Bump pypdfium2 from 5.12.1 to 5.13.0

[dependabot]

Bumps pypdfium2 from 5.12.1 to 5.13.0.

Release notes

Sourced from pypdfium2's releases.

5.13.0

Release 5.13.0

Summary

• Experimental pyemscripten_2026_0_wasm32 (Pyodide) build support added. However, the resulting builds are flaky at runtime and subject to various types of random crashes. Freezes on shutdown have also been observed. While these issues persist, PyEmscripten wheels will not be uploaded to PyPI, but they are included in the release process and can be downloaded from GitHub on an experimental basis. If you can help track down and fix these issues, please reach out. Note: Our PyEmscripten wheels are bigger than usual, as they are built with debug symbols (a non-debug build is not considered useful at this stage).
• Fixed compatibility with Python 3.6 and 3.7.
  • Runtime support was inadvertently broken due to a faulty cached property backport which held only one cache per class, not per instance as should have been. The accidental loss of caches broke key assumptions of our autoclose logic, which relies on cached_property since 5.8.0. (Earlier versions that did not make extensive use of cached properties might work but have not been explicitly tested.)
  • This release replaces both functools.cached_property and the faulty functools.lru_cache() based backport with our own, backward compatible cached_property implementation along with thorough documentation.
  • Also, fixed setup (i.e. source installation) with Python 3.6 and its max available setup dependency versions (that is, setuptools 59). This had probably been broken for a long time. (A few non-breaking issues remain, e.g. for some reason we end up with a purelib directory, but it should be platlib.)
  • Bear in mind that ctypesgen continues to require Python >=3.8 at this time (3.6 compat not being a priority in that case), but you can install with --no-build-isolation and let the reference bindings be used, or try adding ctypesgen's src/ to PYTHONPATH to bypass setup, and see how it goes.
  • Note: We do not plan to (and practically cannot) keep up compatibility with outdated Python versions indefinitely. In particular, setup compatibility may be dropped sooner or later in favor of contemporary Python packaging concepts, like migrating as much as possible to pyproject.toml. That said, we are happy to restore compatibility at this point, and fix any unintentional breakage.
• Fixed MANIFEST.in missing Windows spoof headers, which resulted in subtly incorrect bindings when installing from an sdist on Windows, as seen in test failures. (Release wheels have been unaffected and passed the test suite, so this issue went unnoticed for a while.)
• Bumped gn-dist from 2407.1 to 2407.3. Made its setup python 3.6 compatible likewise (wheels should have worked before now). Changed versioning and release process so that CI no longer needs to push to the repository (may eventually become a blueprint for pypdfium2 itself). More documentation added, including manylinux2014 POC.
• Internal improvements (non-exhaustive):
  • Properly clean up *.egg-info/ and build/ before packaging, to avoid mad file inclusion bugs (ran into this while working on setup include rules).
  • Migrated from requirements files to PEP 735 dependency groups (pyproject.toml). Recent enough pip should be available to Python >= 3.9. For compatibility with older versions, feel free to use ./utils/misc/install_dep_group.py.
  • Applied dependency cooldowns to internal callers of pip install. Always use virtual environments in CI. Use lockfiles in sensitive areas (e.g. publish jobs).
  • Rearranged & improved utilities. Cleaner distinction between setupsrc/ and utils/.
  • Work around persistent i686 container network issues by downgrading host runner to ubuntu-24.04.
  • Let setupsrc/ share code from src/ through a pypdfium2_cfg._shared submodule that can be added to sys.path.

Build info

This release was made with the following build strategies:

• PBIN: [macosx_arm64, macosx_x86_64, win_amd64, win_arm64, win32, manylinux_x86_64, manylinux_i686, manylinux_aarch64, manylinux_armv7l, manylinux_ppc64le, manylinux_mips64le, android_arm64_v8a, android_armeabi_v7a]
• SBLD: [manylinux_mipsle]
• CIBW: [manylinux_riscv64, manylinux_loongarch64, manylinux_s390x, musllinux_x86_64, musllinux_aarch64, musllinux_armv7l, musllinux_i686, musllinux_ppc64le, musllinux_s390x, musllinux_riscv64, musllinux_loongarch64, pyodide_wasm32]

[!CAUTION] The following builds are affected by known, major issues (e.g. endianness bugs, crashes, freezes) and are NOT considered ready for production use: [manylinux_s390x, musllinux_s390x, pyodide_wasm32]

Commit logs

Commits between 5.12.1 and 5.13.0 (latest commit first):

• a4659102 [autorelease main] update 5.13.0
• 9094de35 continue on changelog/docs
• b89e367a git_net_additions.py: minor tweaks
• 57157e78 readme: don't overdo admonitions
• 033d5ce0 changelog: less waffle
• 5afbd619 install_buildtools: use compat function for dependency group

... (truncated)

Commits

• a465910 [autorelease main] update 5.13.0
• 9094de3 continue on changelog/docs
• b89e367 git_net_additions.py: minor tweaks
• 57157e7 readme: don't overdo admonitions
• 033d5ce changelog: less waffle
• 5afbd61 install_buildtools: use compat function for dependency group
• 3282e36 Add zizmor to check step
• 07b84aa Progress changelog
• 6ec38d2 git_net_additions: further improve fallback
• b5cdd7c git_net_additions: fancier fallback for binary files
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)