chore(deps)(deps): update pypdf requirement from >=6.7.5 to >=6.10.2

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Updates the requirements on pypdf to permit the latest version.

Release notes

Sourced from pypdf's releases.

Version 6.10.2, 2026-04-15

What's new

Security (SEC)

• Do not rely on possibly invalid /Size for incremental cloning (#3735) by @​stefan6419846
• Introduce limits for FlateDecode parameters and image decoding (#3734) by @​stefan6419846

Full Changelog

Changelog

Sourced from pypdf's changelog.

Version 6.10.2, 2026-04-15

Security (SEC)

• Do not rely on possibly invalid /Size for incremental cloning (#3735)
• Introduce limits for FlateDecode parameters and image decoding (#3734)

Full Changelog

Version 6.10.1, 2026-04-14

Security (SEC)

• Limit the allowed size of xref and object streams (#3733)

Robustness (ROB)

• Consider strict mode setting for decryption errors (#3731)

Documentation (DOC)

• Use new parameter names for compress_identical_objects

Full Changelog

Version 6.10.0, 2026-04-10

Security (SEC)

• Disallow custom XML entity declarations for XMP metadata (#3724)

New Features (ENH)

• Skip MD5 key derivation for AES-256 encrypted PDFs (#3694)

Bug Fixes (BUG)

• Use remove_orphans in compress_identical_objects (#3310)
• Fix PdfReadError when xref table contains comments before trailer (#3710)
• Correctly verify AES padding during decryption (#3699)
• Fix stale object cache from non-authoritative object streams (#3698)
• Fix extract_links pairing when annotations include non-links (#3687)

Documentation (DOC)

• Add AI policy (#3717)

Full Changelog

Version 6.9.2, 2026-03-23

Security (SEC)

• Avoid infinite loop in read_from_stream for broken files (#3693)

Robustness (ROB)

• Resolve UnboundLocalError for xobjs in _get_image (#3684)

Full Changelog

... (truncated)

Commits

• c476b4f REL: 6.10.2
• c50a010 SEC: Do not rely on possibly invalid /Size for incremental cloning (#3735)
• ac734da SEC: Introduce limits for FlateDecode parameters and image decoding (#3734)
• b49e7eb REL: 6.10.1
• 62338e9 SEC: Limit the allowed size of xref and object streams (#3733)
• 5dcc0ae DEV: Update pytest-benchmark to 5.2.3
• b42e4aa DEV: Update pinned pillow and pytest where possible (#3732)
• 717446b ROB: Consider strict mode setting for decryption errors (#3731)
• 9e461d3 DEV: Bump softprops/action-gh-release from 2 to 3 (#3730)
• 500d09d TST: Update test_embedded_file__basic to use tmp_path fixture (#3726)
• Additional commits viewable in compare view

[longieirl]

@dependabot rebase

[longieirl]

Superseded by #183 which consolidates all 10 Dependabot lower-bound bumps into a single PR. Now merged to main.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.