Skip to content

build(deps): update xhtml2pdf requirement from >=0.2.21 to >=0.2.23 - #540

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/xhtml2pdf-gte-0.2.23
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/xhtml2pdf-gte-0.2.23

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 11, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on xhtml2pdf to permit the latest version.

Release notes

Sourced from xhtml2pdf's releases.

v.0.2.23

This release adds CSS custom properties, real block boxes and long-word wrapping. It also fixes a round of table, table-of-contents and chart bugs, and renders long documents with far less memory and time. The PDF output of the speed and memory work is byte-for-byte identical to 0.2.22.

🎉 New

  • CSS custom properties: --name: value and var(--name, fallback) work anywhere a value goes, including shorthands, @page, @frame and @font-face (#743).
  • A block's box goes round everything it holds: a <div> with padding, a border or a background draws one box around its text, tables and inner blocks, and the box is cut cleanly at a page break. The border is no longer copied onto every paragraph and
  • Long words wrap: overflow-wrap: break-word / anywhere (and word-wrap) break a wors a URL or a hash, andthis works on links. word-break: break-all is supported (#339). - Table sizing: marmargin: 0 autoapply to tables, and a CSSwidthon ais read ([#386](https://github.com/xhtml2pdf/xhtml2pdf/issues/386)). A table with anauto` margin shrinks toon a table is honoured(#562).
  • **Links to other filesd other relative linksbecome real links (#660).
  • Block height: a bld, and an empty blockwith a border or background is drawn.
  • Charts: they read an entry per series viaseriesNames / seriesColors.

💪🏼 Improvements

  • Less memory, and faster. Peak memory for long documents drops to about 40% of what it was: 10,0tead of 371 MB, and a256-row table 14 MB instead of 26 MB. Rendering is 10–39% faster: each word is measured once, a paragrar width, and the parsedHTML is released before layout.
  • CSS warnings name the file, a <style> blockor a style attribute (#780).
  • Headings inside table s appear in <pdf:toc>.
  • Images Pillow refuses for their size are reported the same way max_image_pixels repor

🐛 Bug fixes

  • A `<link rel="stylesheropped.
  • Named @page rules gave the first page the wrong size, and a leading <pdf:nexttemplate> cous template (#455).
  • Right-to-left tables of contents drew their page numbers over the titles, and long entries shrank #664).
  • Cell padding was applied twice, and a table margin indented the text inside its cells (#386).
  • Translucent backgrounds (#rrggbbaa) were painted twice behind each line of text.
  • Chart options barWidth, barSpacing, fontName and strokeColor crashed or were ignored.
  • List markers fall back to a font that has their characters. ZapfDingbats and Symbol glyphs are no lon
  • page-break-inside: avoid on a single paragraph did nothing, and a heading could be left alone at t
  • A truncated or corrupt image no longer aborts the conversion.
  • The height attribute

📘 Documentation

  • The Django `link_callb Django (#548).
  • New docs on overflow-wrap, word-break, -pdf-word-wrap (#532), links, custom properties, posit
  • tools/perf now measures memory, leaks and large documents.

Full notes: https://xhtml2pdf.readthedocs.io/en/latest/release-notes.html

Commits
  • f28aec3 Release 0.2.23
  • d3195b5 Release notes for the memory and speed work
  • c4c835d Write up the second round of measuring in tools/perf
  • be12b46 Look up a fragment's glyph coverage per set, not per character
  • 9c7f8fe Deep-copy static frame stories without copy's general machinery too
  • 889bc63 Break a paragraph's lines once per width
  • b64fb7c Deep-copy a frame without copy's general machinery
  • 43efc8c Measure each word once per render, and compare shared frag values by identity
  • 9f98d30 Hold in a frag only what its element changed, and let go of the DOM
  • cb59fac Measure memory, leaks and big documents in tools/perf
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [xhtml2pdf](https://github.com/xhtml2pdf/xhtml2pdf) to permit the latest version.
- [Release notes](https://github.com/xhtml2pdf/xhtml2pdf/releases)
- [Commits](xhtml2pdf/xhtml2pdf@v0.2.21...v0.2.23)

---
updated-dependencies:
- dependency-name: xhtml2pdf
  dependency-version: 0.2.23
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot requested a review from NovaCode37 as a code owner October 11, 2026 06:23
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants