JavaGolangJavaScriptSwiftAndroidRustMiddleware
12 hours ago
pdfcpu
pdfcpu

v0.16.2

pdfcpu v0.16.2

Hello!

We ship important security, stability, and PDF compatibility fixes with no breaking Go API changes. The release requires Go 1.26 or later. Upgrading is highly recommended!

Security

  • Harden parsing and decoding against excessive work, circular references, malformed fonts, and invalid image parameters. Enforce resource limits and prevent several malformed-input panics.
  • Reduce repeated validation of shared objects and memory allocations when parsing large certificate revocation lists.
  • Correct AES-256 password preparation and owner authentication, encryption revision checks, and extraction permissions.
  • Fix named and Identity crypt-filter handling, crypt-filter length units and validation, and encryption of strings rewritten from object streams.

Fixes and improvements

  • Preserve catalog data, inherited page boxes and resources, shared stamp resources, name-tree values, and named destinations during processing. Correct compressed-object reference renumbering during merging.
  • Fix PDF whitespace, text and hexadecimal-string decoding, inline-image parsing, cross-reference handling, and effective PDF version detection.
  • Improve form field inheritance, checkbox/radio handling, export ordering, JSON matching, list-box clearing, and Unicode text-length checks.
  • Correct CMYK rendering, RGBA image import, Flate/TIFF predictor handling, and Crypt filter pipelines.
  • Fix ToUnicode mappings, TrueType widths and style detection, and XMP date parsing.
  • Complete required standard-font metrics for PDF 2.0 output and enforce required annotation appearances.
  • Strengthen validation of images, graphics values, colour spaces, functions, destinations, PageLabels, and PDF 2.0 entries. Restore targeted multimedia compatibility and improve action reporting.

Compatibility

Existing Go API signatures remain unchanged; supporting packages receive additive exports. Strict validation now rejects additional malformed inputs, while applicable relaxed compatibility is retained with notices. PDF 2.0 writes report an error when required annotation appearances are missing; automatic appearance generation remains incomplete. Encryption defaults are unchanged.

Thanks

Thanks everyone who opened issues. Shoutout to @qoke and the IQ Hive team for providing a heavy load of critical fixes for this release.

1 days ago
chromedp
chromedp

v0.21.0

The package remote has its own WebSocket client, and it is a package of the core module now. The nested module remote and the dependency github.com/gobwas/ws are gone. The core module still needs only the standard library and cdproto.

The import path is the same: github.com/chromedp/chromedp/remote. The public API of the package is the same.

Upgrade: if your go.mod has a line for github.com/chromedp/chromedp/remote, remove it (go mod tidy does that). Go reports an ambiguous import while both the old nested module and the core module provide the package. The tag remote/v0.2.0 is the last version of the nested module.

The client follows RFC 6455: it checks the handshake, joins fragmented messages, checks UTF-8 and the size of a message, answers pings, and does the close handshake. It does not support extensions such as permessage-deflate. Go 1.25 and later are supported.

1 days ago
tcell
gdamore

Version 3.6.0 Feature Release

The main headline here is that the mouse is supported on the Linux console with GPM. There are performance improvements and some bug fixes, plus improved reporting of pixel sizes on window resize events as well.

What's Changed

New Contributors

Full Changelog: https://github.com/gdamore/tcell/compare/v3.5.0...v3.6.0

1 days ago
go-micro
micro

v6.15.0

What's Changed

Full Changelog: https://github.com/micro/go-micro/compare/v6.14.0...v6.15.0

1 days ago
Open-IM-Server
OpenIMSDK

v3.8.3-patch.17

What's Changed

Full Changelog: https://github.com/openimsdk/open-im-server/compare/v3.8.3...v3.8.3-patch.17

4 days ago
piko
andydunstall

v0.10.1

Full Changelog: https://github.com/andydunstall/piko/compare/v0.9.1...v0.10.1

5 days ago
ebiten
hajimehoshi

v2.10.5

https://ebitengine.org/en/documents/2.10.html#v2.10.5

6 days ago
chromedp
chromedp

v0.20.1

Documentation only. The README, the package documentation and the docs have the current versions (chromedp v0.20.0, cdproto v0.157.8, remote v0.2.0), the CI matrix and the release history. The README describes termcast and the 43 programs of chromedp/examples.

6 days ago
chromedp
chromedp

remote v0.2.0

The remote module requires chromedp v0.20.0 and cdproto v0.157.8, and uses go 1.25. It builds with Go 1.25 and later.

6 days ago
chromedp
chromedp

v0.20.0

chromedp supports Go 1.25 and later. Before this release, the module needed Go 1.27 (see #1536).

  • The JSON types come from github.com/chromedp/cdproto/cdp/jsonv2. With Go 1.27 or GOEXPERIMENT=jsonv2 they are aliases of the types of the standard encoding/json/v2 and jsontext, so the public API is the same. With Go 1.25 and 1.26 they come from github.com/go-json-experiment/json.
  • The modules chromedp, remote and test use go 1.25 and cdproto v0.157.8.
  • The CI runs Go 1.25, 1.26 and stable on Linux, stable on Windows and macOS, and the experiment and the compatibility tag.