What's new
Security (SEC)
- Improve performance of read_until_whitespace (#3947) by @stefan6419846
- Limit CID width range and width count when loading fonts (#3946) by @stefan6419846
- Limit token length for ToUnicode entries (#3944) by @stefan6419846
Deprecations (DEP)
- Deprecate previously missed inline_images setter as well (#3897) by @stefan6419846
New Features (ENH)
- Add ActualText tag when we produce RTL appearance stream (#3901) by @PJBrs
- Allow keeping original PDF header in non-incremental clone mode (#3918) by @pctablet505
- AppearanceStream: Add support for RTL appearance streams with Arabic characters (#3831) by @PJBrs
- Add actions base class (#3552) by @j-t-1
Bug Fixes (BUG)
- Expand low-bit samples for images without a filter (#3938) by @RavSinghChandan
- Decode low-bit DeviceRGB images as RGB instead of palette (#3929) by @RavSinghChandan
- Correctly handle IndirectObject in FlateDecode.decode DecodeParms (#3937) by @stefan6419846
Documentation (DOC)
- Image and attachment filenames are unsanitized (#3942) by @stefan6419846
Maintenance (MAINT)
- Update charset mappings (#3935) by @stefan6419846