Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 15, 2025

Bumps pypdfium2 from 5.1.0 to 5.2.0.

Release notes

Sourced from pypdfium2's releases.

5.2.0

Changes (Release 5.2.0)

Summary (pypdfium2)

  • Added new builds android_{arm64_v8a,armeabi_v7a}, {many,musl}linux_{ppc64le,riscv64,loongarch64} and musllinux_armv7l to the release process. This greatly improves platform support. Loongarch is only uploaded to GH, as PyPI doesn't accept it yet. Replaced musllinux_{x86_64,aarch64,i686} with our own builds, as they are a bit smaller than the pdfium-binaries.
  • Build s390x this once through emulated gcc, because static clang doesn't seem to produce working builds for this target. We may not be able to continue doing this.
  • build_native.py: Added full dependency library vendoring abilities. This is now the default behavior on fallback setup. Integrated ninja/gn bootstrapping helpers.
  • CIBW workflow: Use vendored libraries for most Linux targets. Build ppc64le, riscv64, loongarch64 (and theoretically s390x) using static clang that runs on the host architecture (even though from within an emulated container), while being pre-configured for cross-compilation to the target architecture. This is much faster than building with an emulated compiler. Many thanks to Matthieu Darbois (mayeut) of pypa/manylinux for coming up with this approach.
  • Greatly simplified verification of pdfium-binaries attestation in pypdfium2's setup. Thanks to Benoît Blanchon for attaching the attestation as artifact.
  • Enabled immutability for pypdfium2's GitHub releases, and added build provenance attestations, like pdfium-binaries did.

Commits between 5.2.0b1 and 5.2.0 (latest commit first):

  • c774578 [autorelease main] update 5.2.0
  • be30e32 cibw: attempt to make package install more reliable on RHEL-based images
  • f5cc6af Temporarily enable s390x (emulated gcc) for v5.2.0
  • 23efe69 Readme update (native sbuild / cibw)
  • 25213b7 sbuild.yaml: hardcode glibc, add legacy manylinux2014 tag
  • 5d47540 Slightly update main.yaml
  • 4270a1a textpage/docs: move note about line breaks
  • 6ef7916 sbuild_native: remove stale, unused input
  • 130fa06 Revert "Update changelog"
  • 1cce831 workflows: auto-adapt branch
  • 02f224a Update changelog
  • 760ac8e conda.yaml: add ability to set ref
  • 03c3f43 main.yaml/augment: fix emulated
  • 1b66381 main.yaml/augment: set fail-fast: false
  • 8904ad3 main.yaml: formatting / ws
  • d92a097 main.yaml/augment: reorder targets
  • 2b2e900 sbuild_one: run apt-get update
  • f66cad2 main.yaml: attempt to deduplicate augment step
  • 2e9b9dd main.yaml: add s390x, commented out
  • c11acd2 autorelease: clarify pdfium update message
  • 100ff5b Attempt to fix conda
  • 05f5006 Add explanation why TestPyPI is currently commented out
  • 6905727 ppc64le: add manylinux2014 tag
  • 356165f changelog correction
  • b557aa5 Put changelog in GH release desc after all, follow usual process
  • d3716fa Manually fix changelog

... (truncated)

Commits
  • c774578 [autorelease main] update 5.2.0
  • be30e32 cibw: attempt to make package install more reliable on RHEL-based images
  • f5cc6af Temporarily enable s390x (emulated gcc) for v5.2.0
  • 23efe69 Readme update (native sbuild / cibw)
  • 25213b7 sbuild.yaml: hardcode glibc, add legacy manylinux2014 tag
  • 5d47540 Slightly update main.yaml
  • 4270a1a textpage/docs: move note about line breaks
  • 6ef7916 sbuild_native: remove stale, unused input
  • 130fa06 Revert "Update changelog"
  • 1cce831 workflows: auto-adapt branch
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pypdfium2](https://github.com/pypdfium2-team/pypdfium2) from 5.1.0 to 5.2.0.
- [Release notes](https://github.com/pypdfium2-team/pypdfium2/releases)
- [Commits](pypdfium2-team/pypdfium2@5.1.0...5.2.0)

---
updated-dependencies:
- dependency-name: pypdfium2
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 15, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 12, 2026

Superseded by #45.

@dependabot dependabot bot closed this Jan 12, 2026
@dependabot dependabot bot deleted the dependabot/pip/pypdfium2-5.2.0 branch January 12, 2026 04:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant