[dependabot]

Bumps pymupdf from 1.28.0 to 1.28.2.

Release notes

Sourced from pymupdf's releases.

PyMuPDF-1.28.2 released

Wheels for Windows, Linux and MacOS, and the sdist, are available on https://pypi.org and can be installed in the usual way, for example:

python -m pip install --upgrade pymupdf

Changes in version 1.28.2 ()

Fixed issues:

• Fixed #4670
• Fixed #4943
• Fixed #5030
• Fixed #5042
• Fixed #5044
• Fixed #5049

Other:

• Use MuPDF-1.28.2.
• Output warning when legacy fitz module is imported.
• Cope better with markdown containing illegal utf8 sequences.
• Fixed building with PYMUPDF_SETUP_MUPDF_VS_UPGRADE.
• pymupdf.Page.find_tables():
  • new args use_layout: bool = True union: bool = False refine: bool = False.
  • Improved speed.
• Retrospectively added fix for #4936 in release 1.28.0 below.

Changelog

Sourced from pymupdf's changelog.

Change Log

Changes in version 1.28.2 (2026-08-06)

Fixed issues:

• Fixed 4670 <https://github.com/pymupdf/PyMuPDF/issues/4670>_: scrub fails to remove hidden text after clean_contents stopped including line breaks (\u2265 1.24.0)
• Fixed 4943 <https://github.com/pymupdf/PyMuPDF/issues/4943>_: enh: applying redactions with image cropping for currently unsupported colorspaces
• Fixed 5030 <https://github.com/pymupdf/PyMuPDF/issues/5030>_: find_tables() with layout enabled can return a zero-cell Table, and Table.bbox then raises "ValueError: min() iterable argument is empty"
• Fixed 5042 <https://github.com/pymupdf/PyMuPDF/issues/5042>_: Page.get_texttrace() leaks None references \u2014 Fatal Python error (none_dealloc) in long-running processes (1.27.2.3 & 1.28.0)
• Fixed 5044 <https://github.com/pymupdf/PyMuPDF/issues/5044>_: Outline (TOC) parsing bug
• Fixed 5049 <https://github.com/pymupdf/PyMuPDF/issues/5049>_: font subsetting segfaults in 1.28.0, regression from 1.27.2.2 #5049
• Fixed 5056 <https://github.com/pymupdf/PyMuPDF/issues/5056>_: Option for reproducible/deterministic save output (omit MuPDF version banner + Producer)

Other:

• Use MuPDF-1.28.2.
• Output warning when legacy fitz module is imported.
• Cope better with markdown containing illegal utf8 sequences.
• Fixed building with PYMUPDF_SETUP_MUPDF_VS_UPGRADE.
• pymupdf.Page.find_tables():
  • new args use_layout: bool = True union: bool = False refine: bool = False.
  • Improved speed.
• Retrospectively added fix for #4936 in release 1.28.0 below.
• Added windows-arm64 wheel.

Changes in version 1.28.0 (2026-06-29)

Fixed issues:

• Fixed 4114 <https://github.com/pymupdf/PyMuPDF/issues/4114>_: ComboBox choice_values full of empty strings despite PDF having valid choices.
• Fixed 4950 <https://github.com/pymupdf/PyMuPDF/issues/4950>_: remove_rotation() raises ValueError on widgets with empty/infinite rects
• Fixed 5001 <https://github.com/pymupdf/PyMuPDF/issues/5001>_: Formulae incorrectly rendered as black boxes
• Fixed 5033 <https://github.com/pymupdf/PyMuPDF/issues/5033>_: Annot.set_rotation(0) followed by Annot.update() throws AttributeError
• Fixed 4936 <https://github.com/pymupdf/PyMuPDF/issues/4936>_: bug: incomplete redaction of vector graphics (line art)

Other:

• Use MuPDF-1.28.0.
• pymupdf.Document.init(): new arg archive to support documents with archives.
• pymupdf.Document.convert_to_pdf(): also generate links.
• Fixed MacOS x64 platform tag - used to be macosx_10_9_x86_64, but we actually require MacOS 10.15, so platform tag is now macosx_10_15_x86_64.
• Support Windows builds with free thread python.
• pymupdf.Document.save() now saves non-PDF documents in PDF format.
• New method pymupdf.Document.apply_css().

... (truncated)

Commits

• 12786d1 tests/test_general.py:test_5054(): expect success after recent fix in mupdf m...
• 6adaca9 src/init.py:JM_get_font(): cope with mupdf master fz_lookup_noto_font()'s...
• 59525c7 changes.txt: updates for 1.28.2.
• 948bfba tests/test_pynone.py: renamed test to test_5042() to match github issue.
• 48b26ea .github/ISSUE_TEMPLATE/bug_report.yml: added 1.28.2.
• 6f98b39 setup.py: increment version to 1.28.2.
• 32eacbf tests/test_font.py:test_5049(): don't overwrite input file.
• 1ef7703 setup.py: misc cleanups.
• eb32057 tests/: added test_5054().
• c47e4c1 Add test for fixing #5056
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[cloudflare-workers-and-pages]

Deploying pdfapps with    Cloudflare Pages

Latest commit:	e542910
Status:	✅  Deploy successful!
Preview URL:	https://0e214026.pdfapps.pages.dev
Branch Preview URL:	https://dependabot-pip-pymupdf-1-28.pdfapps.pages.dev

View logs

[github-actions]

Python dependencies security check

pip-audit: requirements.txt

No known vulnerabilities.

pip-audit: flatpak/requirements-pinned.txt

No known vulnerabilities.

Outdated check (informational)

Package	Pin	Latest on PyPI	Status
PySide6	PySide6>=6.11.1	6.11.2	outdated
pypdf	pypdf>=6.16.2	6.16.2	up-to-date
cryptography	cryptography>=50.0.1	50.0.1	up-to-date
qtawesome	qtawesome>=1.4.2	1.4.2	up-to-date
pillow	pillow>=12.3.0	12.3.0	up-to-date
pymupdf	pymupdf>=1.28.2	1.28.2	up-to-date
pytesseract	pytesseract>=0.3.13	0.3.13	up-to-date
python-docx	python-docx>=1.2.0	1.2.0	up-to-date
python-pptx	python-pptx>=1.0.2	1.0.2	up-to-date
openpyxl	openpyxl>=3.1.5	3.1.5	up-to-date
beautifulsoup4	beautifulsoup4>=4.15.0	4.15.0	up-to-date
ebooklib	ebooklib>=0.20	0.20	up-to-date
lxml	lxml>=6.1.1	6.1.3	outdated
urllib3	urllib3>=2.7.0	2.7.0	up-to-date
idna	idna>=3.18	3.19	outdated
pyinstaller	pyinstaller>=6.21.0	6.22.2	outdated

Auto-generated by security-deps workflow. Merge is blocked only when pip-audit --strict reports vulnerabilities.

[nelsonduarte]

Superseded by #206, which raises the same floor and also updates the Flatpak wheel.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.