vangel76andClaude Sonnet 5.5 8bdd2d3750 fix(cos): read the dictionary's syntax before the object-stream pre-check ...

The pre-check cut the dictionary at the next object header or at a
'>>' + 'stream' byte pattern, so text inside a string could hide a later
/Type /ObjStm. It now reads the dictionary as the parser does (strings,
hex strings, comments, nesting) and treats an object whose end is not
certain as a candidate, so the reconstructed object set stays the same.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-10-27 19:46:44 +01:00

..

a11y

refactor(a11y): extract text_spans and xobject_bbox helpers (Sonar S3776) (#4407)

2026-10-24 10:29:43 -04:00

annot

Integration: a comment listed through a reference chain keeps its replies after an edit (#4061)

2026-10-24 23:18:59 +00:00

audit

fix(audit): charge a line's runs to the comparison bound

2026-10-23 04:15:41 -03:00

automation

chore(deps): bump 11 safe dependency updates

2026-10-25 16:36:22 -06:00

compare

…

content

fix(redact,sign,cos): close high-severity findings from the agent scan

2026-10-23 10:11:10 -04:00

cos

fix(cos): read the dictionary's syntax before the object-stream pre-check

2026-10-27 19:46:44 +01:00

create

Merge PR #4331: M10: apply soft-mask Decode intervals to image exports

2026-10-24 06:22:48 +00:00

crypt

fix(crypt): resolve crypt filter methods once per handler

2026-10-22 17:43:04 +00:00

edit

M7: a moved text box's drag preview shows the box alone (#4464) (#4475)

2026-10-25 10:02:46 -04:00

engine

refactor(engine): keep the moved docs' intra-doc links resolving (document, fill_sign)

2026-10-25 23:12:15 +01:00

export

M10: Word export keeps an italic run inside its sentence's paragraph (#4158) (#4411)

2026-10-25 10:11:00 -04:00

filters

A counted decode bounds all filter stages together and counts output before the predictor

2026-10-22 23:33:37 +00:00

fonts

Migrate PdfCraft to egui 0.37 (#4591)

2026-10-25 14:30:31 -04:00

forms

fix(sonar): clear css:S9441 and S3776 in forms actions

2026-10-26 16:01:32 -04:00

geom

…

js

Tests: XFA calculation tests no longer fail when the machine is busy (#4535)

2026-10-25 10:02:00 -04:00

measure

Merge main into fix/coderabbit-c5-forms-misc

2026-10-22 22:07:19 -04:00

model

docs(filters, model): record the filter chain and inherited copy limits

2026-10-22 17:47:29 +00:00

ocr

fix(ocr): the text layer restores the rendering mode it sets (#3029) (#3033)

2026-10-18 03:12:37 -04:00

optimize

fix(optimize): a GoToR or GoToE /D no longer keeps a local named destination (#4445)

2026-10-24 10:29:33 -04:00

oracle

Build each crate's integration tests as one binary (#4087)

2026-10-22 11:28:58 -04:00

organize

M4: Document Properties reads a named opening destination's page, so choosing page 1 replaces it (ISO 32000-2 12.3.2.4) (#4574)

2026-10-25 10:02:40 -04:00

platform

fix(platform): a saved file keeps its hidden and system attributes on Windows (#4647)

2026-10-25 10:00:14 -04:00

preflight

chore: resolve SonarCloud maintainability issues (#4356)

2026-10-23 23:28:18 -04:00

print

Migrate PdfCraft to egui 0.37 (#4591)

2026-10-25 14:30:31 -04:00

redact

proposal(redact): unlink unused Type 3 glyph programs and fonts on redaction (F-011)

2026-10-26 16:01:29 -04:00

render

M2: a luminosity soft mask in a DeviceCMYK group converts as ISO 32000-2 10.4.2 says, so 100% K masks fully (#4423)

2026-10-25 10:02:49 -04:00

sign

chore(deps): bump 11 safe dependency updates

2026-10-25 16:36:22 -06:00

testkit

Never-crash gate on the oracle and testkit crates; oracle find() no longer panics on an empty needle (#3435)

2026-10-19 13:01:03 -04:00

ui-egui

feat(ui): menus from craft-menu, native on macOS (#4752)

2026-10-26 00:57:46 -04:00

xfa

chore(deps): bump 11 safe dependency updates

2026-10-25 16:36:22 -06:00

xfdf

fix(xfdf): an empty field in imported XFDF clears the field, as FDF and XML do (#4483)

2026-10-25 10:01:38 -04:00