* fix(Dockerfile): reposition COPY intructions to prevent cache invalidation

* fix(regex): add timeout

* docs(test/integration/README.md): add missing scenarios

* docs: improve godoc and documentation [skip ci]

* docs(README): add PDFBolt as sponsor [ci skip]

* fix(Dockerfile): re-add cURL

* fix(chromium): set PDFENGINES_CONVERT_ENGINES to empty on chromium only variants

* test(integration): increase timeout to 90min

* fix(exitool): prevent control characters

* fix: better denied list

* chore(deps): update Go dependencies

* Revert "test(integration): increase timeout to 90min"

This reverts commit f1d1215.

* ci(ppc64le): switch to ubuntu-24.04-ppc64le-p10

* Revert "ci(ppc64le): switch to ubuntu-24.04-ppc64le-p10"

This reverts commit 866ae53.

* chore(deps): update Go dependencies

* chore(deps-dev): update package-lock.json

* fix(outboundURLs): better detaults

* fix(exiftool): prevent line breaks

* fix(exiftool): remove System: prefixes

* chore(deps): update Go dependencies

* docs: more succint [skip ci]

* fix(Dockefile): pin Chromium to version 146 on ppc64le arch

* ci: remove thecodingmachine registry

* chore(deps-dev): bump prettier from 3.8.1 to 3.8.2

Bumps [prettier](https://github.com/prettier/prettier) from 3.8.1 to 3.8.2.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.1...3.8.2)

---
updated-dependencies:
- dependency-name: prettier
  dependency-version: 3.8.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* feat: add embeds metadata

* docs(CONTRIBUTING.md): remove do not push instruction [skip ci]

* chore(deps-dev): bump prettier from 3.8.2 to 3.8.3

Bumps [prettier](https://github.com/prettier/prettier) from 3.8.2 to 3.8.3.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.2...3.8.3)

---
updated-dependencies:
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump github.com/dlclark/regexp2 from 1.11.5 to 1.12.0

Bumps [github.com/dlclark/regexp2](https://github.com/dlclark/regexp2) from 1.11.5 to 1.12.0.
- [Commits](dlclark/regexp2@v1.11.5...v1.12.0)

---
updated-dependencies:
- dependency-name: github.com/dlclark/regexp2
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump github.com/labstack/gommon from 0.4.2 to 0.5.0

Bumps [github.com/labstack/gommon](https://github.com/labstack/gommon) from 0.4.2 to 0.5.0.
- [Release notes](https://github.com/labstack/gommon/releases)
- [Commits](labstack/gommon@v0.4.2...v0.5.0)

---
updated-dependencies:
- dependency-name: github.com/labstack/gommon
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(npm): restrict npm installs + package bumps for a week (try to prevent 0-days from upstream dependency changes)

* fix(chromium): harden outbound URL handling

* fix(pdfengines): require uploaded stamp/watermark file for image or pdf source

* fix(webhook): detach async goroutine from pooled echo.Context

* fix(chromium): default-deny file:// sub-resources when no prefix is allowed

* fix(outbound)!: per-module deny-private-ips and deny-public-ips, permissive defaults

* fix(test): deny-private-ips on scenario now uses http://127.0.0.1/ as the URL

* feat(chromium): skip lifecycle waits when waitForExpression or waitForSelector is set

* Revert "feat(chromium): skip lifecycle waits when waitForExpression or waitForSelector is set"

This reverts commit 430f95f.

* feat(chromium): inject paint-callback polyfill when waitForExpression or waitForSelector is set

* docs(chromium): tighten paint-polyfill godoc per CONTRIBUTING style [skip ci]

* fix(testdata): prettify

* feat(chromium): always inject paint-callback polyfill to cover waitDelay users

* docs(chromium): tighten paint-polyfill always-on godoc per CONTRIBUTING style

* refactor(exiftool): switch from go-exiftool library to direct CLI

* fix(supervisor): retry first launch on failure (gotenberg#1538)

* feat(libreoffice): SSRF guard for embedded external content

* fix(deps): pin chromedp to v0.14.2 to restore print-mode paint pipeline

* refactor(chromium): drop paint-callback polyfill now that chromedp is pinned

* chore(deps): update pdfcpu to v0.12.0 (gotenberg#1537)

* docs(contributing): reorganize sections and slim PR checklist

* chore(deps): update golang to 1.26.2

* feat(chromium): allow to specify device scale ratio for screenshots (gotenberg#1543)

* fix(api): strip backslash separators from supplied filenames

* chore(deps): bump github.com/labstack/echo/v4 from 4.15.1 to 4.15.2

Bumps [github.com/labstack/echo/v4](https://github.com/labstack/echo) from 4.15.1 to 4.15.2.
- [Release notes](https://github.com/labstack/echo/releases)
- [Changelog](https://github.com/labstack/echo/blob/v4.15.2/CHANGELOG.md)
- [Commits](labstack/echo@v4.15.1...v4.15.2)

---
updated-dependencies:
- dependency-name: github.com/labstack/echo/v4
  dependency-version: 4.15.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* fix(gotenberg): block IPv6 prefixes that tunnel to internal IPv4 in IsPublicIP

* fix(api): serialize downloadFrom result merging to avoid concurrent map writes

* docs(README): switch logo URL [skip ci]

* fix(chromium): downgrade pinning-proxy logs for client-cancelled requests

* fix(chromium): register lifecycle listeners before navigate to close race

* fix(chromium): stop pinning proxy when chromedp start fails

* docs(README): add FileToPDF.dev sponsor

* fix(gotenberg): debounce supervisor health probes to absorb transient CDP latency

* fix(chromium): downgrade pinning-proxy dial logs for client-cancelled requests

* chore(deps): update Go dependencies

* test(integration): prune orphaned networks to avoid subnet exhaustion

* fix(otel): align resource semconv to v1.41.0 to match SDK default

* test(integration): surface container logs on failed startup

* refactor(webhook): extract async context detach into a helper

* fix(webhook): preserve trace context across async detach via WithoutCancel

* feat(webhook): link async worker span to the originating request span

* test(webhook): assert async conversion span shares server trace id

* test(webhook): integration smoke for async webhook traceparent continuity

* feat(gotenberg): wrap Cmd.Exec in a process.exec client span

* feat(gotenberg): add ClassifyError with bounded error.type enum

* refactor(chromium): classify Pdf and Screenshot errors and set span error.type

* refactor(libreoffice): classify Pdf errors and set span error.type

* test(otel): guard OTEL_TRACES_SAMPLER is honored

* feat(otel): pin trace-based exemplar filter on the meter provider

* feat(gotenberg): add telemetry attribute helpers for redaction and capping

* docs(otel): document sampling configuration and tail-sampling guidance

* refactor(otel): extract shared buildResource helper

* feat(otel): enrich resource with process, os, host, and container detectors

* feat(otel): emit gotenberg.startup span with engine versions

* feat(gotenberg): add ConversionsSinceRestart accessor to ProcessSupervisor

* refactor(gotenberg): thread engine label into NewProcessSupervisor

* feat(gotenberg): emit queue-wait and launch sub-spans in supervisor Run

* feat(chromium): lift conversions-since-restart and queue depth onto chromium spans

* feat(libreoffice): lift conversions-since-restart and queue depth onto libreoffice span

* feat(api): add FileCount accessor to request Context

* feat(chromium): add conversion I/O attributes to chromium.Pdf span

* feat(chromium): add print_to_pdf sub-span with bounded option attrs

* feat(chromium): add per-conversion network observability with metrics and exemplars

* feat(libreoffice): add conversion size and requested pdf-format span attributes

* feat(libreoffice): cap ErrCoreDumped retries and make them observable

* refactor(pdfengines): route fallback ops through a generic runWithFallback helper

* style: apply gofmt modernization fixes

* fix(libreoffice): correct ErrRuntimeException message

* docs(bruno): prettify

* feat(log): add log-std-level-case to control standard output level casing

* chore: expose log-std-level-case in Makefile and Compose

* fix(Dockerfile): add ca-certificates, missing in chromium-only image

The gotenberg and gotenberg-libreoffice images pull in ca-certificates as a dependency of python3-distutils-extra, but it's missing from the gotenberg-chromium image. The issue only affects webhooks, as Chromium itself uses bundled certificates.

* feat(pdfengines): inject Factur-X/ZUGFeRD XMP metadata

* fix(libreoffice): suppress auto-generated page header for CSV conversions

* feat(pdfengines): redesign Factur-X API with dedicated form fields

* feat(pdfengines): support owner-only encryption and document permissions

* refactor: make client- and operator-facing error messages clearer and actionable

* feat(qpdf): record Factur-X and PDF/A attributes on traces

* chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.4 to 4.26.5

Bumps [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) from 4.26.4 to 4.26.5.
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v4.26.4...v4.26.5)

---
updated-dependencies:
- dependency-name: github.com/shirou/gopsutil/v4
  dependency-version: 4.26.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* feat(telemetry): record backing-binary versions on spans, captured at build time

* chore: rename factur x engine

* feat(libreoffice): block linked content from untrusted locations

* fix(chromium): generateDocumentOutline now implies generateTaggedPdf

* chore(deps): update Go dependencies, keep chromedp pinned to v0.14.2

* chore(deps-dev): bump prettier from 3.8.3 to 3.8.4

Bumps [prettier](https://github.com/prettier/prettier) from 3.8.3 to 3.8.4.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.3...3.8.4)

---
updated-dependencies:
- dependency-name: prettier
  dependency-version: 3.8.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump actions/checkout from 6 to 7

Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump github.com/moby/moby/api from 1.54.2 to 1.55.0

Bumps [github.com/moby/moby/api](https://github.com/moby/moby) from 1.54.2 to 1.55.0.
- [Release notes](https://github.com/moby/moby/releases)
- [Commits](moby/moby@api/v1.54.2...api/v1.55.0)

---
updated-dependencies:
- dependency-name: github.com/moby/moby/api
  dependency-version: 1.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump github.com/moby/moby/client from 0.4.1 to 0.5.0

Bumps [github.com/moby/moby/client](https://github.com/moby/moby) from 0.4.1 to 0.5.0.
- [Release notes](https://github.com/moby/moby/releases)
- [Changelog](https://github.com/moby/moby/blob/v0.5.0/CHANGELOG.md)
- [Commits](moby/moby@v0.4.1...v0.5.0)

---
updated-dependencies:
- dependency-name: github.com/moby/moby/client
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump github.com/testcontainers/testcontainers-go

Bumps [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) from 0.42.0 to 0.43.0.
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.42.0...v0.43.0)

---
updated-dependencies:
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.5 to 4.26.6

Bumps [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) from 4.26.5 to 4.26.6.
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v4.26.5...v4.26.6)

---
updated-dependencies:
- dependency-name: github.com/shirou/gopsutil/v4
  dependency-version: 4.26.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps-dev): bump prettier from 3.8.4 to 3.9.4

Bumps [prettier](https://github.com/prettier/prettier) from 3.8.4 to 3.9.4.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.4...3.9.4)

---
updated-dependencies:
- dependency-name: prettier
  dependency-version: 3.9.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump golang.org/x/text from 0.38.0 to 0.40.0

Bumps [golang.org/x/text](https://github.com/golang/text) from 0.38.0 to 0.40.0.
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.38.0...v0.40.0)

---
updated-dependencies:
- dependency-name: golang.org/x/text
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.56.0 to 0.57.0.
- [Commits](golang/net@v0.56.0...v0.57.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* fix(chromium): serialize browser starts to prevent pinning proxy latch after a start timeout

* feat(outbound): support authenticated proxy from environment variables

* chore(deps-dev): bump prettier from 3.9.4 to 3.9.5

Bumps [prettier](https://github.com/prettier/prettier) from 3.9.4 to 3.9.5.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.4...3.9.5)

---
updated-dependencies:
- dependency-name: prettier
  dependency-version: 3.9.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump actions/setup-node from 6 to 7

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6 to 7.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v6...v7)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump actions/setup-go from 6 to 7

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6 to 7.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@v6...v7)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps-dev): bump prettier-plugin-sh from 0.18.1 to 0.19.0

Bumps [prettier-plugin-sh](https://github.com/un-ts/prettier) from 0.18.1 to 0.19.0.
- [Release notes](https://github.com/un-ts/prettier/releases)
- [Changelog](https://github.com/un-ts/prettier/blob/master/CHANGELOG.md)
- [Commits](https://github.com/un-ts/prettier/compare/[email protected]@0.19.0)

---
updated-dependencies:
- dependency-name: prettier-plugin-sh
  dependency-version: 0.19.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump github.com/prometheus/client_golang

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.23.2 to 1.24.0.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.24.0/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.23.2...v1.24.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.81.1 to 1.82.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.81.1...v1.82.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.82.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump github.com/prometheus/client_golang

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.24.0 to 1.24.1.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.24.1/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.24.0...v1.24.1)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps-dev): bump prettier from 3.9.5 to 3.9.6

Bumps [prettier](https://github.com/prettier/prettier) from 3.9.5 to 3.9.6.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.5...3.9.6)

---
updated-dependencies:
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1

Bumps [github.com/moby/moby/client](https://github.com/moby/moby) from 0.5.0 to 0.5.1.
- [Release notes](https://github.com/moby/moby/releases)
- [Changelog](https://github.com/moby/moby/blob/v0.5.1/CHANGELOG.md)
- [Commits](moby/moby@v0.5.0...v0.5.1)

---
updated-dependencies:
- dependency-name: github.com/moby/moby/client
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump go.opentelemetry.io/otel from 1.44.0 to 1.45.0

Bumps [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) from 1.44.0 to 1.45.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump github.com/cucumber/godog from 0.15.1 to 0.16.0

Bumps [github.com/cucumber/godog](https://github.com/cucumber/godog) from 0.15.1 to 0.16.0.
- [Release notes](https://github.com/cucumber/godog/releases)
- [Changelog](https://github.com/cucumber/godog/blob/main/CHANGELOG.md)
- [Commits](cucumber/godog@v0.15.1...v0.16.0)

---
updated-dependencies:
- dependency-name: github.com/cucumber/godog
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.6 to 4.26.7

Bumps [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) from 4.26.6 to 4.26.7.
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v4.26.6...v4.26.7)

---
updated-dependencies:
- dependency-name: github.com/shirou/gopsutil/v4
  dependency-version: 4.26.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0

Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.44.0 to 1.45.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): update Golang and pdfcpu version

* chore(deps): update go version in go.mod

* fix(telemetry): align resource semconv with otel sdk 1.45 detectors

* fix(libreoffice)!: return 500 when a failure is not the client's fault

* chore(deps): update unoconverter to v0.4.0

* fix(pdfcpu): pass --force when writing over the input file

* fix(api): sanitize the output filename header

* fix(chromium): bound the total scope matching time per conversion

* fix(outbound): keep dial pinning for hops the environment proxy declines

* docs: use real identifiers in the Godoc examples

* Merge commit from fork

Co-authored-by: Jacob Brackett <[email protected]>

* fix(outbound): return 403 instead of 500 for an unresolvable outbound host

* fix(chromium): filter WebSocket handshakes against the outbound policy

* test(libreoffice): rename the linked-content tag to libreoffice-ssrf

* fix(libreoffice): render scrolled workbooks in full for SinglePageSheets

* fix(api): classify client-cancelled requests as 499 instead of 500

* refactor(qpdf): make embed-metadata logging context-aware

* chore(libreoffice): silence a gosec G703 false positive on temp-file cleanup

* ci: bump golangci-lint to v2.12.2

* chore(libreoffice): drop the now-unneeded gosec nolint

* fix(chromium): hint at --chromium-start-timeout when Chromium fails to start

* feat(chromium): screenshot a single element via the selector form field (gotenberg#947)

* fix(chromium): fit the page to content for landscape single-page (gotenberg#1390)

* feat(chromium): add --chromium-clear-storage to clear local storage between conversions (gotenberg#919)

* feat(pdfengines): optimize PDF images to reduce file size (gotenberg#359)

* chore(deps): update pdfcpu to v0.15.0 (gotenberg#1628)

* refactor(pdfengines): remove qpdf embed fallback (gotenberg#1628)

* chore(deps): update Go and npm dependencies

* chore(test): format optimize-images testdata and integration README

* fix(libreoffice): accept the OOXML PowerPoint show extensions (gotenberg#1626)

* test(libreoffice): cover OOXML PowerPoint show conversion (gotenberg#1626)

* feat(chromium): await thenable waitForExpression (gotenberg#1617)

* fix(chromium): add missing import for awaited waitForExpression

* test(chromium): cover thenable waitForExpression

* feat(pdfengines): generate document-title bookmarks when merging (gotenberg#867)

* test(libreoffice): add .ppsm and .ppsx to the Bad Request extension list

* test(integration): allow repeated form fields in requests

* feat(pdfengines): apply multiple stamps in one request (gotenberg#1601)

* feat(pdfengines): apply multiple stamps and watermarks on every route

* feat(api): add OIDC bearer token authentication

* chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 (gotenberg#1636)

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.11.1 to 1.12.1.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.1)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix(otel): keep telemetry off unless an exporter is configured

* chore(deps): update Go to 1.27.0

* chore(deps): update golangci-lint to v2.13.2

* style(api): remove redundant parentheses in type switch

* fix(chromium): fail fast with 503 when Chromium crashes (gotenberg#1641)

* chore(deps): update unoconverter to v0.5.0

* chore(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1 (gotenberg#1646)

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.83.0 to 1.83.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.83.0...v1.83.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix(Dockerfile): re-add libreoffice-math so DOCX math formulas render

The v8.30.0 image slimming replaced the libreoffice metapackage with an
explicit component list that omits libreoffice-math. Writer imports OMML
equations as Math objects, so without the component every formula is
silently dropped from converted PDFs.

Fixes gotenberg#1644

* fix(api): bound downloadFrom concurrency and entry count

* fix(supervisor): report healthy during planned process restarts

The eager restart fired after --chromium-restart-after or
--libreoffice-restart-after conversions made Healthy() report false,
so a client probing /health between two conversions got a 503 from an
otherwise serving node. Tasks arriving during that window are requeued
by acquireSlot, not rejected.

Track whether the in-flight restart is planned and keep reporting
healthy for those. Unplanned restarts still report unhealthy so load
balancers get honest information.

Closes gotenberg#1648

* fix(supervisor): bound the eager restart with a deadline

maybeRestartAfterTask ran its restart on a bare background context while
the drain loop in doRestartLocked selects only on ctx.Done(). A task that
never completed blocked the drain forever, pinning isRestarting. Since a
planned restart now reports healthy, that left the node claiming health
for good. LibreOffice escaped it because its concurrency of 1 drains no
slots, but Chromium defaults to 6.

Give that restart its own deadline. On expiry it aborts and the next task
retries it.

* fix(supervisor): reset the request counter on a failed relaunch

restart() reset reqCounter only after a successful Launch, so a failed
one left it at the limit. maybeRestartAfterTask then re-fired on every
subsequent task, producing back-to-back restarts and, with planned
restarts now reporting healthy, a node that keeps restarting while
claiming health.

Reset on the attempt instead. A process that will not start is recovered
by ensureHealthy, which restarts synchronously and reports the failure.

* docs(supervisor): point maybeRestartAfterTask at the timeout constant

* test(health): assert conversions succeed across a planned restart

* build(makefile): disable two go fix modernizers that emit broken code

go fix runs the modernize suite since Go 1.26, and two of its analyzers
rewrite this codebase into code that does not compile, so make fmt broke
the build and then make lint. CONTRIBUTING tells every contributor to run
both before opening a PR.

embedlit folded telemetryCfg.LogLevel into a literal that already set that
key, and errorsastype rewrote errors.As to errors.AsType[HttpError] even
though HttpError does not embed error. Disable both, with a TODO covering
when each can come back.

* refactor: adopt strings.Cut and strings.SplitSeq

Applies what go fix now proposes, so make fmt is a no-op on a clean tree
instead of dirtying these two files on every run. Both rewrites are
equivalent: Cut's first result matches SplitN(s, sep, 2)[0], and SplitSeq
iterates the same substrings without building the intermediate slice.

* build(makefile): fix lint-todo for golangci-lint v2

* chore(deps): update Go dependencies

* fix(outbound): strip URL userinfo before allow and deny list matching

* feat(outbound): warn at startup about allow-list patterns that grant more than intended

* docs(outbound): document the allow-list bypass on every allow-list flag and terminate the example patterns

* style: escape backslashes in the Chromium allow-list scenario table

* fix(api): bound downloadFrom requests by the request deadline

* fix(webhook): bound webhook delivery with its own retry budget

* fix(api): bound downloadFrom decoding by the entry limit

* fix(api): snapshot the output filename before echo recycles its context

* fix(api): stop upload filenames from failing or silently dropping a request

* fix(api): keep upload order when de-duplicating repeated filenames

* fix(outbound): treat CGNAT and benchmarking ranges as non-public

* fix(api): keep the filter verdict generic when a redirect is blocked

* fix(exiftool): reject metadata keys that collide with ExifTool options

* feat(api): warn at startup when the debug route has no authentication

* fix(libreoffice): report an encrypted .xlsb as password-protected (gotenberg#1655)

Uploading a password-protected .xlsb workbook without its password
answered 500 with the unattributable-failure message instead of 400 with
the remedy.

DetectPasswordProtection in pkg/modules/libreoffice/api/protection.go
infers encryption from a compound-file header carried by an extension
whose unencrypted form is always a ZIP package. The ooxmlExtensions map
listed .xlsx, .xlsm, .xltx and .xltm but not .xlsb, so an encrypted
workbook under that extension fell through to PasswordProtectionUnknown.
The convert route in pkg/modules/libreoffice/routes.go then matched
neither password branch of its exit-code switch and returned the 500
default.

An Excel Binary Workbook is an Open Packaging Conventions ZIP holding
binary parts, so a compound file under that extension is encrypted for
the same reason .xlsx is. Adding .xlsb to the map restores the 400 that
names the 'password' form field.

* fix(webhook): close the response body when the callback returns an error status

* fix(chromium): bound CONNECT tunnels so a silent upstream cannot pin them forever

* fix(libreoffice): stop the outbound proxy when the daemon fails to start

* fix(chromium): drop settled requests from the per-conversion network map

* fix(chromium): ceiling the CONNECT tunnels in flight and bound tunnel writes

* test(integration): drop the per-scenario Docker network

* perf(pdfengines): process a request's files concurrently behind an opt-in ceiling

* ci(build): reuse the Docker build cache across runs

* perf(gotenberg): match allow and deny patterns without recompiling them

* perf(api): build the access log with a single record

* perf(chromium): skip formatting a discarded debug message per response

* fix(chromium): disable the WebUI omnibox popup preloaded at browser start

* chore(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0 (gotenberg#1658)

Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.22.0 to 0.23.0.
- [Commits](golang/sync@v0.22.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): update Go to 1.27.1

* build(makefile): re-enable the embedlit go fix modernizer

* fix(outbound): ignore IPv6 zone identifiers when classifying addresses

* chore(deps)!: migrate from echo v4 to echo v5

* fix(gotenberg): retry pattern matches aborted by a process pause

* build(dockerfile): update AWS Lambda Web Adapter to 1.0.1

* chore(deps)!: migrate from regexp2 v1 to regexp2 v2

* chore(deps): bump golang.org/x/text from 0.41.0 to 0.42.0

Bumps [golang.org/x/text](https://github.com/golang/text) from 0.41.0 to 0.42.0.
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.41.0...v0.42.0)

---
updated-dependencies:
- dependency-name: golang.org/x/text
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump golang.org/x/net from 0.58.0 to 0.59.0

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.58.0 to 0.59.0.
- [Commits](golang/net@v0.58.0...v0.59.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps-dev): bump prettier from 3.9.6 to 3.9.8

Bumps [prettier](https://github.com/prettier/prettier) from 3.9.6 to 3.9.8.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.6...3.9.8)

---
updated-dependencies:
- dependency-name: prettier
  dependency-version: 3.9.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps-dev): bump prettier from 3.9.8 to 3.9.9

Bumps [prettier](https://github.com/prettier/prettier) from 3.9.8 to 3.9.9.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.8...3.9.9)

---
updated-dependencies:
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps-dev): bump prettier-plugin-sh from 0.19.0 to 0.20.2

Bumps [prettier-plugin-sh](https://github.com/un-ts/prettier) from 0.19.0 to 0.20.2.
- [Release notes](https://github.com/un-ts/prettier/releases)
- [Changelog](https://github.com/un-ts/prettier/blob/master/CHANGELOG.md)
- [Commits](https://github.com/un-ts/prettier/compare/[email protected]@0.20.2)

---
updated-dependencies:
- dependency-name: prettier-plugin-sh
  dependency-version: 0.20.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump github.com/labstack/echo/v5 from 5.3.1 to 5.4.0

Bumps [github.com/labstack/echo/v5](https://github.com/labstack/echo) from 5.3.1 to 5.4.0.
- [Release notes](https://github.com/labstack/echo/releases)
- [Changelog](https://github.com/labstack/echo/blob/master/CHANGELOG.md)
- [Commits](labstack/echo@v5.3.1...v5.4.0)

---
updated-dependencies:
- dependency-name: github.com/labstack/echo/v5
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump github.com/shirou/gopsutil/v4 from 4.26.8 to 4.26.9

Bumps [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) from 4.26.8 to 4.26.9.
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v4.26.8...v4.26.9)

---
updated-dependencies:
- dependency-name: github.com/shirou/gopsutil/v4
  dependency-version: 4.26.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* test(chromium): cover header and footer image deduplication

* chore(deps): bump github.com/moby/moby/api from 1.56.0 to 1.56.1

Bumps [github.com/moby/moby/api](https://github.com/moby/moby) from 1.56.0 to 1.56.1.
- [Release notes](https://github.com/moby/moby/releases)
- [Commits](moby/moby@api/v1.56.0...api/v1.56.1)

---
updated-dependencies:
- dependency-name: github.com/moby/moby/api
  dependency-version: 1.56.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore(deps): bump OpenTelemetry to v1.47.0 and contrib to v0.72.0

The Logs API is now stable (go.opentelemetry.io/otel/log v1.47.0) and
go.opentelemetry.io/otel/log/global is deprecated. Register the logger
provider via otel.SetLoggerProvider instead.

Supersedes gotenberg#1680, gotenberg#1681 and gotenberg#1683.

* chore(deps): bump github.com/moby/moby/client from 0.6.0 to 0.6.2

Bumps [github.com/moby/moby/client](https://github.com/moby/moby) from 0.6.0 to 0.6.2.
- [Release notes](https://github.com/moby/moby/releases)
- [Changelog](https://github.com/moby/moby/blob/v0.6.2/CHANGELOG.md)
- [Commits](moby/moby@v0.6.0...v0.6.2)

---
updated-dependencies:
- dependency-name: github.com/moby/moby/client
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* fix(api): enforce api-body-limit before parsing multipart requests

* test(chromium): wait for network idle in resource status code scenarios

* fix(chromium)!: isolate each conversion in its own browser context

* fix(chromium): route loopback WebSockets through the pinning proxy when an outbound policy is set

* fix(chromium): report unreachable resources behind the pinning proxy as loading failures

* feat(libreoffice): add generateTaggedPdf form field

Tags the PDF without declaring PDF/UA conformance. Today tagging is only
available through pdfua, which also writes pdfuaid:part=1 into the XMP
metadata. Mirrors the Chromium routes, where generateTaggedPdf and pdfua
are separate fields. Defaults to false, so existing requests are
unchanged.

Closes gotenberg#1676

* fix Dockerfile

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: Julien Neuhart <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: hubert.lenoir <[email protected]>
Co-authored-by: Pieter Oliver <[email protected]>
Co-authored-by: Heorhii Ovcharenko <[email protected]>
Co-authored-by: Oskar Sveinsen <[email protected]>
Co-authored-by: Effy Teva <[email protected]>
Co-authored-by: Jacob Brackett <[email protected]>
Co-authored-by: Ilya Fedorov <[email protected]>
Co-authored-by: Niklas <[email protected]>
Co-authored-by: Muhammad Haseeb <[email protected]>
Co-authored-by: Johannes Klein <[email protected]>
Co-authored-by: Max Freedom Pollard <[email protected]>
Co-authored-by: Antonio Pauletich <[email protected]>
Co-authored-by: Johannes Klein <[email protected]>