Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump xmldom and jspdf in /frontend #421

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 2, 2022

Removes xmldom. It's no longer used after updating ancestor dependency jspdf. These dependencies need to be updated together.

Removes xmldom

Updates jspdf from 1.5.3 to 2.5.1

Release notes

Sourced from jspdf's releases.

v2.5.1

This release fixes two security related issues.

  • #3348: Check integrity when loading the pdfobject lib from CDN in calls to output('pdfobjectnewwindow')
  • #3368: Fix inefficient regular expression in setDisplayMode (CWE-1333)

v2.5.0

This release adds some minor new features and fixes some bugs, e.g. related to multiline text. Thanks to all contributors!

New Features

  • #3324 add getLineWidth function
  • #3294: add horizontalScale option to text function

Bugfixes

  • #3271: fix html function only rendering on the first invocation per document
  • #3304, #3295: fix context2D.closePath (now properly closes the path)
  • #3274: fix Acroform text fields with multiline text
  • #3281: fix textWithLink for multiline text
  • #3283: fix lineHeightFactor in text options having no effect
  • #3302: fixes to html typings
  • #3272: fix return type of save function in typings (promise overload)

v2.4.0

This release brings long awaited improvements to the html function and many other bugfixes and improvements. Thanks to all contributors!

  • #3203: Add width and windowWidth options to the html method, which will make correct scaling much easier.
  • #2977: Add/implement margin option for html method and add autoPaging option with two different modes: 'slice' and 'text'.
  • #3169: Add setLineDash and lineDashOffset to context2d.
  • #3039: Add rowStart and cellStart events and headerTextColor property to `table' function
  • #3132: Fix possibly negative line widths in context2d.
  • #3217: Fix setFont with fontWeight parameter for the built-in basic fonts
  • #3173: Fix violation of strict mode.
  • #3121: Improve addImage performance.
  • #3124: Allow to pass RGBA array to addImage.
  • #3135: Fix possibly imbalanced render target stack with form objects.
  • #3148: Add getDrawColor function to typings.
  • #3149: Fix font name escaping.
  • #3150: Throw an error when a zero size canvas is passed to addImage.
  • #3168: Fix word spacing after justified text.
  • #3215: Fix nullability of style arguments of geometry methods.
  • #3108: Complete the jsPDFOptions type in the typings.
  • #3119: Improve typings of the output function.

v2.3.1

Small bugfixes. Thanks to all contributors!

  • #3073: fix HTMLAnchorElement is not defined in file saver
  • #3078: fix exception in getTextDimensions() with maxWidth set
  • #3087: fix typings of table() function
  • #3091: fix ReDos vulnerability in addImage function

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [xmldom](https://github.com/xmldom/xmldom). It's no longer used after updating ancestor dependency [jspdf](https://github.com/MrRio/jsPDF). These dependencies need to be updated together.


Removes `xmldom`

Updates `jspdf` from 1.5.3 to 2.5.1
- [Release notes](https://github.com/MrRio/jsPDF/releases)
- [Changelog](https://github.com/parallax/jsPDF/blob/master/RELEASE.md)
- [Commits](parallax/jsPDF@v1.5.3...v2.5.1)

---
updated-dependencies:
- dependency-name: xmldom
  dependency-type: indirect
- dependency-name: jspdf
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 2, 2022
@codecov
Copy link

codecov bot commented Nov 2, 2022

Codecov Report

Merging #421 (6c7c061) into master (52f9a0e) will not change coverage.
The diff coverage is n/a.

@@            Coverage Diff            @@
##             master     #421   +/-   ##
=========================================
  Coverage     94.30%   94.30%           
  Complexity      179      179           
=========================================
  Files            20       20           
  Lines           737      737           
  Branches         31       31           
=========================================
  Hits            695      695           
  Misses           26       26           
  Partials         16       16           

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants