReadInlineStream()
• 4bc397f60 Rename local variables in CPDF_StreamParser::ReadInlineStream()
• 7420dfeed Fix pdfium_test in Chromium builds when Skia is enabled by default
• d8b668c01 Making CPDF_SyntaxParser::FindTag(ByteStringView tag) robust
• 320fc870f Roll Zlib from 82a5fecf8aae to b763971bcaa3 (1 revision)
• e116b67b1 Fix bad refactoring in CXFA_TextParser::GetFont()
• 67a00b167 Add test showing copies do not happen in fxcrt::Zip().
• 20b8b48e4 Avoid UNSAFE_TODO() in AreColorIndicesOutOfBounds().
• 28cfa3a8a Remove distinction between input/output views in fxcrt::Zip().
• ea4eab892 Update documentation and tests for fxcrt::Zip()
• da206beb2 Make PDFium's compiler_specific.h use clang's UNSAFE_BUFFERS_BUILD
• 4adcb08d8 Roll build, clang, and rust
• 4886ee0d3 Update gn_version to c97a86a72105f3328a540f5a5ab17d11989ab7dd
• ed30f70b4 Roll buildtools and libc++
• 16df41e4b Roll v8/ 3e984a9e0..75be3dcb5 (277 commits)
• 0320375fa Add third_party/highway dependency
• ab72191db Roll third_party/freetype/src/ 0ae7e6073..afc7000ca (9 commits)
• 77e7dee60 Roll v8/ 313e6ed36..3e984a9e0 (189 commits)
• 8198c4e98 Roll third_party/libc++abi/src/ 6c4fa00e4..83dfa1f5b (12 commits)
• ac5bfacd6 Update reclient_version to re_client_version:0.172.0.3cf60ba5-gomaip
• d1e80cff3 Roll testing/scripts/rust/ 347b3c20a..6712dc59f (1 commit)
• 0af514970 Roll third_party/llvm-libc/src/ 4c70d6b5a..60b7db20a (87 commits)
• 328507313 Roll third_party/libunwind/src/ 5b01ea4a6..d1e95b102 (4 commits)
• 4ad60e37a Roll third_party/abseil-cpp/ 0b76dfe4f..72093794a (6 commits)
• 84acf3a55 Roll third_party/googletest/src/ d14403194..7d76a231b (6 commits)
• 7f588b3b4 Roll base/allocator/partition_allocator/ c551156ef..9cab8b0d1 (13 commits)
• b5d8c977c Roll third_party/icu/ 4239b1559..bbccc2f6e (5 commits)
• 1ef5cd32e Roll third_party/skia/ 3db026d62..975788ea9 (248 commits)
• 8d0676e4f Roll third_party/clang-format/script/ 37f6e68a1..1549a8dba (3 commits)
• c1992c827 Roll Catapult from 6a0960fe97ab to 86d6f8ee6130 (59 revisions)
• 994b9858b Roll Code Coverage from 719f1eba4379 to 5e7c277c0d8c (2 revisions)
• cbf0bb586 Roll Depot Tools from 8d20c1e0b56c to 58625e82c685 (39 revisions)
• 55a8262e3 Roll goldctl from b2da51fa8d3a to db814b551104
• a4cbdc9ed Update OpenJPEG to 2.5.3
• d48287fd9 add missing includes for the build with use_libcxx_modules
• b69783fd1 Begin marking unsafe libc functions as UNSAFE_BUFFERS().
• bea10144d Roll Instrumented Libraries from 69291a3c7c79 to 3cc43119a291 (2 revisions)

</details>

Edit: Removed the *.publish.attestation files that were inadvertently included in the GH release.

Changes (Release 4.30.1)

Summary (pypdfium2)

• PdfPage.get_objects(): Don't register pageobjects as children, because they don't need to be closed by the caller when part of a page. This avoids excessive caching of weakrefs that are not cleaned up with the object they refer to.
• Fixed another dotted filepath blunder in the extract-images CLI. (The PdfImage.extract() API is not affected this time.)
• Adapted setup code to bdist_wheel relocation (moved from wheel to setuptools).
• Fixed installation with reference bindings (PDFIUM_BINDINGS=reference) by actually including them in the sdist and adding a missing mkdir call. (In older versions, this can be worked around by cloning the repository and creating the missing directory manually before installation.)
• Fixed sourcebuild on windows by syncing patches with pdfium-binaries.
• Updated test expectations: due to changes in pdfium, some numbers are now slightly different.
• Fixed conda packaging: It is now required to explicitly specify -c defaults with --override-channels, presumably due to an upstream change.
• Autorelease: Swapped default condition for minor/patch update, as pypdfium2 changes are likely more API-significant than pdfium updates. Added ability for manual override.
• Bumped workflows to Python 3.12.
• Updated docs on licensing.
• This is expected to be the last release of the v4 series.

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.30.0 and 4.30.1 (latest commit first):

• b4e4105 [autorelease main] update 4.30.1
• 08041a2 publish: disable attestations, tmp comment out
• febe1a4 Changelog nits
• 4fe6445 Q&D adaption to bdist_wheel relocation (fixes #326)
• 067847a Fix reference bindings missing in sdist
• 2ec6bd6 workflows: re-enable conda_raw trigger
• 1320a3f sourcebuild: sync patches with pdfium-binaries
• be173a7 changelog fixup
• b85745a Update test expectations
• 5001bf9 Prepare for possible release
• 860bf97 Revert "Clarify Cannot close object; library is destroyed condition"
• 6736a5d Update licensing docs
• ce1faba Add missing mkdir with refbindings (fixes #320)
• ff2ff4b Clarify Cannot close object; library is destroyed condition
• 0f4bba8 PR template: use details summary rather than heading
• 6bb675a chore: slightly update PR template
• 7dca75c conda: also add -c defaults in workflow
• f250b34 CLI/extract-images: Fix another dotted filepath blunder
• 3fd35cf Fix conda packaging (upstream behavior change) (#314)
• a07372d Update workflows to Python 3.12
• d8a3128 versioning: swap minor/patch inc default, allow manual override
• 38f5efe PdfPage.get_objects(): don't register objects as kids
• 6f13da6 Slightly fix up changelog

</details>

<details open> <summary>PDFium commit log</summary>

Commits between 6462 and 6899 (latest commit first):

The pdfium commit log is omitted this time because it exceeded GH's character limit. See https://github.com/pypdfium2-team/pypdfium2/actions/runs/12419415378/job/34674787577: Error: Error 422: Validation Failed: {"resource":"Release","code":"custom","field":"body","message":"body is too long (maximum is 125000 characters)"}. That's also why this GH release was created manually.

Update: added commit log as attachment (see below)

</details>

Changes (Release 4.30.0)

Summary (pypdfium2)

Backported bug fixes / corrections from current development branch to preferably leave v4 in a clean state.

• Fixed blunder in PdfImage.extract() producing an incorrect output path for prefixes containing a dot. In the extract-images CLI, this caused all output images of a type to be written to the same path for a document containing a non-extension dot in the filename.
• XFA / rendering CLI: Fixed incorrect recognition of document length. pdf.init_forms() must be called before len(pdf).
• Made get_text_range() allocation adapt to pdfium version, as FPDFText_GetText() has been reverted to UCS-2. (See v4.28 changelog for background.)
• Updated workflows to include both macos-13 and macos-14 in test matrices because v13 is Intel and v14 ARM64 on GH actions. Removed python 3.7 testing because not supported anymore on macos-14 runners.

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.29.0 and 4.30.0 (latest commit first):

• 6bf53c4 [autorelease main] update 4.30.0
• 1e9e100 Add changelog entry for workflows
• 5ad40ab Test both macOS ARM64 and Intel in all workflows
• 600d36c Try to fix main workflow (GH arch change in macOS-latest)
• a057218 Add changelog for backports
• 653c38c textpage: update docs
• 2577f5b [BP] CLI/render: fix XFA document length recognition
• eded6c2 get_text_range(): adapt allocation to pdfium version
• 7ce4d31 PdfImage.extract(): fix for filenames containing non-extension dot
• 5dc2eee issue templates: reorder commands
• 493742d Make issue templates slightly nicer
• 391575a Inhibit autorelease until v5 is merged

</details>

<details> <summary>PDFium commit log</summary>

Commits between 6406 and 6462 (latest commit first):

• 7b7c83fba Roll build/ bbc1efa4c..5eb3babb0 (147 commits)
• 9783ba486 Fix one more edited PDF regression
• 01ea79cec Update hooks for reclient
• 95b1aabea Add one more pixel test for an edited PDF that regressed
• aaf2cc937 Roll clang to pick up unsafe_buffer_paths.txt format changes.
• 6abd9f147 Introduce fxcrt::try_spancpy() and fxcrt::try_spanmove().
• 89d9beb11 Roll v8/ 7f0739496..0832ba514 (553 commits; 1 trivial rolls)
• 3a2e1651f Roll buildtools and libc++
• 2c9060d69 Roll third_party/abseil-cpp/ a64dd87ce..2c1ad970d (2 commits)
• c07eb97fd Roll third_party/fp16/src/ 0a92994d7..581ac1c79 (1 commit)
• 32fff0d8c Update gn_version to f284b6b47039a2d7edfcbfc51f52664f82b5a789
• fa8edc249 Roll third_party/skia/ 7338f5521..04ee4daae (438 commits)
• 4d6d703eb Roll third_party/freetype/src/ f42ce2556..1168b1b5b (15 commits)
• 0a3a3ee5c Roll base/allocator/partition_allocator/ 8a9c3373f..3b0bd80fa (37 commits)
• ad5237f89 Roll tools/rust/ eaff38a21..8fcf2bf39 (15 commits)
• 95cb40c79 Roll third_party/libc++abi/src/ 1317096ef..51fe35844 (2 commits)
• 2d1bd6c9a Update reclient_version to 0.138.0.e854224-gomaip
• 8342a586d Use spancpy() in more places
• 02ff1756c Fix yet another edited PDF that regressed
• 7d687a0a3 Introduce {Byte,Wide}String::span_with_terminator().
• 64447358e Mark fx_memcpy_wrappers.h functions UNSAFE_BUFFER_USAGE.
• 7cf8895f6 Enable fuzzing with Skia enabled
• 155028a48 Add yet another pixel test for an edited PDF that regressed
• ff78e42df Roll Code Coverage from f459fdcdfc6c to 1b0ca9db1266 (3 revisions)
• 926b395d8 Roll Depot Tools from 4a9d989f52e9 to 4246ba023a15 (107 revisions)
• 0b4ff9a49 Roll libpng from 5140e80f1841 to 34954dfe60ef (2 revisions)
• 863c78226 Roll Instrumented Libraries from 0172d67d98df to 682a735d9f5c (18 revisions)
• 8b5bd138e Roll Catapult from 949df6114f3f to 5fbda23b3a86 (52 revisions)
• 0be533aea Roll Memory Tools from c6d669e13804 to 2448d81f9741 (1 revision)
• 97c93fd37 Roll abseil-cpp, buildtools, clang, and libc++
• 1a5ec9fb4 Gate GDI APIs behind IsUser32AndGdi32Available in cpdf_interactiveform.cpp
• fde20e170 Deduplicate code in CPDF_Parser and rename some methods
• 763c169be Fix parsing of PDFs with multiple cross reference streams
• bc759a2ae Add another pixel test for an edited PDF that regressed
• 2c66e07e9 Spanify CFX_SeekableStreamProxy
• d6a4b27d8 Spanify FPDFText_GetText() and FPDF_GetBoundedText().
• 1a8053c08 Don't allow two-arg span constructor without UNSAFE_BUFFER() annotation.
• 3f197528d Apply UNSAFE_BUFFERS() to two-arg span ctor in core/
• f0dc864fb Put plugin-specific logic in pdfium_common_config.
• 1eb7ddcf1 Apply UNSAFE_BUFFERS() to two-arg span ctor in xfa/
• 590668ba7 Apply UNSAFE_BUFFERS() to two-arg span ctor in testing/
• 3b679fe3f Apply UNSAFE_BUFFERS() to two-arg span ctor in fpdfsdk/
• 317e40e19 Use new instrumented_libs repo
• 0e4ff8cd8 Roll Zlib from c5bf1b566e5d to d076d8bd0898 (6 revisions)
• 5a49e751e Roll build/ e5ff2eff3..e4eef53d5 (27 commits)
• 059201ee5 Fix unsafe buffer usage in fxbarcode/datamatrix.
• d3c008e60 Avoid some two-arg make_span() calls via extern spans.
• 666c400d4 Fix unsafe buffer usage in (non-XFA) JS bindings.
• b079e8738 Fix some unsafe usage in cpdfdsk_{helpers,interactiveform}.cpp
• c658519d7 Roll v8/ f6f7c6822..7f0739496 (162 commits)

</details>

Changes (Release 4.29.0)

Summary (pypdfium2)

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.28.0 and 4.29.0 (latest commit first):

• 66cfaa0 [autorelease main] update 4.29.0
• b1361a7 sourcebuild: generally opt out of PartitionAlloc
• ec5b497 docs: improve python_api preface
• a8d8c0a update refbindings (path stripping fix)

</details>

<details> <summary>PDFium commit log</summary>

Commits between 6337 and 6406 (latest commit first):

• b756612c7 Use the new v8 interceptor API
• afc399ff5 Roll v8/ fe4ad3b98..f6f7c6822 (302 commits)
• 6af6c6197 Fix unsafe pointer usage in CJX_HostPseudoModel
• b9ebffc36 Fix typo in {Byte,Wide}StringView.TrimmedRight tests
• 567dff87b Avoid unsafe indexing in EncodeURL()
• 7ca0110e3 Use WriteFloat() inside WriteColorToStream()
• f6df154e3 Fix some unsafe buffer usage in CPDF_Dest.
• 6ddcbf24b Mark one remaining unsafe function in core/fpdfapi/edit.
• 2855deed0 Do not write out /Page objects that are not in the page tree
• e4cebef61 Roll tools/rust/ 1d0018c65..eaff38a21 (6 commits)
• b870f6853 Roll third_party/skia/ 32f1cb507..7338f5521 (263 commits)
• 93c8137d8 Roll base/allocator/partition_allocator/ c702699cc..8a9c3373f (30 commits)
• e707409fc Roll third_party/libc++abi/src/ fc6253a64..1317096ef (2 commits)
• 6123bc06a Roll third_party/libunwind/src/ fc505746f..419b03c0b (2 commits)
• 77b0d2a1b Update reclient_version to 0.134.1.2c9285b-gomaip
• 9dfab8917 Roll third_party/googletest/src/ e4fdb87e7..eff443c6e (7 commits)
• bf35e1110 Roll third_party/freetype/src/ 2a790a9f4..f42ce2556 (4 commits)
• 483e5e1f5 Change cfx_cmyk_to_srgb code to return struct FX_RGB
• 0095eef10 Improve comments and naming in calculate_pitch.h
• d43b6ce46 Update gn_version to 93ee9b91423c1f1f53fb5f6cba7b8eef6247a564
• 8ba296abd Roll Depot Tools from fbb0301f1f70 to 4a9d989f52e9 (81 revisions)
• 027aa4b67 Roll Code Coverage from 10ce382356ce to f459fdcdfc6c (9 revisions)
• d7ec4201b Switch CPDF_MeshStream to use FX_RGB
• ffbbea8d3 Add struct FX_RGB
• 2238fbe1b Add fpdfsdk/{pwl,formfiller,fpdfxfa}/ directories to unsafe buffers.
• e9b7be916 Make SBThemeData::clrBtnBK a one-dimensional array.
• 008339888 Remove FXSYS_wcstof in favor of system wcstof().
• e5458325d Add some FPDFDocEmbedderTests that delete pages and save
• fb8abcb82 Enforce checking the return value of CFX_DIBitmap::Create()
• 8111f8946 Put unsafe buffer configuration into PDFium
• fe581ab87 Roll build/ e9a12f276..e5ff2eff3 (85 commits)
• e58d4d723 Roll third_party/icu/ 1112fa6b3..d94ab131b (8 commits)
• 278639036 Flag remaining unsafe buffer usage in fxcrt.
• e21f71a90 Change CPDF_MeshStream::ReadColor() to return an array
• 1f9ae706c Fix undefined behavior in DrawGouraud()
• d9a020955 Fix some nits in DrawGouraud()
• 1c2507320 Roll Catapult from 4dc7721a1444 to 949df6114f3f (83 revisions)
• ec275ee3e Roll libpng from 3c7486b231c7 to 5140e80f1841 (1 revision)
• c0800e8bd Remove Skia Sfntly dependency
• 27062af25 Remove more wide string literals.
• 7df165065 Remove some FXSYS_ functions in favor of std::char_traits<>.
• 11b5f3bdb Simplify CFXJSE_NodeHelper::CreateNodeForCondition().
• a9646b460 Fix regression in coverage_report.py
• adc1b16a3 Set a default GN enable_safe_libstdcxx value
• 2f6cef867 Avoid a compiler compatibility issue with CPDF_DefaultAppearance
• e15b92e44 Convert some WideString::CompareNoCase() to EqualsASCIINoCase().
• 71a0c1d89 Replace ptr/size pair with span in FXJSE_CLASS_DESCRIPTOR.
• e8ef976cb Remove in-out parameter from GetFontFamily.
• 11f9c8674 Enable UNOWNED_PTR_EXCLUSION checks for debug builds only.
• b214b50e4 Adjust BUILD.gn files for path-based unsafe buffer warnings.
• 2dc694121 Remove another parameter from CPDF_AnnotList methods
• 7063716b1 Avoid calls to c_str() in cpdf_filespec.cpp.
• c9f2bf183 Avoid duplicate checks in StringViewTemplate<>::Substr().
• 70e774a94 Remove dead code in RenderPageImpl() callees
• b039c387e Improve generated content stream data in cpdf_generateap.cpp
• b119e4ac5 Make FPDFAnnotEmbedderTest.Bug1206 resiliant to changes
• 1eac2c692 Remove use of string to hold binary data in cgdi_device_driver.cpp.
• f93971a09 Move some fx_system.h replacements into a C++ only section.
• 49089b8ad Add script to fetch images from pdfium-skia gold server
• cd894790e Change scripts to use autoninja
• 984472732 Roll third_party/skia/ 532505396..32f1cb507 (200 commits)
• adc3fe713 Increase internal precision in FXSYS_wcstof().
• 112c347ce Generate more legal content stream data in CPDF_GenerateAP
• 91bf0897d Roll build, clang, and rust tools
• 27499934d Properly account for CTM changes
• bbf4c534e Remove unreachable TranslateImageLine() colorspace code
• 62e50f0cc Roll abseil, buildtools, and libc++
• f9629a34a Rename CPDF_Color::GetRGB() to GetColorRef()
• 8fc2c9efb Rename CPDF_PatternCS::GetPatternRGB() to GetPatternColorRef()
• 6fa344b5e Roll third_party/googletest/src/ af29db7ec..e4fdb87e7 (411 commits)
• 91e017d16 Demonstrate PDF saving bug with a "leaky" CTM
• 1655bca8e Roll base/allocator/partition_allocator/ c2bb1848e..c702699cc (26 commits)
• 42e91338b Roll Zlib from 3787595bbbd3 to c5bf1b566e5d (4 revisions)
• 8063a85e1 Roll Memory Tools from 4753a8cbcd7c to c6d669e13804 (2 revisions)
• bfa3a7cf2 Gate GDI APIs behind IsUser32AndGdi32Available in cfgas_fontmgr.cpp
• 0e97af8ad Roll abseil, build, buildtools, clang, and partition_allocator
• 4b608cc69 Roll base/allocator/partition_allocator/ 42bf756b3..dd11a7511 (19 commits)
• 95339d668 Roll gn from a2e2717ea670 to 88e8054aff7b
• 149948491 Roll buildtools, libc++, and abseil
• c065a7bcc Fix cut/paste error in fx_extension_unittest.cpp
• 71bd32dce Generate more modern V8 API calls in js_define.h macros
• a00152123 Remove FXSYS_wcsnicmp() and its unsafe buffer usage.
• 010181205 Roll build/ 386c65667..3aeefdc1a (30 commits)
• f67f17d4e Roll tools/clang/ ff84dc245..44c10e414 (8 commits)
• 6481391a4 Roll third_party/libc++abi/src/ 0c4e8fac5..fc6253a64 (6 commits)
• 8a8ec92da Make core/fxcrt/css compile under nounsafe_buffer_usage.
• 17c556ac5 Long overdue update of string types in CSS.
• c084b5c31 Optimize CFX_FolderFontInfo::FindFont() for an exact match case.
• 3ec142417 Roll third_party/freetype/src/ 47574f7ea..2a790a9f4 (2 commits)
• 0ac7aec0b Downgrade raw_span<> to span<> in StringViewTemplate.
• 7662a3e82 Split implementations of raw_span from span.
• 4b2d2b31e Roll third_party/icu/ a622de35a..1112fa6b3 (5 commits)
• 0831fb85b Update span<> to raw_span<> when used as a class member.
• 9c2baafeb Make pdfium::span<> templated on Extent and InternalPtrType.
• ed10b5fef Roll v8/ a86e19715..fe4ad3b98 (253 commits)
• 85983f43c Add CPDF_ColorSpace::GetColorRef()
• 26046f36c Add a pixel test with a sRGB colorspace and a large sc operand value
• a22f600ba Roll Depot Tools from af6eabff5313 to fbb0301f1f70 (66 revisions)
• d6efd7aa0 Roll Code Coverage from 76f45e718405 to 10ce382356ce (4 revisions)

</details>

Changes (Release 4.28.0)

Summary (pypdfium2)

• get_text_range(): Fixed a buffer size regression introduced in v4.26.0, caused by an unexpected behavior change in pdfium (thanks @elonzh for the bug report, {issue}298). Since that change, it is not possible anymore to tell the exact amount of memory needed, so we have to allocate for the worst case. Therefore, while this problem persists, it is recommended to instead use get_text_bounded() where possible.

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.27.0 and 4.28.0 (latest commit first):

• 6d96769 [autorelease main] update 4.28.0
• 8f6ecb0 readme/caller-datafiles: update ctypesgen command
• 02cd006 Reduce some RST indents from 4 to 3
• cd770e6 Add ability to force get_text_range()
• 8daf76b textpage: fix up some typos
• 380f30f Changelog for #298
• 47a2b81 Possible workaround against #298 / pdfium bug 2133 (#301)
• 26e7f60 readme: slightly rephrase
• 2f297a5 Add contributions/response policy

</details>

<details> <summary>PDFium commit log</summary>

Commits between 6281 and 6337 (latest commit first):

• 09fbd30d5 Rename string's raw_span() method to unsigned_span().
• ef0eeaa9e Fix wrong matrix outputs in CPDF_PageContentGenerator for path objects
• f19f46647 Fix wrong matrix outputs in CPDF_PageContentGenerator for text objects
• 081e8bb68 Fix incorrect current transformation matrix when saving PDFs
• 28483abbe Add path objects tests for a PDF saving bug
• 78e300622 Change GetColor() to WriteColorToStream()
• be20f54f3 Update UNSAFE_BUFFER macros to match chromium/src/base
• 71e2229aa Add text object version of a more complex test for a PDF saving bug
• ff374196e Remove out-parameters from CPDF_Color::GetRGB()
• 967494c5e Remove out-parameters from CPDF_ColorState::Set{Color,Pattern}()
• 3189488fe Do no write out identity matrices in CPDF_PageContentGenerator
• 8ebeb124b Fix building with GCC
• 504ae0c73 Fix nits in CPDF_PageContentGeneratorTest
• 3055d3857 Make CFX_RenderDevice::GetDIBits() take RetainPtrs by value
• 36cd3f41e Rename some colorspace methods
• ac728e5cb Rename CPDF_ICCBasedCS member variables
• 8fa6a324c Roll third_party/zlib/ 646b7f569..3787595bb (4 commits)
• 03e96fc9d Remove the matrix from CPDF_GeneralState
• 624807fbd Avoid "unsafe" string indexing in PDF_NameEncode().
• f1805084d Convert EXPECT_STREQ(x, y.c_str()) to EXPECT_EQ(x, y).
• 0c6ef5db1 Avoid result string with trailing NUL in XFA Decode().
• 82e2c19b8 Roll third_party/skia/ 9832c7722..49f18efdf (331 commits)
• 85589aac0 Roll Catapult from f448d5bf8e57 to 4dc7721a1444 (93 revisions)
• 22f234e4d Roll libpng from f11b2ae20fa0 to 3c7486b231c7 (2 revisions)
• 530f34f13 Roll third_party/skia/ 6279c88b9..9832c7722 (80 commits)
• 60bcaeb27 Make core/fxcrt compliant with UNSAFE_BUFFERS() macro.
• 0744e71e2 Avoid some UNSAFE_BUFFER noise in fpdf_parser_utility.h.
• df60f7f4c Fix incorrect matrix outputs in CPDF_PageContentGenerator
• 074387f08 Add a more complex test for a PDF saving bug
• 88eff81cc Add a test case for a PDF saving bug
• 314d76477 Simplify PDF_EncodeText() using FX_UTF16Encode()
• af1239af6 Make CPDF_IccProfile's dependency more direct
• 3771a29b4 Remove CFX_Font::IsEmbedded()
• 050ae79e8 Stop making CPDF_IccProfile an Observable
• 038d39b31 Avoid more future unsafe buffer usage in StringDataTemplate.
• 9108588e6 Move remaining code out of third_party/base and into core/fxcrt
• b8ea87677 Remove remaining NoDestructor usage
• 01e6d560e Convert some C-style arrays to std::array<>.
• a7fca8a4f Add a way to undo a previous FPDF_SetSystemFontInfo() call
• b4fb36188 Re-write some unsafe string code prior to UNSAFE_BUFFERS.
• fec5a9706 Roll v8/ b6fd2f17b..a86e19715 (464 commits)
• 04a9cf6cb Make CodePointView::Iterator() demonstrably safe.
• f3209d029 Fix build with chrome plugin enabled but Partition Alloc disabled,
• 7f1ff0f44 Roll MarkupSafe from 0bad08bb207b to e582d7f0edb9 (1 revision)
• 2be9efb5f Roll Instrumented Libraries from 0011c28c8d35 to 0893d760101b (1 revision)
• 132a5215a Roll Jinja2 from e2d024354e11 to c9c77525ea20 (1 revision)
• 43bfc30b0 Copy absl::WrapUnique()'s static_asserts into pdfium::WrapUnique()
• 6261e1499 Remove code in the form of "return std::move(local_var);"
• d72fd575f Move third_party/base/ptr_util.h to core/fxcrt
• 34e34057a Merge third_party/base/memory/aligned_memory.h into fx_memory.h
• ee6325efe Move third_party/base/test/scoped_locale.* to testing
• 81b3f39ed Move third_party/base/{debug,win} to core/fxcrt
• e89957979 Convert CFX_XMLParser::current_text_ to WideString
• f36006cdf Move third_party/base/numerics to core/fxcrt/numerics
• d4c0790fe Rename TrimLeft()/TrimRight() to TrimFront()/TrimBack().
• 1908cfc53 add file annot api
• f778d3c42 Move third_party/base/containers/*.h to core/fxcrt/containers
• 86aa2fb2e Move {Byte,Wide}String::Trim{,Left,Right}() into StringTemplate<>
• ba6031ad9 Force LF line ending for the AUTHORS file
• 67963ba70 Remove Fuchsia support
• a426b95b7 Fix typo in public/fpdf_sysfontinfo.h
• 812acaddb Disallow absl::optional usage via include_rules
• 05f42a1cc Enforce checkdeps when submitting CLs
• 1d732b2aa Fix include rules in cfx_glyphcache.cpp
• 37935952b Move third_party/base/span.h to core/fxcrt
• 7a3e5c034 Move {Byte,Wide}String::Replace() to StringTemplate<>
• a6bea32c5 Get rid of FX_GET_32WORD macro.
• dbff3cbe9 Use more spans in Revision6_Hash()
• d4ee164ef Move {Byte,Wide}String::SetAt() into StringTemplate<>
• 41760201f Move {Byte,Wide}String::Find() into StringTemplate<>
• 88e1fe5c3 Remove fxcrt::ByteSwapTo* functions
• 006476b26 Move {Byte,Wide}String::Insert() to StringTemplate<T>
• b9bd64794 Move {Byte,Wide}String::Delete() into StringTemplate<T>.
• 12772dac9 Consolidate byteorder code
• 2edcdd72f Fix use-after-move in CPDF_RenderStatus::CompositeDIBitmap()
• 549afab11 Convert fx_random.cpp to use safe types
• aecfce306 Use std::array<> in fx_coordinates.cpp.
• e0742615a Add missing includes uncovered by libc++ change
• ca0dc045d Roll third_party/skia/ a9db1213b..6279c88b9 (349 commits)
• a747ba711 Roll build/ 9ca0d2ce9..386c65667 (118 commits)
• f283eab76 Add UNSAFE_BUFFER annotations to fx_dib.h
• 4ccd18a00 Move even more code still into StringTemplate.
• 5488b8f20 Get rid of pointer arithmetic in *MSBFIRST() and *LSBFIRST() macros.
• b031c22a8 Give better error diagnostic in cpdf_dictionary.h
• df0228d9b Put GetBuffer() and ReleaseBuffer() in StringBaseTemplate
• 64571d5d1 Avoid adding stream objects directly to arrays in CPDF_SyntaxParser
• 88b642dd8 Roll tools/clang/ 2b9d966ec..ff84dc245 (41 commits)
• 457ff0f6e Place common code for byte/wide strings in StringTemplate.
• 4306e55b5 Combine FX_wcspos() and FX_strpos() into fxcrt::spanpos().
• 5299db5f1 Encapsulate FT_Set_Pixel_Sizes()
• 56f5c3b67 Roll Zlib from 956936c53cb6 to 646b7f569718 (3 revisions)
• aad37f1a2 Move WideString::WStringLength() to cpdfsdk_helpers.cpp
• c3bf5b2ae Add runtime check for streams in CPDF_Array::SetAtInternal() and friends
• 778a2f631 Do not let CPDF_Array::SetNewAt() and friends take a CPDF_Stream
• ba0b98cbc Make RenderDeviceDriverIface::SetDIBits() take RetainPtrs by value
• 9dfb129b5 Return RetainPtr<> from StringData::Create()
• c764fe091 Avoid UNSAFE_BUFFER operations in core/fxcrt/{byte,wide}string.h
• 467e8dde5 Remove ByteString::AllocCopy() and WideString::AllocCopy().
• bb51448d6 Ensure CPDF_Stream's dictionary is always a direct object
• 4fbdcdcbf Give "V4" and "V5" parser code better names
• 244491fa8 Mark CVE-2023-52355 as mitigated in third_party/libtiff/METADATA
• d85e88249 Fix PDF loading when an initial xref stream references a xref table
• 24c6be692 Switch from absl::optional to std::optional
• db46cc55f Add another pixel test for incorrect cross reference stream handling
• 907b76519 Sync Chromium's include_rules for Abseil
• 59f3856c9 Spanify FX_strstr() and FX_wcsstr()
• 35d21add5 Avoid potential msan warnings in test SpanEquals.Empty
• 4097f1d49 Add new base::span<> functions to pdfium::span<>.
• 0a15a0573 Roll buildtools/, third_party/libc++/src/, third_party/libc++abi/src/
• 2f1b073ae Add improvements to core/fxcrt/span_util.h
• 03a847d67 Tidy some code in fx_crypt_aes.cpp
• 187fa9288 Introduce UNSAFE_BUFFERS() macro to PDFium.
• 4282836f3 Roll Depot Tools from 35a530663508 to af6eabff5313 (49 revisions)
• 416a9d4d5 Roll Code Coverage from 2bd00824f032 to 76f45e718405 (1 revision)
• 4a3765ad9 Roll tools/rust/ e721a72ad..bcaf16e55 (9 commits)
• 5d809a2bc Remove limit on number of form XObjects within a form XObject
• 4c76a8ffe Update reclient_version to 0.130.0.546556b-gomaip
• 8a4b1b742 Roll third_party/libunwind/src/ 2602aecdf..fc505746f (7 commits)
• 8017ac552 Roll gn from 85944ebc24a9 to a2e2717ea670
• c385302dc Roll third_party/abseil-cpp/ b7ad4e9ef..d391aa34a (8 commits)
• 4048722ad Roll third_party/freetype/src/ ca76683b7..47574f7ea (10 commits)
• 2a585a8e5 Ignore /Prev for hybrid-reference files
• 815cc45c3 Revert ProcessCrossRefV5Entry() overwrite change
• a8e1f1379 Add pixel test for an edited PDF that regressed

</details>

Changes (Release 4.27.0)

Summary (pypdfium2)

• Added ability to define $CTYPESGEN_PIN when building sdist via ./run craft pypi --sdist, which allows to reproduce our sdists when set to the head commit hash of pypdfium2-team/ctypesgen at the time of the build to reproduce. Alternatively, you may patch the relevant pyproject.toml entry yourself and use PDFIUM_PLATFORM=sdist python -m build --sdist as usual.
• Set up Dependabot for GH Actions. Updated dependencies accordingly.

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.26.0 and 4.27.0 (latest commit first):

• 4c4c362 [autorelease main] update 4.27.0
• 2d165af readme: remove outdated helper
• 112fb34 Readme: mention prominent embedders
• b0352a1 Correctly reland commit 0d1cc21
• 34b356b Revert "Bump setup-miniconda 2->3 & {upload,download}-artifact 3->4"
• 137b71a Add dependabot to changelog
• ed32d64 dependabot: ignore broken workflow-dispatch 121
• d94ee90 build(deps): bump actions/setup-python from 4 to 5
• ca59682 build(deps): bump actions/upload-pages-artifact from 1 to 3
• 00556fe Bump deploy-pages from 1 to 4 (closes #294)
• 21ca95b Create dependabot.yml for GH actions
• 0d1cc21 Bump setup-miniconda 2->3 & {upload,download}-artifact 3->4
• 9cb5c38 Remove some legacy code for conda_raw
• a584927 misc improvements
• 0324787 workflows/test_sourcebuild: check version
• 9289258 workflows/test_sourcebuild: fix typo
• 3b4ef4b Try to fix sourcebuild
• 2e84994 autorelease: remove excessive note/todo/fixme marks
• a8c3cd3 Remove git status assert
• bb68b1a dirty: pass through previous state via env var
• db4ebbb Add some checks before ignoring dirty state
• 4558229 ctypesgen: allow passing in custom pre-processor
• 7248bc4 build: call into API directly
• fab4102 Avoid odd use of any() where or does the trick
• d968173 readme/PDFIUM_PLATFORM: account for none -> sdist renaming
• a2d66dd Update changelog
• 71b7a20 craft_packages/pypi: allow building sdist/wheels only
• 629bb97 craft_packages: make ctypesgen pin configurable
• af5216b slightly polish manifest / setup.cfg
• ebc8715 Bump copyright year
• 24d438f fix license of ./run script
• 3e93f56 Amend changelog
• c72b7a9 Revert "temporarily comment out testpypi upload"

</details>

<details> <summary>PDFium commit log</summary>

Commits between 6233 and 6281 (latest commit first):

• 7c7a6087e Add FPDFText_LoadCidType2Font() API
• 41015d113 Encapsulate FT_Get_Glyph_Name() calls in CFX_Face
• 4d00d9737 Fix another typo in ToUnicode template constant
• f22325c95 Make PDF_USE_SKIA a public build definition
• ccc38c258 Remove more dead code in CFX_DIBitmap
• 8abe178b4 Clean up CPDF_RenderStatus::LoadSMask()
• fe586ee39 Remove dead code in CFX_DIBitmap
• e24607c76 Roll base/allocator/partition_allocator/ 72b7e1a3f..42bf756b3 (38 commits)
• 202ebe6ad Roll Catapult from f2abc0cd0cd8 to f448d5bf8e57 (64 revisions)
• dfd1ec916 Roll Memory Tools from 216d33bbf954 to 4753a8cbcd7c (4 revisions)
• 9a2b614bd Roll libpng from 1db23788f5aa to f11b2ae20fa0 (1 revision)
• bdfe4aa57 Unshare CFX_DIBitmap::SetChannelFromBitmap()
• 4bf70256b Remove CFX_Face::GetAdjusted{Ascender,Descender} methods
• 6f3cf81a8 Change MultiplyAlphaMask() to take a CFX_DIBitmap
• 82f4360b8 Consolidate code into CPDF_ImageRenderer::CalculateDrawImage()
• cbf5da504 Refactor LoadCompositeFont() to extract useful helper functions
• a88402105 Check for errors first in LoadSimpleFont() and LoadCompositeFont()
• e06220af3 Rename many variables inside fpdf_edittext.cpp
• 7666160f5 Fix various nits inside fpdf_edittext.cpp (for reals)
• f689b6a68 Fix various nits inside fpdf_edittext.cpp
• d617c4e8b Update readme for Reclient instead of Goma
• 32c29e431 Encapsulate more bounding box code in CFX_Face
• 3f7847662 Move NormalizeFontMetric() out of CPDF_Font
• a0fd10adf Rewrite and rename CPDF_Font::TT2PDF()
• 4be416d76 Give variables better names in CPDF_ImageRenderer
• 54f25ce7a Ensure CPDF_Stream always has a dictionary
• 720ffea6a Fix typo in ToUnicode template constant
• 8acd78867 Remove the ability to create an uninitialized CPDF_Stream
• 88d3d5674 Simplify CPDF_Stream::InitStreamFromFile() and minimize usage
• f21a92341 Remove CPDF_Stream::InitStreamWithEmptyData()
• bfc71b9f8 Add more CPDF_Stream constructors
• 4c4f9ab25 Roll v8/ 83ad2aebb..b6fd2f17b (257 commits)
• ed6dfc4cd Do not let CPDF_Array::SetAt() and friends take a CPDF_Stream
• 41109a4bb Add runtime check for streams in CPDF_Dictionary::SetForInternal()
• cc81d1163 Make FixedSizeDataVector more similar to base::HeapArray.
• 74a9b8f30 Do not let CPDF_Dictionary::SetNewFor() take a CPDF_Stream
• 595d4fb37 Double the form XObject limit
• 25d775f4e Import base::span_from_ref() into span.h
• 7b9fa8a5e Simplify IsObjectStream() inside cpdf_object_stream.cpp
• 75e77041a Do not let CPDF_Dictionary::SetFor() take a CPDF_Stream
• 40dd82860 Introduce fxcrt::reinterpret_span<>()
• 29ec83a0e Make CFX_RenderDevice::StretchBitMask() take RetainPtrs by value
• a12a3ec57 Make RenderDeviceDriverIface::StretchDIBits() take RetainPtrs by value
• 03ad3c563 Make CPDF_ToUnicodeMap::HandleBeginBFRange() faster
• f6fc06e8e Keep ubsan ignorelist.txt to use regex
• 2ddc2233d Roll MarkupSafe from 006709ba3ed8 to 0bad08bb207b (1 revision)
• 945576e5b Roll Zlib from 562a4372d176 to 956936c53cb6 (4 revisions)
• c78de6c97 Roll Jinja2 from 515dd10de9bf to e2d024354e11 (1 revision)
• de69973b9 Add CFX_DIBBase::TakePalette()
• 6c8ad61ca Make RenderDeviceDriverIface::StartDIBits() take RetainPtrs by value
• 203a271b8 Handle MultiplyAlpha(1.0f) within MultiplyAlpha()
• 9423718a7 Remove out-parameter from CFX_DIBBase::ConvertBuffer()
• e0892d95e Make RenderDeviceDriverIface::SetBitsWithMask() bitmap params const
• 1ee2be3c7 Remove dead code from CFX_DIBBase::ConvertBuffer() and related code
• 281b2c413 Remove unused CFX_DIBitmap::SetPixel()
• 0a2a8a32e Change CPDF_ImageRenderer to store a float alpha value
• 68f94c8c4 Pass RetainPtrs in CFX_RenderDevice and CFX_DIBitmap by value
• 8b2f58994 Change CFX_RenderDevice::StartDIBitsWithBlend() to take a float alpha
• cdadc9032 Change CPDF_RenderStatus::CompositeDIBitmap() to take a float alpha
• 31b7951f6 Change CFX_ImageRenderer to use float alpha values
• 376c79ba1 Change CFX_BitmapComposer to use float alpha values
• 2f66170bd Switch to NOTREACHED_NORETURN() in core/fxge/win32
• 13eb23bec Make RenderDeviceDriverIface::MultiplyAlphaMask() parameter more const
• 7a42572bb Change SetBitsWithMask() methods to take alpha as a float
• aa332c819 Change RenderDeviceDriverIface::StartDIBits() to take alpha as a float
• 02881c0a7 Change CFX_DIBitmap::MultiplyAlpha() to take a float
• 111a8a2a3 Avoid overloading MultiplyAlpha()
• 57e5c5fd3 Implement CFX_DefaultRenderDevice::Clear() for all build configs
• 3cbf75f84 Make RenderDeviceDriverIface more const-correct
• a1d7dbd4c Make CFX_DIBitmap more const-correct
• 7532c21d1 Remove dead code in CFX_DefaultRenderDevice::AttachAggImpl()
• b0a3f99a9 Make CFX_RenderDevice::GetBitmap() const-correct
• 2b0890f3f Mark CFX_RenderDevice::SetBitmap() as protected
• d569a5d1b Avoid FT_FaceRec usage in various places
• 9e6c4f02f Roll Depot Tools from 1714cc6e5ae3 to 35a530663508 (41 revisions)
• 05c3c8cc7 Roll Code Coverage from d0698ae5eae9 to 2bd00824f032 (2 revisions)

</details>

Changes (Release 4.26.0)

Summary (pypdfium2)

• Pin ctypesgen in sdist to prevent reoccurrence of {issue}264 / {issue}286. As a drawback, the pin is never committed, so the sdist is not simply reproducible at this time due to dependence on the latest commit hash of the ctypesgen fork at build time.

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.25.0 and 4.26.0 (latest commit first):

• 93650f0 [autorelease main] update 4.26.0
• 8f45f33 temporarily comment out testpypi upload
• d11ed9f Add changelog regarding sdist
• 7aba111 Presumably fix PyPI upload of sdist (ignore dirty)
• 1e7536f Add back manylinux2014 to be on the safe side
• b774be5 some cleanups
• 2eb90a2 Slightly improve PR template
• a1a1d37 conda_helpers: blacklist pdfium 6219
• a521a6e readme: move down conda
• ba2db80 setup/bindings: fix flags not being passed through
• cf256ee Adapt to change in pdfium headers
• 6ef3b44 add back srcinfo to bindings file
• 0db98b4 Mark regex as such
• a9d6dfc Adapt to c_void_p -> int auto-cast
• 47857b6 sdist: implement ctypesgen pin
• 7e90ecd Call into ctypesgen API directly
• 51612d3 Counterpart to ctypesgen library_sharing branch (#285)

</details>

<details> <summary>PDFium commit log</summary>

Commits between 6164 and 6233 (latest commit first):

• 29ff08e81 Roll v8/ fc242dcac..83ad2aebb (53 commits)
• a7424743f Add third_party/fp16 dependency
• f6d55c802 Relax pitch check in CFX_DIBitmap::CalculatePitchAndSize()
• 06b951386 Enhance FixedSizeDataVector<>.
• d7e87b0a6 Roll tools/clang/ dbe34d7b7..2b9d966ec (5 commits)
• 4337c488a Roll buildtools/ and third_party/libc++/src/
• 2049878d9 Show FPDFBitmap_GetFormat() issue for bitmaps with external buffer
• 950682b99 Use std::vector<> in testing/test_fonts.h
• 43f921adf Roll v8/ 3469157c0..fc242dcac (66 commits)
• 143c5b262 Update reclient_version to 0.125.0.f3883c2-gomaip
• fbd64b666 Roll third_party/libunwind/src/ 278e5fbaf..2602aecdf (3 commits)
• 05af9ea18 Roll third_party/libc++abi/src/ 4cb5c2cef..8806fb8bb (5 commits)
• da14fcb53 Simplify matcher string in fxcrt death tests
• 4821f9fb8 Update android_toolchain_version to wpJvg81kuXdMM66r_l9Doa-pLfR6S26Jd1x40LpwWEoC
• 62938cd83 Update gn_version to 85944ebc24a90ec1e489e85a46fdc68542c3146f
• a03eebd66 Add missing FontEncoding::kNone value
• 8810061a8 Roll tools/rust/ 9f2ba7f84..e721a72ad (11 commits)
• dddfd7190 Roll third_party/freetype/src/ 8f255c89e..ca76683b7 (8 commits)
• 3eae66ac2 Roll third_party/skia/ e0768dea5..a9db1213b (208 commits)
• a2f26cdf4 Roll build/ 9b8bc79c2..9ca0d2ce9 (79 commits)
• 328af3224 Fix Skia + EMF rendering for transparencies
• 899ff64f2 Roll base/allocator/partition_allocator/ 82380dc78..72b7e1a3f (24 commits)
• f2d10c6cb Roll third_party/abseil-cpp/ 0764ad493..b7ad4e9ef (9 commits)
• 593dcd2d9 Roll Memory Tools from 884774321e20 to 216d33bbf954 (2 revisions)
• a7755c59d Roll Catapult from f0228fa92b0a to f2abc0cd0cd8 (60 revisions)
• 88ad55aba Make fxge::FontEncoding independent from FT_Encoding
• 7b129a284 Encapsulate FT_Get_First_Char() and FT_Get_Next_Char()
• 704cc481c Fix regression where FPDFText_FindNext() cannot find the search term
• 471679d54 Use the dedicated ConfigurePartitionsForTesting()
• 3e624ce0f Roll base/allocator/partition_allocator/ e9591a3fa..82380dc78 (24 commits)
• 9f94a1a4a Add more FPDFTextEmbedderTests for finding text
• 45a5ea16c Add FPDFTextEmbedderTest case to show FPDFText_FindNext() regressed
• 3f3cb7b65 Validate width against stride in CFX_DIBitmap::CalculatePitchAndSize().
• 24a713a85 Remove CPDF_CrossRefTable::ObjectType::kObjStream
• 57e284ba2 Roll Zlib from 5daffc716bb6 to 562a4372d176 (12 revisions)
• a2c91f07a Encapsulate FT_Get_Sfnt_Table() calls
• 2708849c4 Encapsulate FT_Load_Sfnt_Table() calls
• 592da1277 Encapsulate FT_Get_Char_Index() and FT_Get_Name_Index() calls
• 7f50e6e23 Encapsulate font charmap code inside CFX_Face
• a9d080a7f Deduplicate constants / macros between cfx_face.cpp and cfx_font.cpp
• 4870bd3e2 Move some FreeType-specific code from CFX_Font to CFX_Face
• bd3e9f3d9 Remove unused CFPF_SkiaFont code
• 65dc04dda Move CFX_GlyphBitmap creation code into CFX_Face::RenderGlyph()
• 4f26084fa Remove spurious fx_freetype.h includes
• b2d4f1104 Add pdf_enable_fontations GN flag
• 2cc859137 Roll v8/ e725aa2be..3469157c0 (140 commits)
• 07b01a0f6 Encapsulate FT_Select_Charmap() inside CFX_Face
• 69f05fecc Add enum class fxge::FontEncoding
• b26a1101d Rename SKIA_SUPPORT to PDF_USE_SKIA
• 79be3dc12 Roll tools/clang/ abf153714..dbe34d7b7 (21 commits)
• c199ca664 Add flag to disable blink gc plugin check
• dda631d81 Encapsulate font metrics code inside CFX_Face
• 2d34bcaab Avoid out-of-bound access in CPDF_TextPageFind::FindNext()
• c8975d2a2 Make some small refactorings in CPDF_TextPageFind::FindNext()
• f1052595f Encapsulate font bbox code inside CFX_Face
• 0527caf4c Encapsulate font name code inside CFX_Face
• cf2e29e38 Encapsulate font stream code inside CFX_Face
• f4e15e992 Encapsulate font style code inside CFX_Face
• b70a91734 Encapsulate font flag code inside CFX_Face
• cb1cd2f12 Convert FX_Number to absl::variant<>.
• cb19b4be6 Remove CPDF_RenderOptions::RenderType.
• 2c8f00392 Consistently use "page_object" in public/fpdf_edit.h
• 76a26983e Add std::u16string FX_UTF16Encode(WideStringView)
• ac2bc2320 Roll Depot Tools from ea9bf7f343d3 to 1714cc6e5ae3 (67 revisions)
• b4130af2f Roll Code Coverage from 61632b07bdc6 to d0698ae5eae9 (5 revisions)
• 423ab6b69 Tidy some CPDF_CrossRefTable:: nested class usage.
• a211cf1c9 Add an embedder test for a FPDFText_FindNext() crash
• 64cfae43c Return v8::Local<> from CFXJSE_RuntimeData::GetRootContext().
• f810210f2 Roll base/allocator/partition_allocator/ 6800d0930..e9591a3fa (47 commits)
• e6ee9ef0a Sync PartitionAlloc config with Chromium's
• f68bb7f1c Roll v8/ a7273c4f2..e725aa2be (305 commits)
• 630703378 Avoid some comparisons against data.size() - 1.
• 5c8b497cd Unconditionally enable absl support in googletest
• f8b509b20 Roll v8/ a9cdaea34..a7273c4f2 (303 commits)
• a7a1e6a48 Switch away from deprecated v8::Object::SetAccessor() calls
• 8361a18bb Roll third_party/freetype/src/ 028b0d5c1..8f255c89e (23 commits)
• 706a395ce Roll third_party/freetype/src/ 6d6607b8b..028b0d5c1 (9 commits)
• 9575d0528 Roll third_party/freetype/src/ 55d0287cf..6d6607b8b (4 commits)
• 86f7fb747 Roll v8/ 06aba4270..a9cdaea34 (90 commits)
• 4e1d84af4 Roll tools/rust/ c2a0e44aa..9f2ba7f84 (5 commits)
• 6ba8a45f0 Roll third_party/libc++abi/src/ 2ca9f3871..4cb5c2cef (14 commits)
• a8948f9f0 Roll third_party/libunwind/src/ 69b8c6469..278e5fbaf (7 commits)
• 089feda8d Remove some stray unicode look-alike chars from comments.
• b6f021180 Roll build, buildtools, abseil-cpp, and libc++
• 1393328db Roll third_party/skia/ 3a79d7a61..e0768dea5 (101 commits)
• 8ac85712a Roll third_party/nasm/ 7fc833e88..f477acb10 (2 commits)
• b29767386 Roll gn from e4702d740906 to 7367b0df0a0a
• 5f77e7d13 Roll Instrumented Libraries from 48a6beefc1bb to 0011c28c8d35 (7 revisions)
• f13a09ed0 Roll Memory Tools from bb03b820532d to 884774321e20 (1 revision)
• fea01fa9e Make WideString::ToUTF16LE() do surrogate splitting if needed

</details>

Changes (Release 4.25.0)

Summary (pypdfium2)

• Removed multiprocessing from deprecated PdfDocument.render() API and replaced with linear rendering. See below for more info.
• setup: Fixed blunder in headers cache logic that would cause existing headers to be always reused regardless of version. Note, this did not affect release workflows, only local source re-installs.
• Show path of linked binary in pypdfium2 -v.
• conda: Improved installation docs and channel config.
• conda/workflows: Added ability to (re-)build pypdfium2_raw bindings with any given version of pdfium. Fixes {issue}279.
• Made reference bindings more universal by including V8, XFA and Skia symbols. This is possible due to the dynamic symbol guards.
• Instruct ctypesgen to exclude some unused alias symbols pulled in from struct tags.
• Improved issue templates, added pull request template.
• Improved ctypesgen (pypdfium2-team fork).

Rationale for PdfDocument.render() deprecation

• The parallel rendering API unfortunately was an inherent design mistake: Multiprocessing is not meant to transfer large amounts of pixel data from workers to the main process.
• This was such a heavy drawback that it basically outweighed the parallelization, so there was no real performance advantage, only higher memory load.
• As a related problem, the worker pool produces bitmaps at an indepedent speed, regardless of where the receiving iteration might be, so bitmaps could queue up in memory, possibly causing an enormeous rise in memory consumption over time. This effect was pronounced e.g. with PNG saving via PIL, as exhibited in Facebook's nougat project.
• Instead, each bitmap should be processed (e.g. saved) in the job which created it. Only a minimal, final result should be sent back to the main process (e.g. a file path).
• This means we cannot reasonably provide a generic parallel renderer, instead it needs to be implemented by callers.
• Historically, note that there had been even more faults in the implementation:
  • Prior to 4.22.0, the pool was always initialized with os.cpu_count() processes by default, even when rendering less pages.
  • Prior to 4.20.0, a full-scale input transfer was conducted on each job (rendering it unusable with bytes input). However, this can and should be done only once on process creation.
• pypdfium2's rendering CLI cleanly re-implements parallel rendering to files. We may want to turn this into an API in the future.

Due to the potential for serious issues as outlined above, we strongly recommend that end users update and dependants bump their minimum requirement to this version. Callers should move away from PdfDocument.render() and use PdfPage.render() instead.

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.24.0 and 4.25.0 (latest commit first):

• 45dbb2c [autorelease main] update 4.25.0
• 6f5df31 workflows/main: minor comments cleanup
• 4c0aee6 conda: get rid of effectively dead bundling code
• 816f421 craft_packages: cut overly extensive comments
• d140de2 Handle latest version separately for conda pdfium/pypdfium2_raw
• 63a17ba conda: sync pypdfium2_raw schedule with pdfium-binaries
• cdb1fe4 instruct ctypesgen to exclude some garbage symbols
• adf89b0 docs correction
• afc4740 reinstall schedule
• 6024f15 Make document-level renderer harmless by linearization (#282)
• 7c53bd1 temporarily inhibit schedule
• 0fe8578 ctypesgen: add --no-macro-guards
• 8f0a425 readme: update ABI bindings section
• 6a0a67b get_text_range: slightly enhance docs
• 5886522 improve changelog/template, add tasks
• acd1719 conda/recipes: do not wrap env vars in quotes after all
• f3cc2dd continue on refbindings
• 0822682 continue on PR template (setup)
• e26b24d Prepare changelog
• f93532d setup: avoid explicit mention of clang
• ad56b56 docs: continue on conda
• 54d2ffc craft/conda: update a code comment
• 59dc178 issue-templates: rename "package" to "install" in titles
• 9a1dcd3 Inline build version handling in craft_packages
• 3b418eb conda_raw: handle rebuilds (#280)
• ecb77d2 Add skia to refbindings flags (+ thoughts on external headers)
• 01727fc setup-miniconda: correct channel prio
• a5f2c5b PR template nits
• 100d7e4 Tighten issue template descriptions
• ddc8abc refbindings: define feature flags
• 136a655 setup: fix blunder in headers cache logic
• 67de448 Continue on PR template
• a1037a3 Add draft pull request template
• 9f54a76 issue template generic: clarify checkbox 2 (CC #277)
• c5c558a Add note on version info
• 8b454c0 nits
• 24839ea conda: slightly improve script and recipes
• 9e73c75 wf/conda: try to make sure we install the built package
• 8a438f8 readme: conda section again
• 2fbac25 workflows/conda: remove a redundant layer of channels
• c6dd1d1 readme: rework conda section again
• 28649ad issues/conda: check python executable
• 07d336e readme: revise conda instructions
• 45e8f0c cli/version: show only libpath rather than whole loader info
• 81f24de dep5-wheel: add helpers version file
• 09d194f manifest: fix missing reuse/dep5 include blunder
• 1cf9442 req: sunset defaults.txt
• d95efed req: test implies converters
• 9e29101 workflows/main: reinstall monthly schedule
• a2c79ad slightly update readme
• 15a35ee nit: move variable
• e289d61 readme: explain state of system install option
• a67456d version: dump library loader info
• bdbf30d musl: update comment
• d4aa65a update changelog
• 2dfc4f1 slightly improve prev commit
• d4c1ef3 Require explicit version with prepared target
• 30c60af Revert "temporarily comment out testpypi upload"

</details>

<details> <summary>PDFium commit log</summary>

Commits between 6110 and 6164 (latest commit first):

• 7388bd02f Make WideStringToBuffer() call Utf16EncodeMaybeCopyAndReturnLength()
• b0ab5e964 Remove unnecessary argument from FuseSurrogates().
• dbf4b0a4c Tidy GN files by introducing group pdfium_pa.
• d324c7218 Remove unused FlateEncode() / FlateDecode()
• 4419e5152 Add comments about ByteString::GetBuffer() and ReleaseBuffer().
• 069ebe4c9 Introduce result struct for IPWL_FillerNotify::OnBeyforeKeyStroke().
• c65f45e6b Make CXFA_EventParam constructor take a type argument
• 5b91a0148 Remove FX_UTF8Decode() in favor of WideString::FromUTF8()
• d06523d84 Make WideString's FromUTF16BE / FromUTF16LE do surrogate fusing
• e2704cba8 Use dedicated struct instead of std::pair in ExecuteBoolScript()
• 28c6c6dc7 Remove out-parameter from CFXJSE_Context::ExecuteScript()
• ce9900139 Simplify tests that use FORM_GetSelectedText()
• 03c23083a Use spans in more places
• 8b2380dce Add pdfium::as_byte_span() helper
• bee6d0b15 Remove out parameter from DynPropGetterAdapter().
• 40d92c45b Make WideString's FromUTF16LE(), FromUTF16BE() take bytes, not wchar_t
• 8c2fc5da8 Roll base/allocator/partition_allocator/ 4d90e004b..6800d0930 (7 commits) https://chromium.googlesource.com/chromium/src/base/allocator/partition_allocator.git/+log/4d90e004b935..6800d0930f06
• 6bef48cda Unify object type detection code inside cpdf_document.cpp.
• 4d0aaaa07 Consistently name variables in CPDF_Document::InsertDeletePDFPage()
• d1debc773 In PDF_DecodeText() UTF-16, do surrogate fusion before language code stripping
• b98c5b4c0 Clean up CountPages()
• 43d835b47 Fix object type detection in CPDF_Document::InsertDeletePDFPage()
• e4424849c Update reclient_version to 0.120.1.f75cfb7-gomaip
• 0db38df32 Add FPDFPPOEmbedderTest.ImportIntoDocWithWrongPageType test case
• 8df2e8494 Roll Catapult from 47efdb4b1428 to f0228fa92b0a (63 revisions)
• aa7d390b4 Add support for UTF-8 text strings
• 9b8ac25af Simplify PDF_DecodeText() and new helper functions
• 5adcad9d3 Roll third_party/skia/ 8e9e16841..3a79d7a61 (69 commits)
• e2b69c4bb Sanity check the inputs to Blend()
• 6e7f70b39 Replace implicit dependency on global SkFontMgr
• 1e9d89db3 Extract language code stripping from PDF_DecodeText() into function
• 445b54a73 Extract surrogate fusing from PDF_DecodeText() into own separate function
• bb8fd49d1 Simplify Blend()
• 61307c2ad Unit test Blend()
• 2962e6ca2 Move Blend() function to its own file.
• a5bb284fd Roll Zlib from dfc48fc4de8e to 5daffc716bb6 (6 revisions)
• aae740cc1 Re-organize cppgc::Member<> members
• 16b2fa3fc Clean up CPDF_PageOrganizer::Init()
• acddfedb7 CHECK() the bitmap argument in CPDF_RenderStatus::CompositeDIBitmap()
• ad80a04d3 Split out skcms_sources into multiple GN targets.
• c512857c0 Roll third_party/skia/ 77aeee3b8..8e9e16841 (187 commits)
• cba9a3c1d Properly support the use_system_libtiff GN build option
• fa80feef8 Avoid setting the private tif_fd field in struct tiff
• 25df6e84c Mention "document outline" in public/fpdf_doc.h
• 8b1177f2d Fix undefined behavior in FXSYS_wcsnicmp()
• 5636e90a8 Allow ProcessCrossRefV5Entry() to overwrite existing entries
• 154e17543 Prefer ClearAndDelete() to delete ExtractAsDangling().
• d82c698a1 Upgrade vpython3 and wheels
• 5d87ac6ec Remove "six" python wheel
• ea0263079 Move fonts used for pixel tests to their own directories
• 56a444f10 Replace Copy() with operator=() in CPDF_{All,Graphic}States
• 5746eb685 Rename CPDF_GraphicStates::DefaultStates() to SetDefaultStates().
• 747015873 Stop inheriting from CPDF_GraphicStates
• 08f11e596 Roll libpng from 7e1f7e7b1063 to 1db23788f5aa (1 revision)
• 676f13456 Roll Depot Tools from 73b69b016703 to ea9bf7f343d3 (50 revisions)
• 1bfae352b Roll Code Coverage from f06a56e5b449 to 61632b07bdc6 (2 revisions)
• f3b5f3db3 Encapsulate CPDF_GraphicStates member variables
• 3c2845720 Encapsulate CPDF_AllStates member variables
• a2dc6ecce Ensure exactly 1 WCHAR_T_IS_*_BIT define is defined
• 18a2f3c02 Add some unit tests for FXSYS_wcsnicmp()
• a3ce9f4ae Roll base/allocator/partition_allocator/ 0d03e4082..4d90e004b (14 commits)
• 2af0a20e3 Fix how FPDFText_LoadFont() detects font glyph count
• cc923cac5 Add an embedder test to demonstrate a FPDFText_LoadFont() failure
• 57d1f79d4 Avoid the NULL, 0 undefined behavior problem in CFX_GlyphCache
• 4da226a07 Change GetFileContents() test utility to return a vector
• 1bcae281c Roll build/ ab8815d43..292639dc3 (1 commit)
• 4a4d922ba Roll build/ f4167331a..ab8815d43 (29 commits)
• 7233e99fc Use span in Processor::ProcessPdf()
• f0e6edf81 Use pdfium::base::checked_cast() in a few test files
• 1225d9d80 Remove out-parameter from PathService::GetTestFilePath()
• 16bebb03b Extend PDFEditImgTest.NewImageObjLoadJpeg to write out a PDF
• c930b5516 Add missing stdint.h include in span.h
• 42154f4c1 Rename some "remain" variables to "remaining"
• 6a34da391 Fix misalignment between Redo and Undo after consecutive text pasting.
• 5f814e878 Fulfill a TODO in cpdf_dib.cpp
• 9be49d4b0 Add rust_build_tests to pdfium_all when enable_rust=true
• ae960583a Roll Instrumented Libraries from 032e9c850ab9 to 48a6beefc1bb (2 revisions)
• 7a7c86c68 Roll Memory Tools from 8b06a5370188 to bb03b820532d (1 revision)
• d336e56dc Roll third_party/skia/ e8c78601e..77aeee3b8 (221 commits)
• 650399315 Update reclient_version to 0.118.1.ae3c3be-gomaip
• 75815063c Roll base/allocator/partition_allocator/ 6f90cb04a..0d03e4082 (16 commits)
• f76cff73a Roll third_party/libunwind/src/ 7608093d2..69b8c6469 (6 commits)
• 70062cf7a Roll v8/ 1fb69d9f5..06aba4270 (284 commits)
• e21a7e389 Roll fuchsia_gn_sdk_revision and fuchsia sdk

</details>

Changes (Release 4.24.0)

Summary (pypdfium2)

• Added GitHub issue templates

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.23.1 and 4.24.0 (latest commit first):

• 71d143f [autorelease] update changelog and version file
• c49dcca temporarily comment out testpypi upload
• a222c06 Fix sdist package getting wrong name
• 1b0a5c6 slightly polish previous commit
• abd8a4f sourcebuild: actually fix version (closes #276)
• 13ae34b Fix generic issue template style
• e10f667 Revert "sourcebuild: try to fix version..."
• 01c2355 sourcebuild: try to fix version...
• 4f2d3cc sourcebuild: add fixme regarding version
• 923e258 sourcebuild: build config corrections
• a7e5aa3 readme/install-system-caller: revise origin again
• 51da8a6 workflows/trigger: temporarily comment out main schedule
• 7d31730 setup nits/comments
• 9ca64b9 readme/install-source-caller: change origin format
• 51dab26 readme/issues: continue
• 286294b readme: add anchor icons to links
• d7ef006 Add draft instructions to build with caller-provided files
• 798b02b sourcebuild: comment out use_custom_libcxx
• a308025 to_full(): use namedtuple, improve sourcebuild version style
• 46e81b1 emplace: add back prettier repr
• d23b9f8 issue template nits
• ddab675 Revert "Make conda and prepared detectable"
• 063e4ec Make conda and prepared detectable
• f04f757 readme: try to make install sections linkable without heading
• 04c095d Continue on issue templates
• 44946e2 Add comment regarding to_full()
• a4fc943 bindings cache: take guard_symbols into account
• 3f3dd40 emplace: improve prints
• 6d860a4 emplace/bindings: use cached headers if available
• be2e25d emplace: use binary cache if only bindings are missing
• 8a33235 refbindings: allow system library loading
• df54e88 update_pdfium: fix descriptions (CC #272)
• a397ff7 templates/conda: add call to conda config --get
• 39e12e0 ctypesgen: add --no-system-libsearch if --runtime-libdirs given
• 0dd8e34 Improve issue templates
• db1e956 Add basic issue templates (#271)
• a5454bf Minor style improvements
• 3aa6c15 slightly reorder conda instructions (install line first)
• 5fb49a5 Simplify conda instructions
• 341c360 conda_helpers: avoid embedding test suite

</details>

<details> <summary>PDFium commit log</summary>

Commits between 6097 and 6110 (latest commit first):

• 0a34b6b28 Convert std::vector<v8::Local<T>> to v8::LocalVector<T>.
• 607c3faa1 Fix potential leak in CGdiplusExt
• 90589d465 Replace const-ref std::vector arguments with pdfium::span in fxjs.
• fc412acd0 Revert recent C++20 usage in CFX_FillRenderOptions
• 03c04196f Remove unnecessary LoadLibrary() call in CGdiplusExt
• fdb409aaf Roll third_party/freetype/src/ 7b308a29d..55d0287cf (17 commits)
• 9091e26f4 Add a test for rendering a transparency onto a white background
• 647a08001 Add support for the Rust toolchain
• 9cb2d6887 Update gn_version to e4702d7409069c4f12d45ea7b7f0890717ca3f4b
• e5f05d9c6 Roll third_party/libjpeg_turbo/ 30bdb85e3..9b894306e (2 commits)
• df282a629 Roll third_party/icu/ 985b9a6f7..a622de35a (2 commits)
• 9f182f957 Roll abseil-cpp, libcxx, libcxxabi, clang, buildtools and build
• a3895af47 Roll Catapult from 4f81c1e29597 to 47efdb4b1428 (70 revisions)

</details>

Changes (Release 4.23.1)

Summary (pypdfium2)

• Fixed (Test)PyPI upload.

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.23.0 and 4.23.1 (latest commit first):

• b1c62f3 [autorelease] update changelog and version file
• 69f8d76 Prepare new release
• ec280df update changelog
• 779872d Swap GH and PyPI publishing

</details>

Changes (Release 4.22.0)

Summary (pypdfium2)

• Changed PDFIUM_PLATFORM=none to strictly exclude all data files. Added new target system consuming bindings and version files supplied by the caller. Again, the setup API implications were accepted. Packagers that used none to bind to system pdfium will have to update.
• Enhanced integration of separate modules. This blazes the trail for conda packaging. We had to move metadata back to setup.cfg since we need a dynamic project name, which pyproject.toml does not support.
• Major improvements to version integration.
  • Ship version info as JSON files, separately for each submodule. Expose as immutable classes. Legacy members have been retained for backwards compatibility.
  • Autorelease uses dedicated JSON files for state tracking and control.
  • Read version info from git describe, providing definite identification.
  • If a local git repo is not available or git describe failed (e.g. sdist or shallow checkout), fall back to a supplied version file or the autorelease record. However, you are strongly encouraged to provide a setup that works with git describe where possible.
• Added musllinux aarch64 wheel. Thanks to @jerbob92.

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.21.0 and 4.22.0 (latest commit first):

• 9c5f0ba [autorelease] update changelog and version file
• f285ca2 changelog formatting nits
• 08577f7 Restore autorelease schedule
• 30c2373 Improve version integration (#263)
• 3100bfe Never spawn more processes than we have pages
• 3be189f Grant permission for GH pages dispatch (supposedly fixes #265)

</details>

<details> <summary>PDFium commit log</summary>

Commits between 6056 and 6070 (latest commit first):

• 7ea179817 Remove an alias in enum CPDF_CrossRefTable::ObjectType
• 127eed924 Demonstrate a WAI FPDFPage_RemoveObject() failure case
• e6ae00084 Change UnicodesForPredefinedCharSet() to return a span
• 4fbc06ab7 Replace fxcrt::SmallBuffer with absl::InlinedVector
• 0575de1b7 Use more WideStringViews in cfxjse_formcalc_context utility functions
• 6943be26e Disentangle pdfium::span<> from unowned_ptr<>.
• 6fc5cf499 Remove NoDestructor usage in CPDF_StreamContentParser
• 8cfb59aa3 Upgrade libtiff from 4.5.1 to 4.6.0
• 4bbfbecec Mark 2 libtiff CVEs as mitigated
• cdc2dda5a Remove the ability to instantiate CPDF_PageModule
• 21b96ced8 Remove CPDF_PageModule::ClearStockFont()
• 7c6c8fffb Move stock colorspace management out of CPDF_PageModule
• 69db74fd3 Remove reference to ProbeForLowSeverityLifetimeIssue()
• 9ac21c8d5 Update header comment for unowned_ptr.h
• 85bb72cc1 Roll Memory Tools from 68be21429138 to 8b06a5370188 (1 revision)

</details>

Changes (Release 4.21.0)

Summary (pypdfium2)

• PdfTextPage.get_text_range(): Correct the allocation in case of excluded/inserted chars, modify scope to prevent pdfium from reading beyond range(index, index+count) (which otherwise it does with leading excluded chars). Update docs to note the two different representations. Thanks to Nikita Rybak for the discovery ({issue}261).

• Setup changes (partly ported from the devel branch)

  • ctypesgen fork: replaced the old, bloated library loader with a new, lean version
  • Merged $PDFIUM_VERSION and $PDFIUM_USE_V8 into the existing $PDFIUM_PLATFORM specifier (see Readme for updated description). The relatively minor setup API breakage was considered tolerable; the core library API is not affected.
  • Removed the build package from pyproject buildsystem requires, where it was unnecessary. Thanks to Anaconda Team.
  • Split in two separate modules: pypdfium2 for helpers (pure-python), pypdfium2_raw for the core bindings (data files).

• Switched PyPI upload to "trusted publishing" (OIDC), which is considered safer. Further, the core maintainers have set up 2FA as requested by PyPI.

Note: Earlier releases may fail to install from source due to API-breaking changes to our ctypesgen fork (see {issue}264). Where possible, avoid source installs and use the wheels instead (the default behavior). If you actually have to do this, consider --no-build-isolation and pre-installed dependencies, including ctypesgen prior to commit 61c638b.

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.21.0b1 and 4.21.0 (latest commit first):

• 0f17303 [autorelease] update changelog and version file
• 3e4127a Prepare changelog for release
• a76b4b8 Temporarily pause autorelease
• f143916 nit: code comments
• 28be13b Abbreviate platform->plat system->sys
• 979f12e Expand renaming (binary -> platform, prefer abbrevs)
• b2ce32c Retain $PDFIUM_PLATFORM env var
• a809333 Use default src include if all modules given
• 4ae0661 Don't generate what we don't use
• 747b726 setup_base nits
• cf817e3 Make check-wheel-contents happy, update changelog
• 36701a6 Move raw bindings to separate module (CC #256)
• 89aaf06 ctypesgen nit: align order of defines
• 60ff803 setup: switch mostly to glob import
• 88281ae Update tasks
• c80b912 Add _WIN32 only if on a windows host
• ceafb41 ctypesgen: try to expose windows-only members on windows
• 51d1b4e ctypesgen: set compile-libdirs if possible
• cd5cfc6 Skip symbol guards, except for reference bindings
• bbcd3a1 readme: fix typo found by codespell
• 7e0145d setup: align libnames
• 28f6865 setup: restrict ctypesgen to fork
• 3530d74 Port setup changes from devel branch (#262)
• a99aec0 Add note on test case failing with pdfium 6015
• 456899c [Hotfix] get_text_range: don't lose l_passive (CC #261)
• 3d23c56 Update changelog (CC #261)
• fdf95fc Update docs for get_text_range() (CC #261)
• 535398d Continue on #261
• a9c6485 Partially fix #261
• 339e0b1 readme: GH pages nit

</details>

<details> <summary>PDFium commit log</summary>

Commits between 6002 and 6056 (latest commit first):

• edf48f97b Tidy UnownedPtr<> as a result of previous simplification.
• 4e17899bb Adjust guard macros around PdfiumSpanDeathTest.DanglingReference.
• 1e7353640 Remove ProbeForLowSeverityLifetimeIssue() from UnownedPtr.
• 7b7a48c4b Always use base::raw_ptr<> implementation when PartitionAlloc is present
• 3476811a8 Shorten PartitionAlloc includes.
• 6c5202203 Apply pdfium_core_config to fuzzer_init_public
• dc4e60e8e Fix dangling ptrs in embeddertest found by BRP dangling ptr detector.
• 72637154d Update android_toolchain_version to NSOM616pOQCfRfDAhC72ltgjyUQp9lAWCMzlmgB18dAC
• e130a1431 Add missing UnPreMultiply() call when processing transparencies
• e3593d647 Avoid rendering into the device in CPDF_RenderContext::GetBackground()
• 820848e16 Roll abseil, build, buildtools, clang, and libcxx together
• 5e3018d79 Roll Fuchsia SDK from 14.20230826.1.1 to 15.20230930.1.1
• b2f8486e8 Roll v8/ 7584acae2..3eb7d73cb (370 commits)
• 77b1d8a97 Roll base/trace_event/common/ 147f65333..29ac73db5 (1 commit)
• 4ff3bdb95 Roll third_party/libunwind/src/ a321409e6..7608093d2 (14 commits)
• 1d94005e9 Roll third_party/freetype/src/ 000b26a30..7b308a29d (25 commits)
• 1c7fcc4d3 Roll third_party/skia/ 0a253625a..d8ec08c6d (499 commits)
• cd93aa4bf Update gn_version to 991530ce394efb58fcd848195469022fa17ae126
• 40c0ea26c Roll third_party/libc++abi/src/ aae4ca0f5..e8e4eb8f1 (17 commits)
• c8f9d23f8 Roll base/allocator/partition_allocator/ b22ccba48..2f4afa63f (42 commits)
• 8cf636e15 Roll Catapult from f16ca3c78e46 to 4f81c1e29597 (79 revisions)
• 5cdaf28d0 Skia: Call UnPreMultiply() in FPDF_RenderPage()
• 1d550b829 Add new public API FPDF_GetDocUserPermissions
• 1aa7ef9f9 Rename FPDFPage_Move() to FPDF_MovePages()
• b3dea94ae Add MovePages API to rearrange pages in a PDF document.
• 9b17e472e Match pixel-based tests against both the GDI and default renderer
• 4bf7922ac Slightly simplify CFX_DIBitmap::UnPreMultiply()
• 60dfe9b0a Avoid some unnecessary SharedCopyOnWrite copies
• 503690367 Add FPDFDocEmbedderTest.DeletePageAndRender test case
• c5c06c3a6 This change fixes an issue in CPDFXFA_Context::DeletePage.
• 033126e7f Remove redundant code in CFX_SkiaDeviceDriver dtor
• db20d00b8 Combine CPDF_DeviceBuffer::Initialize() and GetBuffer()
• e47319725 Always check CFX_RenderDevice::CreateCompatibleBitmap() return value
• 3753799bf Simplify XFA_DrawImage() and related code
• 960d65600 Improve CFX_SkiaDeviceDriver ctor error handling
• 5fbd16426 Make the DebugValidate() checks used by CFX_SkiaDeviceDriver less strict
• 40ee07642 Check CFX_DIBitmap::Create() result in ProgressiveDecoder
• 1a19bbed8 [Fuchsia] Remove fuchsia_target_api_level from .gn
• 3145a9b91 Unsuppress several passing GDI tests
• 1dc2fc989 Remove unreachable code from CFX_DIBBase::ConvertTo()
• 700b9fbf8 Modernize parts of CPDFSDK_AnnotIterator
• b5bc2e929 Refine FPDFImageObj_GetBitmap() behavior
• 372d25d7d Roll Zlib from f5fd0ad2663e to 235986452b31 (1 revision)
• 71c92d906 Roll Depot Tools from 427f0f43ad0c to d7ba85d1eb58 (39 revisions)
• b22fc9a07 Don't implement CPDF_DIB::GetBuffer() (try 2)
• 55835a2c6 Use fxge::CalculatePitch8() in more places
• e29681f11 Make graphics resource names share-on-write
• 0cfa0a76d Avoid another PartitionAlloc allocator shim incompatibility
• 331f2dcff Add an embedder test for crbug.com/pdfium/1893
• 01175ba1d Update third_party/base/sys_byteorder.h
• 07c64fda1 Remove some NOTREACHED() usage in core/fpdfapi/parser directory
• c186235a1 Rename CPDF_ImageLoader::HandleFailure() to Finish()
• 1e1e17305 Fix unusable FPDFBitmap_GetBuffer() return values
• a098449f6 Remove FXRC_BITMASK_OUTPUT
• 806593eef Use spans in CFX_Palette getters
• 010031c98 Clean up CFX_Palette
• 9eec95782 Improve invalid ICC profile handling
• 75ff13168 Reinstate CPDF_FormField DCHECKs and improve SetValue()
• a836c20b8 Move CPDF_ColorSpace::IsValidIccComponents() to IccTransform
• f74bf767b Update reclient version to re_client_version:0.114.2.81e819b-gomaip

</details>

Warning: Since this release was made during testing and the following TestPyPI upload failed, the TestPyPI/PyPI packages originate from a different, follow-up workflow run (GH release action silently passes by creating a draft if a release of same ID exists already). The packages from this release should be identical, but this was not inherently ensured.

Changes (Release 4.21.0b1)

Summary (pypdfium2)

• Switched PyPI upload to "trusted publishing", which is considered safer.

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.20.0 and 4.21.0b1 (latest commit first):

• 385370b [autorelease] update changelog and version file
• 84e4d9d [Test] Try to fix repo push
• 6dfbd81 workflows/publish: stop explicitly installing twine
• dd69022 Prepare beta update to test new PyPI publishing
• fd32934 Update changelog for next release
• d6e10d9 Merge pull request #259 from pypdfium2-team/trusted-publishers
• 00475b4 Switch PyPI upload to "trusted publishing" (OIDC)
• 2506427 CI: Bump actions/checkout to v4
• 4846475 readme: update "unofficial distributions" section

</details>

<details> <summary>PDFium commit log</summary>

Commits between 5989 and 6002 (latest commit first):

• 92a572635 Improve CPDF_CMapParser::HandleCid() performance
• 1af4f5b62 Remove old buildtools llvm repo paths.
• 5c350448e Roll v8/ 41ff48bd6..7584acae2 (472 commits)
• b2789e383 Fix FPDF_ImportPages fails if dest_doc doesn't have "Info" object
• c2cef63c9 Explicitly encode SkImages with Png encoder
• cf536a313 Roll third_party/fuchsia-gn-sdk/ and build/
• 866ab8d25 Roll third_party/skia/ b5f614a85..0a253625a (334 commits)
• 599507d26 Add a test to show import APIs do not work for docs without Info dicts
• 6ea677cae Use more scopers in embedder tests
• b9fd8eb44 [PA] Templatenize alloc flags
• e6af9d92e Roll third_party/depot_tools/ 59e101154..427f0f43a (137 commits; 21 trivial rolls)
• 205fb97f4 Roll third_party/icu/ de4ce0071..985b9a6f7 (2 commits)
• f3d1dc22d Update gn_version to cc56a0f98bb34accd5323316e0292575ff17a5d4
• def1743b2 Roll buildtools/third_party/libunwind/trunk/ e5a9c50e5..a321409e6 (5 commits)
• cc6c8eca6 Roll third_party/zlib/ 526382e41..f5fd0ad26 (2 commits)
• bf0c157ae Remove some useless CFX_DIBBase::RealizeIfNeeded() calls
• c0991a43e Roll tools/memory/ 2a4c4ba1f..68be21429 (2 commits)
• febf6a33c Roll buildtools/third_party/libc++abi/trunk/ d4760c0af..aae4ca0f5 (6 commits)
• c7bf139be Roll third_party/freetype/src/ b2584c738..000b26a30 (20 commits)
• 95e2f9ede Roll base/allocator/partition_allocator/ f91d5ba23..b22ccba48 (58 commits)
• d6585d6e6 Roll Fuchsia SDK from 14.20230727.2.1 to 14.20230826.1.1
• 435756da3 Roll third_party/abseil-cpp/ 2288062ee..7affa303e (5 commits)
• edba08523 Roll third_party/libpng/ 805df541c..7e1f7e7b1 (1 commit)
• 955ab3319 Roll buildtools/ 16be42a9f..b2043d4f4 (11 commits)
• d74703942 Roll Catapult from 220cbb13b5a7 to f16ca3c78e46 (106 revisions)
• 8e97cf530 Roll Code Coverage from bce4cdc2309e to 77d952c2aefd (1 revision)

</details>

Changes (Release 4.20.0)

Summary (pypdfium2)

This release backports some key fixes/improvements from the development branch:

• [V8/XFA] Fixed XFA init. This issue was caused by a typo in a struct field. Thanks to Benoît Blanchon.
• [ctypesgen fork] Prevent setting nonexistent struct fields.
• [V8/XFA] Expose V8/XFA exclusive members in the bindings file by passing ctypesgen the pre-processor defines in question.
• Fixed some major non-API implementation issues with multipage rendering:
  • Avoid full state data transfer and object re-initialization for each job. Instead, use a pool initializer and exploit global variables. This also makes bytes input tolerable for parallel rendering.
  • In the CLI, use a custom converter to save directly in workers instead of serializing bitmaps to the main process.
• Set pdfium version fields to unknown for PDFIUM_PLATFORM=none (sdist). This prevents encoding a potentially incorrect version. Also improve CLI version print.
• Fixed sourcebuild with system libraries.
• Fixed RTD build (system_packages option removal).
• Attempt to fix automatic GH pages rebuild on release.

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.19.0 and 4.20.0 (latest commit first):

• 7361289 [autorelease] update changelog and version file
• 76b51ad readme: fix n_digits (closes #255)
• d4c19b3 [ctypesgen fork] prevent setting bad struct fields
• c837803 [BP] Fix RTD build (system_packages opt deprecation/removal)
• 1302e77 CLI: improve version print
• 953f8e1 [Hotfix] PDFIUM_PLATFORM=none: set pdfium version to unknown
• a1d00da [Hotfix] make sure we have a digit version before casting
• 99c8b7e Merge pull request #253 from pypdfium2-team/backports
• f35421b [BP] changelog: remove wrong guess
• 5fbb229 [BP] cli/render: move saving from main process into jobs
• fbab9b0 [BP] PdfDocument.render(): Fix non-API implementation issues
• 7e77b26 Clean up planned changes
• f145e5e docs: fix myst warning suppression
• 9055c6c Prepare changelog
• b8f37b6 [BP] Fix sourcebuild with system libraries
• f66c08f [BP] init_forms(): Fix XFA init
• 79cb619 [BP] Expose V8/XFA specific members if applicable
• f9d5f10 GH pages: don't run on every commit, build for releases only
• df47a9c [BP] Automatic GH pages rebuild on release

</details>

<details> <summary>PDFium commit log</summary>

Commits between 5975 and 5989 (latest commit first):

• 7221eb515 Roll tools/clang/ 236e66ffd..9fc887ccd (33 commits)
• 96be44fbc Replace overly-strong DCHECK() in CPDF_FormField::SetItemSelection().
• 159bccb7f PA: Temporary option for new PartitionAlloc location.
• 8d5a792d5 Prevent crashes in win32 GDI code due to null bitmap pointers

</details>

Changes (Release 4.19.0)

Summary (pypdfium2)

• Reset main branch to stable and shifted v5 development to a branch, so that pdfium updates (and possibly bug fixes) can still be handled. v5 development is delayed and unexpectedly tough, so this seemed necessary. The automated schedule has been slowed down from weekly to monthly for the time being. Further manual releases may be triggered as necessary.

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.18.0 and 4.19.0 (latest commit first):

• 96065fc [autorelease] update changelog and version file
• df73327 Shift development to branch, restore autorelease

</details>

<details> <summary>PDFium commit log</summary>

Commits between 5868 and 5975 (latest commit first):

• 16d6eb8b6 [Skia] Fix issues for printing 24 BPP images
• 53cec0ad6 Use fxge::CalculatePitch8() in CFX_DIBBase
• 45aa4b105 Respect the return value of SetBitsWithMask()
• ef1ef9548 Remove 2 corpus tests from GDI suppression list
• ec291c1b0 Remove NOTREACHED() in CachedImage::GetBuffer()
• 39292f380 Add FPDFText_IsHyphen function
• b756bbe70 Remove CPDF_FormField::LoadDA() declaration
• 7952b46dd Stop building (empty) Skia AVX and SSSE3 opts files
• 5cac3f6f0 Roll third_party/skia/ 6119b059f..b5f614a85 (247 commits)
• f73ad4764 Make FPDF_GetDocPermissions() consistent for XFA vs. non-XFA
• d5d465279 Remove spurious calls to FPDF_GetDocPermissions()
• 618ecdfae Fix clang-tidy warnings for fx_skia_device.cpp
• 909a33cd7 Resolve some simple clang-tidy warnings.
• 017b1aa0f Split TextObject rect for each kPiece
• 1627c9a09 Replace bytes.removesuffix() call
• 2d789adfb Avoid multiplication widening warnings in JBig2
• fb2885c20 Remove NOTREACHED() usage in fxjs directory
• 409124709 Remove third_party/base/base_export.h
• df6fed9f3 Roll v8/ 127e21985..41ff48bd6 (425 commits)
• 76f27a1e7 Roll buildtools/clang_format/script/ f97059df7..e5337933f (10 commits)
• c1c25bb7a Saturate, rather than CHECK() in FX_Number
• 1e33b3d28 Cast v8::Object::GetInternalField() return value to v8::Value
• 832d6bb42 Roll Catapult from 7d7df42f80f3 to 220cbb13b5a7 (115 revisions)
• 442caf194 Roll Code Coverage from cb9f2d5c70a8 to bce4cdc2309e (1 revision)
• 41a47681b CHECK range before casting float to int in fxnumber
• e54bb263c Use constexpr points array to avoid indexing in DrawThisAppearance().
• 96b9ad342 Make fx_coordinates.h types have constexpr constructors.
• 074490b71 Switch to NOTREACHED_NORETURN() in xfa dir
• 4ae353f1e [fpdf_structtree] Support references for attribute list/number
• c1bd7b5d0 Switch libcxx paths from trunk -> src.
• 9f8b6bfcd Roll buildtools/third_party/libunwind/trunk/ f1c687e0a..e5a9c50e5 (2 commits)
• 637bfca2f Roll buildtools/third_party/libc++abi/trunk/ 8d21803b9..d4760c0af (2 commits)
• 689b96876 Move third_party/base/ptr_util.h into third_party/base/memory/
• 0241a3d59 Allow StructElement_Attr_GetName to return buflen with null buffer
• 22b07cad3 Remove //third_party:third_party target
• 11e639bc8 Merge third_party/skia_shared code into core/fpdfapi/edit
• 212493e8b Fix some DCHECK_OP signness mismatches
• a917fcc95 Roll third_party/skia/ c59638231..6119b059f (226 commits)
• 7ce8d2330 Roll third_party/skia/ 3ea9412ad..c59638231 (1 commit)
• 1dab6189b Update gn_version to 3fccef9033b950e8935e8debeba9fbd71617bc74
• acd622cf2 Roll third_party/abseil-cpp/ 6b7d3f3b0..2288062ee (7 commits)
• 757433318 Roll third_party/freetype/src/ e4586d960..b2584c738 (15 commits)
• e33975a51 Roll Fuchsia SDK from 13.20230629.2.1 to 14.20230727.2.1
• 6e41cff18 Roll buildtools/ 6d00f8d8c..16be42a9f (8 commits)
• 073cb4919 Roll third_party/zlib/ f999826d2..526382e41 (9 commits)
• 45e5d5eb2 Re-organize malloc shim tests.
• 7f8f07e22 Roll third_party/icu/ e8c3bc9ea..de4ce0071 (3 commits)
• 41e44fc1b Switch from pdfium::clamp() to std::clamp()
• 3f0bf8d52 Roll third_party/depot_tools/ 064883063..59e101154 (70 commits; 26 trivial rolls)
• 91d9d4e57 Move third_party/base/span.h into third_party/base/containers/
• d647c71e1 Roll tools/memory/ 57b3b9e7c..2a4c4ba1f (2 commits)
• e325e5245 Roll third_party/skia/ 10a43e57e..3ea9412ad (167 commits)
• fb159d610 Remove break statements after NOTREACHED_NORETURN()
• a1c125c98 Change TestResult log from bytes to str (part 2)
• 065810725 Roll third_party/libjpeg_turbo/ aa4075f11..30bdb85e3 (2 commits)
• 55e793a8f Only define test_runner_py when standalone
• 5d3955e11 Roll tools/clang/ 2cd52f556..236e66ffd (18 commits)
• 89875d3b3 [PA] Fix public_deps in pdfium.
• f07f001bb Move shim partition configuration to separate test file.
• 1e4b7c2e4 Roll base/allocator/partition_allocator/ 9e9b9fe53..f91d5ba23 (15 commits)
• 49e8b0918 Roll build/ 7eef81aea..336e34d44 (11 commits)
• 290ad31ff Change TestResult log from bytes to str
• a6e4eb363 Reland "Don't include missing paths in CAS tree"
• e12acdbe8 Roll build/ c1a8cf672..7eef81aea (148 commits)
• 0ebe24d14 Small AGG build config improvements
• 50b418293 Revert "Don't include missing paths in CAS tree"
• 16c574c18 Don't include missing paths in CAS tree
• ab959fa38 Switch to officially supported PA-E malloc shim.
• 1383b5e48 IWYU: add string.h for strncmp in CFX_GifContext
• 8d5ff8ffd No need to depend on all of base in chromium build.
• 10c541c91 Add comments to pdf_use_partition_alloc GN arg.
• fad049256 Remove lss dependency
• d9e3f3fd6 Consolidate some pdf_is_standalone build logic
• d8dbc5259 XFA: Recognize delta objects as nodes
• 72299abe6 Add .gitignore for //third_party/libcxx
• 8846d562b Handle failed Realize() in MakeCachedImage()
• b8a335fda Update comment on pdf_is_standalone in pdfium.gni
• c183fcf9a Add duplicate libcxx source repo paths.
• ab5e39b8f Roll base/allocator/partition_allocator/ f9a7b0a0e..9e9b9fe53 (16 commits)
• 216568c41 Beef up BRP-protection tests prior to using PA-E shim
• 4b4e4e8b9 Speculative fix for crash in CGdiDeviceDriver::GDI_StretchDIBits()
• 234ec6cb8 Avoid misaligned loads in LoadGlobalPersistentVariablesFromBuffer().
• a164c9bec Remove string.h inclusion from fx_system.h
• 3abb4490c Fix ubsan null-ptr warnings in pdfium_embeddertests
• b0a11e9c6 Wrap mem*() functions to handle zero-length nullptr cases.
• bf9170ee4 Make CPDF_ToUnicodeMap::StringToCode() tolerate whitespaces
• 03e309bf0 Make span_util.h wrappers completely compliant with ubsan.
• bd4515474 Switch to NOTREACHED_NORETURN() in fxbarcode
• d4ae8a236 [Skia] Enable fxge.SkiaStateText for Skia
• 78fee0d0b [ssci] Added Shipped field to READMEs
• 909e5a7d8 Avoid forthcoming check-raw-ptr-to-stack-allocated diagnostic.
• 96153592d Roll v8/ 9888bdc17..127e21985 (937 commits)
• 0485b62cf Roll Instrumented Libraries from 0f536d22dbed to 032e9c850ab9 (1 revision)
• 69b5e0eeb Optimize empty map cases in CPDF_CrossRefTable::UpdateInfo()
• d9dcf21d3 Avoid unnecessary array indexing in CPDF_DefaultAppearance
• acfec013f Avoid adding std::size() to compute end pointers.
• 92fa1456d Switch to std::array<> in CPDF_FontGlobals.
• 56ff98ee7 Use spancpy() on CFX_CodecMemory buffers.
• 892602286 Avoid pointer arithmetic in string_view_template.h.
• 45f3f76fd Use span operations in JBig2_Bitstream.
• 01e6b8620 Convert bounds-check from DCHECK() to CHECK() in JBig2_ArithDecoder
• 8ea56a4c5 Rename some tables in cfx_cssdata.cpp to kStyle naming.
• b86e5b575 Rename PDF_CharType array to kPDFCharTypes.
• b99937de4 Make generate_cas_paths.py output deterministic
• bce0a8f1e Write CAS archive paths for test_runner.py tests
• 86ba98da3 Switch to NOTREACHED_NORETURN() in xfa/fxfa/parser
• da4eb2682 Make FX_Free() a macro
• dc9bc0b80 Stop compiling (empty) SkOpts_skx.cpp file in Skia
• 51ed5d06c Call Free() for a specific ParitionRoot
• 718f99ae6 Upgrade libtiff from 4.5.0 to 4.5.1
• fc813437a Add METADATA file to track mitigated security patches for libtiff
• e9a111cfb Pass options directly to PartitionAllocator's ctor
• 295ed7181 Roll base/allocator/partition_allocator/ ad18d83b7..f9a7b0a0e (15 commits)
• 5967378ac Roll Jinja2 from 264c07d7e64f to 515dd10de9bf (1 revision)
• c749bfe97 Roll MarkupSafe from 13f4e8c9e206 to 006709ba3ed8 (1 revision)
• 8c7852a6c Roll Code Coverage from 8ec74a909da4 to cb9f2d5c70a8 (8 revisions)
• 693edb7a0 Roll Catapult from f51324c1c818 to 7d7df42f80f3 (80 revisions)
• 9f7b32519 Test rendering an annotation with FPDF_PRINTING flag
• 9f8cfe803 Harden CFDE_TextOut::m_ttoLines.
• f181dc10a Roll Fuchsia SDK from 12.20230609.2.1 to 13.20230629.2.1
• 18db9a2ed Update bPrinting in RenderPageImpl()
• e293c0944 Add DEPS entries for reclient
• 4b32534e4 Roll third_party/skia/ a5070bdfb..10a43e57e (512 commits)
• 2699dfb71 Tweak some recently added Skia code
• 205826cda Roll Fuchsia SDK from 12.20230601.1.1 to 12.20230609.2.1
• 270f8d45f Replace android_ndk with android_toolchain
• cd2944e5e Roll buildtools/third_party/libc++abi/trunk/ b2e8ad275..8d21803b9 (4 commits)
• 355f0a6a5 Roll third_party/icu/ 1eea59cab..e8c3bc9ea (5 commits)
• adcf1e728 Roll buildtools, libc++, and abseil
• e3606af5b Roll buildtools/third_party/libunwind/trunk/ cd144ced3..f1c687e0a (3 commits)
• 809e7441f Roll third_party/zlib/ 0cf42a259..f999826d2 (11 commits)
• 8cf7e9a73 Roll base/allocator/partition_allocator/ f13adc396..ad18d83b7 (50 commits)
• 937c751f3 Update gn_version to da5fe01bce4ae84b2619caca7a3aa7ec7d3eb8a7
• 1dba516f6 Roll third_party/depot_tools/ 79f13899e..064883063 (76 commits; 28 trivial rolls)
• 334284851 Roll third_party/freetype/src/ 80a507a6b..e4586d960 (7 commits)
• d2c091d71 Roll tools/clang/ 0b83134b3..2cd52f556 (38 commits)
• 4e9291f1c Roll build/ a12897e7e..c1a8cf672 (191 commits)
• 3efe9dc53 Use multithreaded instead of apartment-threaded

</details>

Changes (Release 4.18.0)

Summary (pypdfium2)

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.17.0 and 4.18.0 (latest commit first):

• f810b38 [autorelease] update changelog and version file
• 8364457 packaging: also lower musllinux tag to 1_1

</details>

<details> <summary>PDFium commit log</summary>

Commits between 5854 and 5868 (latest commit first):

• 505438b2c Add XPS support to pdfium_test
• 49a42197d Move helpers to //samples/helpers
• 7b8acbc28 Simplify FPDF_Render implementations
• 037e72c6d Refactor ProcessPdf() and ProcessPage() state
• fbbdab86f Make "--diff" option handle reverse-byte-order results for pdfium_diff
• aefb13c5c Replace FPDF_RECORDER with FPDF_SKIA_CANVAS
• 411f207af [Fuchsia] Replace downloading gn SDK with core SDK
• b1e534339 Roll build/ e100e80a1..a12897e7e (58 commits)
• 0dbf91cb5 Enforce value ranges in IsIsoTimeFormat().
• c7df6021f Add GDI expectations
• 1d404027e Add IsIsoDateFormat() and IsIsoTimeFormat() unit tests.
• b0254c934 Avoid computing unused values in IsIsoTimeFormat().
• d691f6ef3 Add missing nullptr check in CJX_Object::SetCDataImpl()
• 14f97b232 Remove unused out params from IsIsoDateTimeFormat()
• 8739c4c6f Fix millisecond check in IsIsoTimeFormat()
• 5b115ea3f Remove unused out param from IsIsoDateFormat()
• 21ac43e7f Roll tools/memory/ 1084fb884..57b3b9e7c (2 commits)
• 36111e64c Fix search for colon in IsIsoTimeFormat()
• 4b06202b3 Roll third_party/skia/ 029100f6e..a5070bdfb (152 commits)
• 270bda14b Switch to NOTREACHED_NORETURN() in various core/ sub-directories
• 8d645345a Better bounds-check in IsIsoTimeFormat()

</details>

Changes (Release 4.17.0)

Summary (pypdfium2)

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.16.0 and 4.17.0 (latest commit first):

• 343efeb [autorelease] update changelog and version file
• 7ed7bb6 Inline saving implementation (#229)
• 3e643cb Library init/destory nits
• 98899a7 Roll back glibc req to 2_17 for now (CC #203, #231)
• f24e54e Revert a bad style change
• 6607977 sourcebuild: roll win/pdfium.patch
• ef2f2da Install safeguard to lock autoclose after lib destruction

</details>

<details> <summary>PDFium commit log</summary>

Commits between 5841 and 5854 (latest commit first):

• 70c2db3e9 Add GDI renderer support to test_runner.py
• 33b14f693 Add GDI renderer to pdfium_test
• 7f2235ee9 Fix stack-overflow in CheckForSharedFormInternal()
• 4d1379a8d Use NOTREACHED_NORETURN() in non-win32 core/fxge code
• c553157c2 Change enum CFX_ImageTransformer::StretchType to an enum class
• fbb42b8f0 Use PageRenderer::Write() for all output formats
• 7b2f0e4dd Add --use-renderer support to test_runner.py
• 6c2c8ce87 Revert "Don't implement CPDF_DIB::GetBuffer()"

</details>

Changes (Release 4.16.0)

Summary (pypdfium2)

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.15.0 and 4.16.0 (latest commit first):

• 5406fc9 [autorelease] update changelog and version file
• 5739294 PIL buffer test: relax copy assert to warning
• 5f2288a to_pil(): reflect image changes in buffer
• ca7d701 bitmap.from_pil(): preserve RGBX
• 872bf6b include bindings/*.py in sdist
• 058014e bitmap comment: nits
• d99bae3 readme: fix cffi link
• 49b63b1 bitmap nit: improve version info
• 13360db page: single line nits
• 2ac239c Add return code check for FPDFPage_RemoveObject()
• 5e7d954 init_forms(): further check correction
• a88f65f Somewhat work on imports
• 2f338e5 bitmap.from_pil(): Add option to re-copy
• 046216e bitmap: improve code docs

</details>

<details> <summary>PDFium commit log</summary>

Commits between 5827 and 5841 (latest commit first):

• f608b5d3a Don't implement CPDF_DIB::GetBuffer()
• b8df4c36d Remove redundant MSVC 4267 warning
• 3e0aca455 Add a pixel test for a trailer with the wrong /Size
• 2c7354693 Tolerate bad /Size in V5 xrefs
• 089adc52f Give CPDF_CrossRefTable::ShrinkObjectMap() a better name
• 9256bd661 [Skia] Handle text scaling inside CFX_SkiaDeviceDriver
• e49db5b31 Update the constant used to limit xref size
• 42f3930ce Add a ParserXRefTest test for wrong /Size relative to /Index
• fd0b83c85 Add more ParserXRefTest test cases for /Index
• b68545c09 Add more ParserXRefTest test cases
• f899df424 Change ParserXRefTest to use Gmock matchers
• 7923337d2 Change some ParserTest to use a test fixture
• 7b044178d Clean up ShrinkObjectMap() methods
• 12f7dcb80 Document default type value in CPDF_Parser::ProcessCrossRefV5Entry()
• e70dfbc6b Memoize RealizeSkImage() in CPDF_PageImageCache
• e392794c0 Remove force_alpha parameter
• 517bbe3dc Remove last reference to SkBitmap
• 44b0492c7 Remove no longed needed .cookie from PartitionOptions initialization
• 1b2a3b549 Roll base/allocator/partition_allocator/ b8014d77e..f13adc396 (28 commits)
• 6e3e8502c Move alpha type conversion into RealizeSkImage()
• a4ec25d38 Cleanup at pdf fuzzer termination.
• d36799c75 Roll Code Coverage from de759c9da836 to 8ec74a909da4 (6 revisions)
• ba7701bc2 Roll Catapult from 730ebc3ef2f3 to f51324c1c818 (59 revisions)

</details>

Changes (Release 4.15.0)

Summary (pypdfium2)

• In helpers, closing a parent object now automatically closes the children to ensure correct order. This notably enhances safety of closing and absorbs the common mistake of closing a parent but missing child close calls. See commit eb07605 for more info.
• In init_forms(), attempt to call FPDF_LoadXFA() and warn on failure, though as of this writing it always fails. An upstream issue is suspected.

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.14.0 and 4.15.0 (latest commit first):

• 4ca2bbc [autorelease] update changelog and version file
• 9fe9660 nit: slightly improve repr style
• 12d2327 Move library load/destory to seprate file
• ee14e56 utils.get_bufreader(): do not separately hold buffer
• d23cfab cli/imgtopdf: overwrite existing files
• 6749177 bitmap.from_pil(): avoid one layer of copying
• 5f2bd3f formal safety nits around formenvs
• 5e19859 Further improve autoclose debugging
• 6ed7685 autoclose: add context info
• 77bf19a Combine namespaces bases, consts, utils into pdfium_i (#226)
• 6aa3c7e fix init_forms() blunder: move version safety check to right place
• 656f945 formenv: child-track pages released after init_forms()
• 68854b2 readme: link case study concerning ABI vs API
• 8f8edcf Update changelog_staging
• e5d348e Call FPDF_LoadXFA() in init_forms(), warn on error (#223)
• eb07605 Protect closing order (#224)

</details>

<details> <summary>PDFium commit log</summary>

Commits between 5813 and 5827 (latest commit first):

• 5e77cd172 Simplify CFX_DIBBase::RealizeSkImage()
• 7ccc8ace2 Add CFX_DIBBase::RealizeSkImage()
• bee35d5e5 Avoid using NOTREACHED() in test code
• cfc8f9162 Don't infer UnownedPtr::ExtractAsDangling() type
• 55e612f5f Manage Upsample() memory using SkImage
• 7b3cd1e7f Remove obsolete third_party/android_sdk/
• 6498464bc Fix PDF saving when multiple graphics states are in effect
• c261a6cb2 Fix FxgeSkiaEmbedderTest.RenderBigImageTwice test
• 5281496be Minimize GN dependencies on //skia
• 85412229e Replace FXFT_MM_VarPtr with ScopedFXFTMMVar
• fa84e52cd Remove FT_Done_MM_Var() workaround
• 937e7c848 Tighten DEPS rules for Skia headers
• d2dcc316e Add include for SkTileMode

</details>

Changes (Release 4.14.0)

Summary (pypdfium2)

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.13.0 and 4.14.0 (latest commit first):

• e011ddd [autorelease] update changelog and version file
• 69b3880 docs: improve memory management section

</details>

<details> <summary>PDFium commit log</summary>

Commits between 5799 and 5813 (latest commit first):

• d00660e5c Move write APIs from CFX_DIBBase to CFX_DIBitmap
• aaa3ba68e Fix unnecessary GetWritableBuffer() calls
• e5e0b281f Remove CFX_DIBExtractor
• 1ea3e1cff Roll build/ 3c9055956..e100e80a1 (99 commits)
• 6257fd324 Roll v8/ af40b3075..9888bdc17 (303 commits)
• a369e368a Roll buildtools, libc++ and abseil
• 0804b03f8 Roll third_party/zlib/ 14dd4c445..0cf42a259 (3 commits)
• c618dbcfa Make CFX_DIBBase::GetBuffer() const-correct
• bb4e26d0b Roll base/allocator/partition_allocator/ 8551ae8bd..b8014d77e (36 commits)
• 54b9cd1af Roll third_party/android_ndk/ 8388a2be5..310956bd1 (1 commit)
• 6c1135190 Use //third_party/cpu_features:ndk_compat
• 1e6257321 Limit the number of form XObjects within a form XObject
• 9dc67f021 Add //third_party/cpu_features to DEPS
• 14f58f559 Add CPDF_Form::RecursionState struct
• d87685c20 Update gn_version to e3978de3e8dafb50a2b11efa784e08699a43faf8
• 337e0a37d Update vpython3 requests
• f59459617 Roll Fuchsia SDK from version:12.20230503.1.1 to version:12.20230601.1.1
• f2ebffd1b Roll buildtools/third_party/libc++abi/trunk/ 66967963e..b2e8ad275 (11 commits)
• 2c1720e4b Roll buildtools/third_party/libunwind/trunk/ 88bd83fe0..cd144ced3 (6 commits)
• 3c1b3cdcd Roll tools/clang/ 56556e9bb..0b83134b3 (35 commits)
• 44f86322f Roll third_party/icu/ d8daa943f..1eea59cab (4 commits)
• 8338cc09b Roll third_party/freetype/src/ be15811c4..80a507a6b (57 commits)
• eac64389d Roll third_party/depot_tools/ 13878e1f7..79f13899e (78 commits; 21 trivial rolls)
• 53dcf78f7 Use newer gni file lists for Skia
• f83b51220 Roll third_party/skia/ 6acd5a6fe..029100f6e (120 commits)
• e2c8eacbc Roll tools/memory/ 09f58c36c..1084fb884 (1 commit)
• 13adebf3b Fix function pointer mix up in OpenJPEG
• 72aa5fbd5 Fix function pointer mix up in LCMS
• 314477963 Add smaller less-scary comment about FPDF_DestroyLibrary().

</details>

Changes (Release 4.13.0)

Summary (pypdfium2)

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.12.0 and 4.13.0 (latest commit first):

• 1dd22bf [autorelease] update changelog and version file
• 6132aa5 Minor setupsrc changes
• e4a1b0f version: add task
• 2f982b4 readme: discuss drawbacks of ABI-level bindings

</details>

<details> <summary>PDFium commit log</summary>

Commits between 5786 and 5799 (latest commit first):

• 6e653ec0c Add high-resolution re-rendering test
• 72b051838 Add CFX_SkiaDeviceDriver(SkCanvas*) constructor
• 88ad8bf36 Add big scary comment about thread unsafety to fpdfview.h.
• 1f8d57863 Add unit test that operator New is shimmed onto BRP
• 8277d6e96 Small tidy in CPWL_Wnd::SharedCaptureFocusState.
• eee36578b Rename CPWL_MsgControl to SharedCaptureFocusState and nest in CPWL_Wnd.
• 28eb03ee8 Remove CPWL_Wnd::CreateScrollBar()
• 8172e30fe Remove references to empty Skia "opts" GNI targets/files
• 249ff515f Roll third_party/skia/ 5c93acf31..6acd5a6fe (263 commits)
• 586ed826d Avoid dangling ptr in ~CPWL_MsgControl().
• 4056a102f Rename RePosChildWnd() to RepositionChildWnd()
• 753fad158 Add pixel test for non-ASCII text appearances
• c72dad9f7 Avoid setting DiscardableMemoryAllocator in LLVMFuzzerTestOneInput()
• 328edf32a Use noparent=True in //public/DEPS
• 0b74b9a8f Forward declare ByteString in the custom gtest-printers.h

</details>

Changes (Release 4.12.0)

Summary (pypdfium2)

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.11.0 and 4.12.0 (latest commit first):

• 39c136c [autorelease] update changelog and version file
• 9b2277e readme: shorten raw access paragraph
• 9384715 packaging_base: update note

</details>

<details> <summary>PDFium commit log</summary>

Commits between 5772 and 5786 (latest commit first):

• 4a5e28a78 Fix text string handling on UTF-32 platforms
• c4e6b7d3e Improve ParseDecodeTest cases for test strings
• 448f3994d Deduplicate Gold properties code
• 2bfcd7862 Merge UTF-8 handling into fx_string.cpp
• d7e084ec3 Mark some dangerious pwl methods [[nodiscard]]
• 4cffda0e4 Roll v8/ f66b0bc93..af40b3075 (821 commits)
• a248b67f7 Consolidate UTF-16 logic
• b6c2e82d2 Initialize only needed fields of PartitionOptions
• 8ef742b1a Roll base/allocator/partition_allocator/ 096531f40..8551ae8bd (24 commits)
• 4fcc240d3 change readme use_goma to false
• 2c2634093 Fix duplicate shim symbols in chromium build
• 8c8755d8f Fix GN visibility checks when building with chromium.
• d31d8a36d Roll build/ 64c99419f..3c9055956 (93 commits)
• bd861027b Use malloc shim for testing on all platforms (except win)
• d22b2a8d2 Make Retaintable subclass's ctors/dtor non-public
• 5cdc452a1 Rename local thisObserved to this_observed
• 29c665ea4 Observe CPWL_ComboBox across all On* methods
• 059bddb09 Clean up CPDF_StructElement
• 606df596a Make PDFium tests compatible with BRP-enabled allocators.
• c6a34d1ca Avoid redundant calls to get CFXJSE_Engine in CJX_Object::RunMethod()
• 57c1ab247 Prevent dangling pointer in CPDF_StructTree::AddPageNode()
• 1ea042cff Remove CollectionSize() use in CPDF_StructTree::LoadPageTree()
• 4ff4ca9ab Support BackupRefPtr in PDFium.
• f722b54ef Roll Catapult from ac30cc4bc7d3 to 730ebc3ef2f3 (44 revisions)
• 7884587b9 Roll Code Coverage from 9b51524c4f75 to de759c9da836 (1 revision)

</details>

Changes (Release 4.11.0)

Summary (pypdfium2)

• In PdfDocument.render(), fixed a bad bitmap.close() call that would lead to a downstream use after free when using the combination of foreign bitmap and no-copy conversion. Using foreign bitmaps was not the default and expressly not recommended.

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.10.0 and 4.11.0 (latest commit first):

• f927f7c [autorelease] update changelog and version file
• 1228d4e Update readme
• 065bd1f Rename TODO(v5) to TODO(apibreak)
• 0cfe906 Do NOT call bitmap.close() in renderer worker (see description!)
• e8ab921 Minor code comment fixes
• 47161c6 rebuild bindings/raw.py
• 5968b24 Update reuse/dep5
• 2c516db ctypesgen: conditionally pass --no-srcinfo (fixes #215)

</details>

<details> <summary>PDFium commit log</summary>

Commits between 5758 and 5772 (latest commit first):

• 78a55892d Use some spans in CFX_CTTGSUBTable
• 948a8b484 Avoid using FT_Bytes in CFX_CTTGSUBTable
• d204feb0b Fix nits in CFX_CTTGSUBTable
• 59870bf72 Remove struct CFX_CTTGSUBTable::TCoverageFormat*
• 40485aacb Combine struct CFX_CTTGSUBTable::TSubTable*
• 15c1b6743 Fix pdfium::span<> tests under BRP's asan_use_unowned_ptr=true
• d699e177c Remove struct CFX_CTTGSUBTable::TDevice
• fb2f71da3 Remove redundant calls to GetScriptContext()
• 4e730a7d0 Prove some calls in XFA to GetScriptContext() are redundant
• 80b01ad64 Clean up struct CFX_CTTGSUBTable::TFeatureRecord and TLookup
• 8fd980a39 Remove struct CFX_CTTGSUBTable::TScriptRecord
• e60fa0d7d Remove struct CFX_CTTGSUBTable::TLangSysRecord
• 7b49936bc Stop storing CFX_Font::m_pSubData
• 3f1624a82 Improve error handling in CPDF_CIDFont::GetGlyphIndex()
• a9ff918a8 Observe widget across SetOptionSelection() calls.
• 3eb3c4d77 Always check return code from CPWL_ComboBox::SetPopup().
• 0fa0c4f3e Save dash array and phase of GraphState in CPDF_PageContentGenerator
• 4c16842f6 Roll Skia and update SkSurface calls
• 09126b95a Enable raw_ptr usage enforcement for PDFium.
• dc12ace76 Add UNOWNED_PTR_EXCLUSION to mac-specific CFX_AggDeviceDriver member.
• e37bff1a0 Use "Chrome Symbol" font on all platforms aside from Windows
• 2ccdc331a Fix mac build under raw_ptr plugin
• 92a5bc33e Fix a CHECK() failure in ObjectTreeTraverser::GetReferenceEntries()
• 1918c8da8 Fix Skia build under pdf_enable_unowned_ptr_exclusion
• 1ce0f0424 Unblock roll of PDFium into chromium
• eaa68be67 Resolve remaining unowned_ptr exculsion warnings [android, win].
• e6895bd32 Resolve remaining unowned ptr exclusion warnings.
• d6bc7c46a Fix some unowned ptr exclusions in core/fxcrt/{xml,css}
• 530d0170f Suppress unowned ptr exclusions in embeddertests
• 431f9a92e Support iterating over WideString by code point
• ef937a25a Exclude public files and test files from raw ptr checks
• a8e77a12d Fix unowned ptr exclusions in core/fpdfapi
• 578fe5b2a Fix common unowned ptr exclusions in core/fxcrt
• be511372f Introduce raw ptr exclusion enforcement to PDFium.
• 7ef2ee356 Teach googletest about C-string to ByteString comparisons
• 401a247da Remove CPDF_Image::GetDocument() nullptr checks
• d77c93540 Support encoding unpaired surrogates

</details>

Changes (Release 4.10.0)

Summary (pypdfium2)

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.9.0 and 4.10.0 (latest commit first):

• 59fe713 [autorelease] update changelog and version file
• 5028df4 readme: update/fix raw API section (CC #217)
• 58028fd textpage nits
• 970914b Further condense code (CC #212)

</details>

<details> <summary>PDFium commit log</summary>

Commits between 5744 and 5758 (latest commit first):

• 075ddba7c Teach googletest how to pretty-print WideString
• 77b1258e9 Teach googletest how to pretty-print ByteString
• 7014c95ee Handle non-BMP code points for UTF-16 wchar_t
• c651b5492 Clean up the UTF-8 encoder and decoder
• 09e030db2 Use more const pointers in CPDF_Image::FinishInitialization()
• 5afdf9323 Roll Fuchsia SDK from version:12.20230330.3.1 to version:12.20230503.1.1
• 6afd7a2aa Roll third_party/freetype/src/ b0a4f9927..be15811c4 (22 commits)
• 112428105 IWYU: add cstdint for uint8_t in fxcrt::UnownedPtr
• 7058fd4eb Roll buildtools/third_party/libc++abi/trunk/ 4a9d0560b..66967963e (15 commits)
• c92f25f84 Roll tools/clang/ f68624726..56556e9bb (24 commits)
• 63ac35e1f Roll build/ c44ccbfc0..64c99419f (202 commits)
• f76d5cc22 Roll third_party/zlib/ b890619bc..14dd4c445 (2 commits)
• 45f021e40 Roll buildtools and libc++
• 327270525 Roll base/allocator/partition_allocator/ 118936d67..096531f40 (25 commits)
• d26d26f7c Update gn_version to git_revision:5a004f9427a050c6c393c07ddb85cba8ff3849fa
• 26e7d6670 Roll tools/memory/ 13f0b81ce..09f58c36c (2 commits)
• 69ed9d8a1 Roll third_party/skia/ ad459a5b8..7c6bd2a63 (486 commits)
• ca87479d6 Roll buildtools/third_party/libunwind/trunk/ f3464caa6..88bd83fe0 (22 commits)
• e5e8a16e8 Roll third_party/icu/ 1e49ac26d..d8daa943f (3 commits)
• fa00f6ee9 Roll third_party/depot_tools/ ab117384e..13878e1f7 (69 commits; 17 trivial rolls)
• 833105422 Roll third_party/abseil-cpp/ 20c8ae002..c7a526044 (7 commits)

</details>

Changes (Release 4.9.0)

Summary (pypdfium2)

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.8.0 and 4.9.0 (latest commit first):

• 33e1c37 [autorelease] update changelog and version file
• 47fdab0 document: add task
• bde4e91 Make extract_images CLI slightly more memory efficient
• 0f252d3 Mainly abbreviate bitmap init code
• a6e3c71 Further strip pageobjects code
• 26cc610 tile: slightly improve style
• b7cb474 pageobjects: code style improvements (more one-liners)

</details>

<details> <summary>PDFium commit log</summary>

Commits between 5731 and 5744 (latest commit first):

• c4b31543f Don't re-encode annotation /Contents
• c207ee2c3 Enable -Wcovered-switch-default
• 0703e0486 Avoid -Wcovered-switch-default errors in various places
• e0277e268 Avoid -Wcovered-switch-default errors in //core code
• f9fb18307 Avoid -Wcovered-switch-default errors in XFA code
• bcd9d08ed Remove some unreachable code in CPDF_DataAvail
• 5d675f6fd Add a pixel test for Type 3 font with a pattern
• 48468f15d Fix defines in testing/fuzzers/BUILD.gn
• 66608c815 Remove unnecessary Clear() operations
• 2e68465df Mark Apple-only code inside cfx_glyphcache.cpp as such
• 875e85008 Rewrite MaybeOwned<> in terms of absl::variant<>
• 1e9e67f49 Thwart move-elision on MaybeOwned<T>::Get() invoked on rvalues.
• da4829cbc Define BUILD_WITH_CHROMIUM for pdfium fuzzers
• 22980b302 Fix some nits in CFX_GlyphCache

</details>

Changes (Release 4.8.0)

Summary (pypdfium2)

• PdfTextPage.get_rect(): Added missing return code check and updated docs regarding dependence on count_rects(). Fixed related test code that was broken but disabled by accident (missing asserts). Thanks to Guy Rosin for reporting {issue}207.
• Added PdfImage.get_size() wrapping the new pdfium function FPDFImageObj_GetImagePixelSize(), which is faster than getting image size through the metadata.
• build_pdfium.py --use-syslibs: Changed sysroot="/" (invalid) to use_sysroot=false (valid). This allows us to remove a botched patch.

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.7.0 and 4.8.0 (latest commit first):

• 0c1a20d [autorelease] update changelog and version file
• 24fbf07 Rename variable success to ok across the tree
• 5b4d44f unsp: change handling of attachment
• 92ab6dd Add bindings to & use FPDFImageObj_GetImagePixelSize()
• e418360 A few style improvements (CC #212)
• 82d2a12 sourcebuild: move use_sysroot=false to linux section
• 6bfb440 syslibs build: replace sysroot="/"+patch w/ use_sysroot=false
• 0c17bcc Possible solution to #207
• dea9c70 Remove a task (CC #205)

</details>

<details> <summary>PDFium commit log</summary>

Commits between 5715 and 5731 (latest commit first):

• 9db61cf2d Set up DiscardableMemoryAllocator for pdfium fuzzer
• 379bfc96b Added faster method for getting the size of an image object.
• f51e7a1cf Cache font widths in CFX_GlyphCache
• 40f98eb42 Implement CFX_SkiaDeviceDriver::GetClipBox()
• 594190814 [Skia] Use source rectangle passed to SetDIBits()
• 0e8a8c6e5 Update NOINLINE definition
• af3848d11 Delete unused macros from compiler_specific.h
• 3f0996155 Represent fxcmap::CMap::MapType with a bool
• da78dcba4 Change fxcmap::CMap::MapType an enum class with properly named values
• 5bb3a5ac2 Put FXCMAP code in namespace fxcmap
• 357729f1d Consistently use #if defined(_SKIA_SUPPORT_)
• 2bd5d5761 Avoid passing nullptr to vswprintf() inside WideString::FormatV()
• cffe2384b Remove a spurious RetainPtr in the CFX_DIBExtractor ctor
• 2327115fd Get rid of a Windows-only -Wno-switch flag
• 5dfeac1e0 Fix roll-freetype.sh on Linux
• 409e3e252 Fix -Wswitch warning in cfpf_skiafontmgr.cpp
• ff7e020b9 Add build_config.h to core/fxcrt/fx_extension.h
• 9a89e728d Update metadata in third_party/freetype/README.pdfium
• 5e106987a Roll Code Coverage from b0f9daa5b3f5 to 9b51524c4f75 (1 revision)
• f66276f2e Roll Catapult from c9f4f650cdee to ac30cc4bc7d3 (48 revisions)

</details>

Changes (Release 4.7.0)

Summary (pypdfium2)

• Fixed PdfPage.remove_obj() wrongly retaining the page as parent in the finalizer hierarchy.

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.6.0 and 4.7.0 (latest commit first):

• fb71777 [autorelease] update changelog and version file
• ef7cd16 Update tasks/planned_changes
• d154911 Update changelog_staging
• ecd8c3b Plan an API-breaking change
• 5f2971c cli/toc: use ifexpr
• c2215f1 history: slightly improve wording
• 0571269 matrix eq: improve var name
• 5622f77 PdfPage.remove_obj(): avoid capturing previous parent in finalizer
• 5e8271b Correct a readme example (CC #204)

</details>

<details> <summary>PDFium commit log</summary>

Commits between 5705 and 5715 (latest commit first):

• d127a657b Remove stale comment from cpdf_hint_tables.h
• 900791224 Remove lcms patches to cmsDupToneCurve()
• ca3e52a5e Upgrade to lcms 2.15
• 5a1e12b47 Use NOTREACHED_NORETURN() in core/fxcodec

</details>

Changes (Release 4.6.0)

Summary (pypdfium2)

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.5.0 and 4.6.0 (latest commit first):

• 41dff5d [autorelease] update changelog and version file
• db33c55 Sync windows patch with pdfium-binaries
• 3099498 Improve comments on page object insert/remove
• f4eb3c7 bases: update comment
• 562b65a Attempt to fix changelog rendering on RTD
• 25732ec Enable forms test for V8 builds

</details>

<details> <summary>PDFium commit log</summary>

Commits between 5692 and 5705 (latest commit first):

• 850454b6e Remove duplicate FXFT_Get_Glyph_Outline definition
• dcfaca583 Roll build/ ff3e22160..c44ccbfc0 (116 commits)
• c7fe5d2ce Avoid rendering JPX image with mismatched PDF color space entry
• c0a089da7 Add a pixel test for JPX images with mismatched color spaces
• 27f3c71ff Update pdfium_test filename generation to give helpful message
• 5fb466ed5 Use helper functions to generating pdfium_test output filenames
• b913afffd Check resources dictionaries more closely in FPDFEditEmbedderTest
• 0d00221f2 Roll build/ 1da99af9b..ff3e22160 (121 commits)
• 5bb3f5614 Roll tools/clang/ 2a7073518..f68624726 (19 commits)
• 216c392c6 Update gn_version to git_revision:41fef642de70ecdcaaa26be96d56a0398f95abd4
• 8b6873e84 Roll v8/ 8a4efd3df..f66b0bc93 (509 commits)
• a1e3d2bf3 Roll Fuchsia SDK from version:11.20230306.1.1 to version:12.20230330.3.1
• a9e33b5d2 Roll buildtools and libc++
• 31bc914fb Fix Fuchsia build with Skia enabled
• af26f61e6 Fix a span CHECK() failure in RgbByteOrderTransferBitmap()
• 5d9acaac1 IWYU: add stdint.h for uint32_t pdfium::annotation_flags
• dabf13f6e Roll third_party/abseil-cpp/ 28c6deaca..20c8ae002 (5 commits)
• ac895975f Roll third_party/freetype/src/ d874ffa96..b0a4f9927 (44 commits)
• 1f2240306 Roll tools/memory/ b55593f4d..13f0b81ce (1 commit)
• 415349ec8 Roll third_party/libpng/ 20d2554f8..805df541c (1 commit)
• e509a6046 Roll base/allocator/partition_allocator/ 22b087c8b..118936d67 (44 commits)
• 077aa8c26 Roll buildtools/third_party/libunwind/trunk/ 7b03cc568..f3464caa6 (8 commits)
• e34f0d336 Roll buildtools/third_party/libc++abi/trunk/ cff1f2def..4a9d0560b (14 commits)
• 8856083df Roll third_party/depot_tools/ 424814829..ab117384e (84 commits; 31 trivial rolls)
• 8e5630ca0 Roll third_party/libjpeg_turbo/ 0b6e6a152..aa4075f11 (1 commit)
• ef3020027 Do copy-on-write in CPDF_PageContentManager
• 692f0719e Do copy-on-write in CPDF_PageContentGenerator
• 31f23b926 Split CPDF_PageContentGenerator::UpdateContentStreams()
• f4b3342ca Roll third_party/zlib/ 90e67ba3f..b890619bc (5 commits)
• 6c3577ca2 Add RemoveTextObjectWithTwoPagesSharingResourcesDict test case
• 02516521c Remove a duplicate FPDFEditEmbedderTest test case
• c16abfd66 Roll third_party/skia/ d10098c22..ad459a5b8 (92 commits)

</details>

Changes (Release 4.5.0)

Summary (pypdfium2)

• In pdfium-binaries, form initialization for V8/XFA enabled builds has been fixed (see pdfium-binaries#105). pypdfium2's support model has been updated accordingly.

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.4.0 and 4.5.0 (latest commit first):

• 3348f21 [autorelease] update changelog and version file
• d494c25 Somewhat address the previous fixme
• 8732642 bases: add fixme
• d5bceb7 pageobjects: nit
• 0e5a362 build: add use_system_libtiff
• 219509d Update changelog
• 4c3d00f Update init_forms()

</details>

<details> <summary>PDFium commit log</summary>

Commits between 5677 and 5692 (latest commit first):

• 97af73090 Add use_system_libtiff build option
• 9b9bf7539 Keep track of ExtGState resources
• 69703b37c Keep track of Font and XObject resources
• 28f8db4c0 Avoid generating PDFs with unreferenced objects
• 01b85b79a Add object tree traversal utility functions
• 1e5dee361 Save the trailer's object number when parsing
• 0a6944ead Explain how CPDF_Object works
• f6bac94bd Add fallback color space check when choosing JpxDecodeAction
• 01ea024b7 Add RemoveTextObjectWithTwoPagesSharingResources test
• 4d48929e3 Check for removed resources in saved output in RemoveTextObject test
• 1f4904f68 Test trailer generation in FPDFSaveEmbedderTest.SaveLinearizedDoc
• 5018240eb Add some using statements in fpdf_save_embeddertest.cpp
• 06a0689d4 Encapsulate more in CPDF_PageContentManager
• 0a1116093 Switch CPDF_PageContentManager to have a CPDF_Document pointer
• f3d0f929f Add RemoveTextObjectWithTwoPagesSharingContentArrayAndResources test
• 469cc8f79 Roll Skia and use new SkImages factory and gni files
• 1233727e1 Devirtualize CPDF_Object::CloneDirectObject()
• 01288cd99 Use NOTREACHED_NORETURN() in core/fpdfapi/page
• 4e8a0feaa Fix nits in cpdf_pagecontentmanager.h
• 49e4f4484 Rename JpxImageInfo::components to JpxImageInfo::channels
• 5cd3d908b Update third_party/base/numerics

</details>

Changes (Release 4.4.0)

Summary (pypdfium2)

<details> <summary>pypdfium2 commit log</summary>

Commits between 4.3.0 and 4.4.0 (latest commit first):

• 4018c9c [autorelease] update changelog and version file
• ae7d739 bitmap: slightly improve docs
• 4bbae67 pageobjects: remove ridiculous if expression
• b5a97fc setup/pkg_base: add dev note
• 15c5562 bases: add task
• 7019e67 add note on musl task
• 0a158b5 [ws only] reformat packaging_base header
• 6df39f1 Slightly polish setup.py
• c519024 document: add task
• 71a0a63 Add reference bindings (closes #192) (#196)
• 7bb3549 Transfer ownership of ctypesgen fork (closes #194)
• e285802 MANIFEST.in: add missing word in comment

</details>

<details> <summary>PDFium commit log</summary>

Commits between 5664 and 5677 (latest commit first):

• aae3f4452 Simplify pitch calculation in CFX_DIBitmap::CalculatePitchAndSize()
• a59704451 Add a pixel test for axial shading
• 7bfe65fa5 Add RemoveTextObjectWithTwoPagesSharingContentStreamAndResources test
• 22614014f Clamp rectangle values in FindTextlineFlowOrientation
• ab00c1bc9 Use SkPackARGB32NoCheck() instead of SkPackARGB32()
• a066864b6 Remove unnecessary Clear(0) from CPDF_RenderStatus
• 3f80d9332 Make SkBitmap immutable before asImage()
• 9286281aa [Skia] Support pre-multiplied MultiplyAlpha()
• 168d065ea Clarify what CPDF_PageObject is
• ef71e9ae3 Do more checks in a FPDFPage_RemoveObject() test
• 2dee06f04 Remove a toolchain workaround in FPDF_NewFormObjectFromXObject()
• b4357750c [Skia] Add methods to force pre-multiplied state
• d914c5fe1 Avoid overloading CPDF_StreamContentParser::AddImage()
• 22d7c0733 Do less work in CPDF_PageContentGenerator when there are no streams
• 15b1203da Use NOTREACHED_NORETURN() in fpdfsdk
• 99dbaf4f6 Implement NOTREACHED_NORETURN()
• d75dded3f Sync third_party/base/immediate_crash.h with Chromium copy
• 8bc8377e8 Add MultiplyAlpha() API to CFX_RenderDevice
• 867f7e996 Roll Catapult from 6234cc4e018d to c9f4f650cdee (57 revisions)
• 5e426ab5c Roll Code Coverage from 67720beda1c7 to b0f9daa5b3f5 (3 revisions)
• 45d010567 Add pixel test for transparency group compositing