All pull requests

Pull requests

• Look up only standard Type1 fonts by BaseFont

  #325·Chandan3456 opened Oct 21, 2026·

  ·
  1

• Create temp files with owner-only permissions in FileUtil

  #324·Chandan3456 opened Oct 16, 2026·

  ·
  2

• Strip control chars from URLs in jsoup StringUtil

  #323·Chandan3456 opened Oct 15, 2026·

  ·
  2

• Use constant-time comparison for MAC validation

  #322·Chandan3456 opened Oct 13, 2026·

  ·
  7

• Restrict redirect targets in UrlUtil to http(s)

  #321·Chandan3456 opened Oct 9, 2026·

  ·
  3

• Bump org.bouncycastle:bcprov-jdk18on from 1.83 to 1.84

  dependenciesjava
  #317·dependabot[bot] opened Apr 18, 2026Bot·

  ·

• Bump org.bouncycastle:bc-fips from 2.1.1 to 2.1.2 in /bouncy-castle-fips-adapter

  dependenciesjava
  #316·dependabot[bot] opened Mar 2, 2026Bot·

  ·
  1

• [Snyk] Upgrade com.fasterxml.jackson.core:jackson-databind from 2.20.1 to 2.21.0

  #315·marcoandries opened Feb 12, 2026Contributor·

  ·

• [Snyk] Upgrade ch.qos.logback:logback-classic from 1.3.16 to 1.5.25

  #314·iText-CI opened Feb 8, 2026Contributor·

  ·

• [Snyk] Upgrade org.slf4j:slf4j-api from 2.0.16 to 2.0.17

  #313·marcoandries opened Feb 5, 2026Contributor·

  ·

• [Snyk] Upgrade ch.qos.logback:logback-classic from 1.3.16 to 1.5.24

  #312·marcoandries opened Feb 5, 2026Contributor·

  ·

• [Snyk] Upgrade org.slf4j:slf4j-api from 2.0.16 to 2.0.17

  #311·marcoandries opened Feb 3, 2026Contributor·

  ·

• [Snyk] Upgrade ch.qos.logback:logback-classic from 1.3.16 to 1.5.24

  #309·iText-CI opened Feb 1, 2026Contributor·

  ·

• [Snyk] Upgrade org.slf4j:slf4j-api from 2.0.16 to 2.0.17

  #308·iText-CI opened Jan 30, 2026Contributor·

  ·

• [Snyk] Upgrade ch.qos.logback:logback-classic from 1.3.16 to 1.5.23

  #307·marcoandries opened Jan 22, 2026Contributor·

  ·

• [Snyk] Upgrade org.junit.jupiter:junit-jupiter from 5.10.2 to 5.14.1

  #306·iText-CI opened Jan 18, 2026Contributor·

  ·

• [Snyk] Upgrade org.slf4j:slf4j-api from 2.0.16 to 2.0.17

  #305·marcoandries opened Jan 16, 2026Contributor·

  ·

• [Snyk] Upgrade org.slf4j:slf4j-api from 2.0.16 to 2.0.17

  #304·marcoandries opened Jan 13, 2026Contributor·

  ·

• [Snyk] Upgrade ch.qos.logback:logback-classic from 1.3.14 to 1.5.22

  #303·iText-CI opened Jan 4, 2026Contributor·

  ·

• [Snyk] Upgrade com.fasterxml.jackson.core:jackson-databind from 2.17.0 to 2.20.1

  #302·marcoandries opened Dec 25, 2025Contributor·

  ·

• [Snyk] Upgrade org.junit.jupiter:junit-jupiter from 5.10.2 to 5.14.1

  #301·marcoandries opened Dec 25, 2025Contributor·

  ·

• [Snyk] Upgrade ch.qos.logback:logback-classic from 1.3.14 to 1.5.21

  #300·marcoandries opened Dec 25, 2025Contributor·

  ·

• [Snyk] Upgrade org.slf4j:slf4j-api from 2.0.16 to 2.0.17

  #299·marcoandries opened Dec 23, 2025Contributor·

  ·

• [Snyk] Upgrade org.junit.jupiter:junit-jupiter from 5.10.2 to 5.14.1

  #298·iText-CI opened Dec 21, 2025Contributor·

  ·

• [Snyk] Upgrade ch.qos.logback:logback-classic from 1.3.14 to 1.5.21

  #297·iText-CI opened Dec 21, 2025Contributor·

  ·