Merged
Conversation
贡献:删除了ocr在新版本中的接口,新增了piclayout;修改了一些piclayout中的限速bug
为pdf2file增加了sub_dir关键字,用于将所有输出文件保存在以文件名命名的子文件夹下
修改了export_history存在的一些错误;弃用了asyncio.Lock(loop=self._loop)
1. piclayout 添加 output path, output_format, save_subdir 参数 2. 单元测试使用临时文件夹 3. 暂时屏蔽 record 功能
Dependency ReviewThe following issues were found:
License Issuespyproject.toml
OpenSSF Scorecard
Scanned Files
|
Address high/moderate severity CVEs reported in dependency review: - cryptography: 46.0.4 → >=46.0.5 (CVE-2026-26007, SECT curves subgroup attack) - h2: pin >=4.3.0 on Python>=3.9 (CVE-2025-57804, HTTP request smuggling) - pypdf: pin >=6.8.0 on Python>=3.9 (multiple DoS/RAM CVEs); <6.0.0 on 3.8 - urllib3: pin >=2.6.3 on Python>=3.9 (decompression bomb CVEs); 1.x branch has no patch - Pillow: pin >=12.1.1 on Python>=3.10 (CVE-2026-25990, PSD OOB write); use 10.x on <3.10 Note: h2, pypdf, urllib3 and Pillow vulnerabilities on Python 3.8 cannot be fixed as upstream dropped Python 3.8 support before releasing patches.
Remove vulnerable fallback constraints for urllib3 1.x and pypdf 5.x that had no upstream security patches on Python 3.8.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
v3-2026解析模型选项,适用于pdf2file和pic2file,支持 v3 JSON sidecar 输出及图片裁切辅助工具formula_level枚举(0/1/2),用于控制 v2 导出时的公式降级行为cryptography>=46.0.5、h2>=4.3.0、pypdf>=6.8.0、urllib3>=2.6.3、Pillow>=12.1.1(修复 CVE-2026-26007、CVE-2025-57804、CVE-2026-25990 等)