REL: 6.10.1

## What's new

### Security (SEC)
- Limit the allowed size of xref and object streams (py-pdf#3733) by @stefan6419846

### Robustness (ROB)
- Consider strict mode setting for decryption errors (py-pdf#3731) by @stefan6419846

### Documentation (DOC)
- Use new parameter names for compress_identical_objects by @stefan6419846

[Full Changelog](py-pdf/pypdf@6.10.0...6.10.1)

REL: 6.10.0

## What's new

### Security (SEC)
- Disallow custom XML entity declarations for XMP metadata (py-pdf#3724) by @stefan6419846

### New Features (ENH)
- Skip MD5 key derivation for AES-256 encrypted PDFs (py-pdf#3694) by @Ygnas

### Bug Fixes (BUG)
- Use remove_orphans in compress_identical_objects (py-pdf#3310) by @j-t-1
- Fix PdfReadError when xref table contains comments before trailer (py-pdf#3710) by @rassie
- Correctly verify AES padding during decryption (py-pdf#3699) by @stefan6419846
- Fix stale object cache from non-authoritative object streams (py-pdf#3698) by @astahlman
- Fix extract_links pairing when annotations include non-links (py-pdf#3687) by @ReinerBRO

### Documentation (DOC)
- Add AI policy (py-pdf#3717) by @stefan6419846

[Full Changelog](py-pdf/pypdf@6.9.2...6.10.0)

REL: 6.9.2

## What's new

### Security (SEC)
- Avoid infinite loop in read_from_stream for broken files (py-pdf#3693) by @stefan6419846

### Robustness (ROB)
- Resolve UnboundLocalError for xobjs in _get_image (py-pdf#3684) by @Yuki9814

[Full Changelog](py-pdf/pypdf@6.9.1...6.9.2)

REL: 6.9.1

## What's new

### Security (SEC)
- Improve performance and limit length of array-based content streams (py-pdf#3686) by @stefan6419846

[Full Changelog](py-pdf/pypdf@6.9.0...6.9.1)

REL: 6.9.0

## What's new

### New Features (ENH)
- Expose /Perms verification result on Encryption object (py-pdf#3672) by @costajohnt

### Performance Improvements (PI)
- Fix O(n²) performance in NameObject read/write (py-pdf#3679) by @dmitry-kostin
- Batch-parse all objects in ObjStm on first access (py-pdf#3677) by @dmitry-kostin

### Bug Fixes (BUG)
- Avoid sharing array-based content streams between pages (py-pdf#3681) by @stefan6419846
- Avoid accessing invalid page when inserting blank page under some conditions (py-pdf#3529) by @j-t-1

[Full Changelog](py-pdf/pypdf@6.8.0...6.9.0)

REL: 6.8.0

## What's new

### Security (SEC)
- Limit allowed `/Length` value of stream  (py-pdf#3675) by @stefan6419846

### New Features (ENH)
- Add /IRT (in-reply-to) support for markup annotations (py-pdf#3631) by @costajohnt

### Documentation (DOC)
- Avoid using `PageObject.replace_contents` on PdfReader (py-pdf#3669) by @stefan6419846
- Document how to disable jbig2dec calls by @stefan6419846

[Full Changelog](py-pdf/pypdf@6.7.5...6.8.0)

REL: 6.7.5

## What's new

### Security (SEC)
- Improve the performance of the ASCIIHexDecode filter (py-pdf#3666) by @stefan6419846

[Full Changelog](py-pdf/pypdf@6.7.4...6.7.5)

REL: 6.7.4

## What's new

### Security (SEC)
- Allow limiting output length for RunLengthDecode filter (py-pdf#3664) by @stefan6419846

### Robustness (ROB)
- Deal with invalid annotations in extract_links (py-pdf#3659) by @stefan6419846

[Full Changelog](py-pdf/pypdf@6.7.3...6.7.4)

REL: 6.7.3

## What's new

### Security (SEC)
- Use zlib decompression limit when retrieving XFA data (py-pdf#3658) by @stefan6419846

[Full Changelog](py-pdf/pypdf@6.7.2...6.7.3)

REL: 6.7.2

## What's new

### Security (SEC)
- Prevent infinite loop from circular xref /Prev references (py-pdf#3655) by @rampageservices

### Bug Fixes (BUG)
- Fix wrong LUT size error (py-pdf#3651) by @stefan6419846
- Fix handling of page boxes defined on `/Pages` (py-pdf#3650) by @stefan6419846

[Full Changelog](py-pdf/pypdf@6.7.1...6.7.2)