Skip to content

dependency: (deps): bump react-pdf from 7.7.3 to 9.1.1 in /frontend#286

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/react-pdf-9.1.1
Closed

dependency: (deps): bump react-pdf from 7.7.3 to 9.1.1 in /frontend#286
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/react-pdf-9.1.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Sep 18, 2024

Bumps react-pdf from 7.7.3 to 9.1.1.

Release notes

Sourced from react-pdf's releases.

v9.1.1

Bug fixes

  • Fixed "Worker was terminated" error on unmount (#1062, #1877). Thanks, @​CyberAndrii!
  • Fixed package.json exports not allowing to import package.json (#1876).

v9.1.0

What's new?

  • Updated PDF.js to 4.4.168.
    • Annotation improvements
    • Font conversion improvements
    • Image decoding improvements
    • Performance improvements
    • Text selection improvements
  • Added support for isolatedDeclarations in TypeScript.

What's changed?

  • Updated documentation.
  • Updated Next.js, Parcel and Webpack examples.

Bug fixes

  • Fixed missing hiddenCanvasElement styles (#1815).
  • Fixed overly large structTreeUtils.d.ts file, saving you 45 KB of disk space.

v9.0.0

See Upgrade guide from version 8.x to 9.x.

This version updates PDF.js to 4.3.136, fixing GHSA-wgrm-67xf-hhpq for good. React-PDF v8.0.2 and v7.7.3 have already included a mitigation of the issue and thus were not affected by this vulnerability, but caused automatic security alerts due to the outdated PDF.js version.

❗️ = breaking change

What's new?

  • Updated PDF.js to 4.3.136.
    • Optimizations for CPU and memory usage
    • Performance improvements
    • Image rendering improvements
    • Text selection improvements
    • Accessibility improvements
    • Font conversion improvements
    • Handling of corrupted documents
  • Improved Turbopack compatibility.

What's changed?

  • ❗️ PDF.js worker extension has been changed from .js to .mjs.
  • ❗ PDF.js is now an ESM module.

... (truncated)

Commits
  • b7b6624 v9.1.1
  • 2ff8ff6 Fix "Worker was terminated" error on unmount (#1877)
  • d90c7cf Add moduleDetection to TypeScript config
  • 462d7ed Make package.json exports more liberal
  • fd2a368 Remove redundant comment
  • 247ef7c Bump @​biomejs/biome from 1.8.3 to 1.9.0
  • e8e194a Pin Biome version
  • 08f1f60 Bump vitest from 2.0.1 to 2.0.5
  • 5f29bfb Bump rimraf from 3.0.2 to 6.0.1
  • 0099cf2 Enable noUnusedImports and noUnusedVariables in Biome
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [react-pdf](https://github.com/wojtekmaj/react-pdf/tree/HEAD/packages/react-pdf) from 7.7.3 to 9.1.1.
- [Release notes](https://github.com/wojtekmaj/react-pdf/releases)
- [Commits](https://github.com/wojtekmaj/react-pdf/commits/v9.1.1/packages/react-pdf)

---
updated-dependencies:
- dependency-name: react-pdf
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 18, 2024
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Dec 20, 2024

Superseded by #460.

@dependabot dependabot Bot closed this Dec 20, 2024
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/frontend/react-pdf-9.1.1 branch December 20, 2024 09:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants