Skip to content

feat: add v3 model#78

Merged
Muxv merged 51 commits intomainfrom
hsn/feat/add-v3-model
Mar 18, 2026
Merged

feat: add v3 model#78
Muxv merged 51 commits intomainfrom
hsn/feat/add-v3-model

Conversation

@HSn0918
Copy link
Collaborator

@HSn0918 HSn0918 commented Mar 16, 2026

Summary

  • V3 模型支持:新增 v3-2026 解析模型选项,适用于 pdf2filepic2file,支持 v3 JSON sidecar 输出及图片裁切辅助工具
  • 公式降级等级:新增 formula_level 枚举(0/1/2),用于控制 v2 导出时的公式降级行为
  • 安全修复:升级存在漏洞的依赖版本 — cryptography>=46.0.5h2>=4.3.0pypdf>=6.8.0urllib3>=2.6.3Pillow>=12.1.1(修复 CVE-2026-26007CVE-2025-57804CVE-2026-25990 等)

Menghuan1918 and others added 30 commits February 10, 2025 23:49
贡献:删除了ocr在新版本中的接口,新增了piclayout;修改了一些piclayout中的限速bug
为pdf2file增加了sub_dir关键字,用于将所有输出文件保存在以文件名命名的子文件夹下
修改了export_history存在的一些错误;弃用了asyncio.Lock(loop=self._loop)
@github-actions
Copy link

github-actions bot commented Mar 16, 2026

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 6 package(s) with unknown licenses.
See the Details below.

License Issues

pyproject.toml

PackageVersionLicenseIssue Type
aiofiles>= 24.1.0NullUnknown License
cryptography>= 46.0.5NullUnknown License
h2>= 4.3.0NullUnknown License
pypdf>= 6.8.0NullUnknown License
pytest>= 8.3.5NullUnknown License
urllib3>= 2.6.3NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
pip/aiofiles >= 24.1.0 UnknownUnknown
pip/cryptography >= 46.0.5 UnknownUnknown
pip/h2 >= 4.3.0 UnknownUnknown
pip/pypdf >= 6.8.0 UnknownUnknown
pip/pytest >= 8.3.5 UnknownUnknown
pip/urllib3 >= 2.6.3 UnknownUnknown

Scanned Files

  • pyproject.toml

HSn0918 added 4 commits March 16, 2026 18:07
Address high/moderate severity CVEs reported in dependency review:
- cryptography: 46.0.4 → >=46.0.5 (CVE-2026-26007, SECT curves subgroup attack)
- h2: pin >=4.3.0 on Python>=3.9 (CVE-2025-57804, HTTP request smuggling)
- pypdf: pin >=6.8.0 on Python>=3.9 (multiple DoS/RAM CVEs); <6.0.0 on 3.8
- urllib3: pin >=2.6.3 on Python>=3.9 (decompression bomb CVEs); 1.x branch has no patch
- Pillow: pin >=12.1.1 on Python>=3.10 (CVE-2026-25990, PSD OOB write); use 10.x on <3.10

Note: h2, pypdf, urllib3 and Pillow vulnerabilities on Python 3.8 cannot be
fixed as upstream dropped Python 3.8 support before releasing patches.
Remove vulnerable fallback constraints for urllib3 1.x and pypdf 5.x
that had no upstream security patches on Python 3.8.
@Muxv Muxv merged commit 3cf0b19 into main Mar 18, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants