chore(deps): bump pypdfium2 from 5.11.0 to 5.12.1 in /infra/containers/sandbox

[dependabot]

Bumps pypdfium2 from 5.11.0 to 5.12.1.

Release notes

Sourced from pypdfium2's releases.

5.12.1

Release 5.12.1

Summary

• Fix missing mkdir call in bindings build (blunder). This particularly matters for PDFIUM_PLATFORM=system-search / fallback setup.

Build info

This release was made with the following build strategies:

• PBIN: [macosx_arm64, macosx_x86_64, win_amd64, win_arm64, win32, manylinux_x86_64, manylinux_i686, manylinux_aarch64, manylinux_armv7l, manylinux_ppc64le, manylinux_mips64le, android_arm64_v8a, android_armeabi_v7a]
• SBLD: [manylinux_mipsle]
• CIBW: [manylinux_riscv64, manylinux_loongarch64, manylinux_s390x, musllinux_x86_64, musllinux_aarch64, musllinux_armv7l, musllinux_i686, musllinux_ppc64le, musllinux_s390x, musllinux_riscv64, musllinux_loongarch64]

Commit logs

Commits between 5.12.0 and 5.12.1 (latest commit first):

• b3e7e67a [autorelease main] update 5.12.1
• 4a263605 Prepare for minor version increment
• c9c4ec36 Update changelog
• 9c704343 Fix missing mkdir call in bindings build (blunder)
• 5a28bfed REUSE.toml(bigendian.patch): credit hjanuschka
• 9b77635a Changelog style fix

5.12.0

Release 5.12.0

[!IMPORTANT] This release has been yanked from PyPI. 5.12.1 is a drop-in replacement and fixes a setup blunder. Wheels are valid and effectively identical to 5.12.1, but the sdist in this release is faulty & may fail depending on which target is chosen.

Summary

Requirements

• macOS 13.0+ is now required for current PDFium (declared in upstream config and confirmed with dylib header inspection). Updated wheel tags accordingly.
• Setup: Increased tool dependency requirements
  • build_native.py now expects git >= 2.49.0 so we can use modern git clone --revision features.
  • If gh is installed, gh >= 2.47.0 will be required, as we now assume availability of the gh attestation subcommand without consulting gh --version.

Packaging / CI

Largest CI/workflows rework yet ("Strategic builds"). Many testing gaps filled (see the updated platform support table).

• Dynamic selection of targets and Python versions across 3 build strategies (pdfium-binaries, build_toolchained.py, cibuildwheel/build_native.py). This means releases can now be made using any selection of targets/strategies, configurable through workflow inputs on a per-run basis.
• In principle, this would allow us to make releases just using our own builds, without external binaries. We plan to explore this from time to time. That said, pypdfium2's conda packages continue to be tied to the pdfium-binaries, and setup will continue to provide you with pdfium-binaries by default.

... (truncated)

Commits

• b3e7e67 [autorelease main] update 5.12.1
• 4a26360 Prepare for minor version increment
• c9c4ec3 Update changelog
• 9c70434 Fix missing mkdir call in bindings build (blunder)
• 5a28bfe REUSE.toml(bigendian.patch): credit hjanuschka
• 9b77635 Changelog style fix
• 38fa93b [autorelease main] update 5.12.0
• d60dbb6 fix: reactivate release environment
• 0be3571 Take out --fail-on-no-commits
• 8b94bcc main.yaml: fix loss of $NEW_VERSION
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[iamjr15]

Closing this scheduled version-update PR as part of the Dependabot policy cleanup. Security updates remain enabled; future minor and patch version updates will be grouped monthly, and major upgrades will be planned explicitly.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.