[dependabot]

Bumps ocrmypdf from 17.12.1 to 17.13.0.

Release notes

Sourced from ocrmypdf's releases.

v17.13.0

Changes

• PDF/A made without Ghostscript ("speculative" conversion) is now validated with pikepdf's PDF/A support (pikepdf.pdfa) instead of veraPDF, and the final output is validated again after the metadata and optimization steps. veraPDF is no longer used, so the Ghostscript-free path is available whether or not veraPDF is installed, including in the Docker image. Files the validator does not approve go to Ghostscript as before; run with -v1 to see why.
• Speculative conversion now supports PDF/A-1b, and repairs common problems that previously always sent a file to Ghostscript: it replaces other output intents with sRGB, removes image interpolation flags, sets the Print flag on annotations, adds the /CIDSet PDF/A-1 requires, and removes XMP properties and hidden annotations that PDF/A does not permit.
• New option --pdfa-backend {auto,ghostscript,internal} (API: pdfa_backend=). auto, the default, tries OCRmyPDF's own conversion and then Ghostscript. internal never uses Ghostscript, so JPEGs pass through unchanged; if the result is not approved, the pdfa output types fail with exit code 10 and --output-type auto outputs a regular PDF. ghostscript always uses Ghostscript. Options that only Ghostscript implements (--pdfa-image-compression, --ghostscript-jpeg-quality, --ghostscript-jpeg-maxdpi, and --color-conversion-strategy CMYK, Gray or UseDeviceIndependentColor) now select Ghostscript under auto and are an error with internal.
• OCRmyPDF now requires pikepdf[pdfa] 10.15 or later. The pdfa extra brings in jsonschema, referencing and fonttools, all packaged by Debian and Red Hat.
• --force-ocr now keeps hyperlinks, moving link annotations onto the rasterized page; so do --deskew and --clean-final. The new mode --mode force-ocr-no-links keeps the old behaviour. {issue}605
• When Ghostscript substitutes fonts that are not embedded, it now always uses its own fonts (-dNONATIVEFONTMAP), so output is the same on every platform; on macOS, native font lookup could embed tens of megabytes of system fonts. OCRmyPDF warns when fonts other than the standard 14 are substituted, or when a substitute loses bold or italic styling. {issue}1369
• A creation date without a time zone is now taken to be local time, and the output's dates get that zone, with a warning. Set TZ to choose another zone.
• In the default mode, a page that already has text now stops OCRmyPDF straight after the initial scan, instead of after OCRing the pages before it. The error names the page. {issue}613
• The check of the output file is much faster: each stream is checked in the cheapest way for its compression instead of being fully decoded, and a progress bar is shown. JPEG 2000 and CCITT images are now checked too, but JPEGs that are corrupt without being truncated are no longer detected. {issue}1570
• OCRmyPDF now ships a PyInstaller hook, so apps that use it can be bundled without extra options. Tesseract and Ghostscript must still be installed.

... (truncated)

Commits

• 3bdc84c docs: release notes for annotation and XMP handling with pikepdf 10.15
• af228cb Require pikepdf 10.15 and drop workarounds it makes unnecessary
• 320ee58 docs: condense v17.13.0 release notes and add missing fixes
• 531be9f docs: release notes for prior-text abort, PyInstaller, force-ocr DPI and work...
• 6588e91 Support freezing with PyInstaller
• 217b9b9 Rotate pages without a text layer in the fpdf2 renderer
• 4adce5b Warn when Ghostscript's substitute font loses bold or italic
• e92b309 docs: release notes for link, PDF/A font, metadata, DPI and vertical text fixes
• 52f35a0 Keep hyperlinks through PDF/A conversion and --force-ocr
• 49503f7 Fix Docker web service failing to find its Streamlit script
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ❌ 1 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.

See the Details below.

License Issues

pdf/requirements.txt

Package	Version	License	Issue Type
ocrmypdf	17.13.0	MPL-2.0	Incompatible License

Allowed Licenses:

0BSD, Apache-2.0, BSD-2-Clause, BSD-3-Clause, CC0-1.0, MIT, MIT-0

OpenSSF Scorecard

Package	Version	Score	Details
pip/ocrmypdf	17.13.0	Unknown	Unknown

Scanned Files

• pdf/requirements.txt