What's new
Security (SEC)
- Make file identifiers non-deterministic (#4366) by @stefan6419846
- Block not strictly increasing offsets in object streams (#4364) by @stefan6419846
- Limit XFA form decoding work (#4363) by @stefan6419846
- Apply image size limits more strictly (#4361) by @stefan6419846
Deprecations (DEP)
- Cleanup deprecations for the next major release (#4306) by @stefan6419846
- Remove support for cryptography<43 (#4304) by @stefan6419846
- Drop support for Python 3.9 (#4292) by @stefan6419846
New Features (ENH)
Performance Improvements (PI)
- Speed up LZW decoding for clear table markers (#4354) by @stefan6419846
- Build right-to-left text runs with a single join (#4344) by @kholdrex
- Read every page label number tree once for all pages (#4321) by @kholdrex
- Decode the PNG Up predictor a row at a time (#4312) by @MartinThoma
Bug Fixes (BUG)
- Fix cloning of objects that require constructor arguments (#4262) by @Ak4shh
- Serialize XMP packets without an XML declaration (#4296) by @Ak4shh
Maintenance (MAINT)
- Generate Symbol and ZapfDingbats encodings from Adobe sources (#4333) by @plenaerts