Released: Aug 4, 2025

v1.4 での更新項目

機能

• Added a [Security] section to the documentation, to collect all information on this topic in one place.
• Added support for CSS nesting, e.g. body { div { color: red } }, and CSS cascade layers, e.g. @layer foo { div { color: red } }.
• Added support for OpenType variable fonts.
• Added support for EA-PDF, the new (2025) archival standard for converting email to PDF.
• Added support for :active, :hover and :checked pseudo-classes on (some) form fields. Default stylesheet incorrectly sized fields with content-box, now border-box to match browsers. Disabling filter property on fields requires rasterizing and it can't be supported.
• Added support for attachments to file annotations and tags.
• WebService can be run from a JavaEE servlet container as well as via the built-in Netty server.
• Added origin key to authorities, for [Access Control] using CORS.
• Added bfo-no-processing-instructions parameter when attaching XML, to make life easier for Factur-X producers.
• Added the ability to merge PDF layers with the same name, even if they're not contiguous in the input document.
• Added artifact thead/tfoot output on pages after the first, for PDF/UA output.
• Added aes-256-gcm as a valid cipher for encryption, as defined in ISO32003.
• Added auspost4s barcode format, for Australian Post.
• Added column-span CSS property support.
• Added support for setting [PDF Declarations].
• Updated CSS properties font-size-adjust, font-family: generic(n), font-width, font-synthesis-position, text-box-edge "hue longer" interpolation in gradients, to reflect latest changes to spec.
• Upgraded underlying PDF library from 2.28.4 to 2.29.2: this adds Java 24 support; performance enhancements for Amazon CloudHSM v5 signatures; correct XMP extension types scoping for PDF/A-1 to PDF/A-3; 16-bit TIFF image support.
• Rewrote the egress filtering for more granular control, for easy creation of site specific policies (see [Security]).
• Disabled xi:include and XML external entity resolution by default (see [Security] for details).
• WebSocket interface is no longer sensitive to the order of properties (except that authorization should always come first). WebSocket interface accepts Authorization as an initial HTTP header, correctly handles interleaved requests over a single WebSocket connection, and detects and handles lz4/zstd/gzip compression of CBOR.
• Bumped embedded Netty from 4.1.79 to 4.1.122, and set it to support content-encoding with gzip, deflate and zstd if available.

不具合の修正

• Fixed issue so that MathML elements, and the text-extractable part of stretchy brackets, are properly written to tagged PDF output.
• Fixed internal hyperlinks links to elements like <a name="foo">.
• Corrected priority of legacy HTML presentation hints (between "user" and "author" origin stylesheets, not before "user").
• Made several fixes to improve the conversion of generated PDFs back to HTML.
• Zero-width borders are no longer drawn; they were not visible in most PDF viewers but were causing hairlines in Acrobat.
• Made many fixes to legacy Report Generator XML processing; added graphs, pdfset, many layout fixes.
• Fixed issue so that the size of boxes in page margins now matches specification exactly.
• Made many small edge-case layout and bug fixes, particularly for flex and multicol layout.