Skip to content

chore(deps): update dependency pdfmake to ^0.3.0 - #3996

Open
renovate-bot wants to merge 1 commit into
googleapis:mainfrom
renovate-bot:renovate/pdfmake-0.x
Open

chore(deps): update dependency pdfmake to ^0.3.0#3996
renovate-bot wants to merge 1 commit into
googleapis:mainfrom
renovate-bot:renovate/pdfmake-0.x

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
pdfmake (source) ^0.2.19^0.3.0 age confidence

Release Notes

bpampuch/pdfmake (pdfmake)

v0.3.11

Compare Source

  • Updated pdfkit to 0.19.1 (fixed RGB JPEG embedded as DeviceGray, bug introduced in 0.19.0)

v0.3.10

Compare Source

  • Updated pdfkit to 0.19.0

v0.3.9

Compare Source

  • Fixed table rowSpan cell height in last column

v0.3.8

Compare Source

  • Added server-side method setLocalAccessPolicy() for defining a custom access policy for local file

    Example:

    pdfmake.setLocalAccessPolicy((path) => {
    	// check allowed local file path
    	return path.startsWith("fonts/");
    });
  • Improved URL Access Policy (setUrlAccessPolicy method); URLs are now validated even before each redirection in Node.js and after final redirection in browser (browsers do not support validation before redirection)

  • Fixed extra blank page when using headerRows, dontBreakRows and cell pageBreak together

  • Fixed rendering of an invalid color name - previously it used the last valid color; now it defaults to black

  • Fixed dontBreakRows rowSpan ending offset across pages

v0.3.7

Compare Source

  • Updated pdfkit to 0.18.0

v0.3.6

Compare Source

  • Added setUrlAccessPolicy() for defining a custom access policy for external URLs before download
    (addresses a potential server vulnerability CVE-2026-26801)

    Example:

    pdfmake.setUrlAccessPolicy((url) => {
    	// check allowed domain
    	return url.startsWith("https://example.com/");
    });

    For details see documentation

  • Added validation for image height and width values

v0.3.5

Compare Source

  • Added snakingColumns property for columns to enable newspaper-like column flow
  • Added outlines / bookmarks for text node
    • outline - set to true for add to bookmarks
    • outlineText (optional) - set custom bookmark text, otherwise text from node
    • outlineExpanded (optional) - set to true for expanded/opened bookmark
    • outlineParentId (optional) - parent bookmark id
  • Added property outlines for ToC, which adds all items to outlines / bookmarks (any existing outline settings on texts are respected)

v0.3.4

Compare Source

  • Added vertical alignment for table cells via verticalAlignment property, values: top (default), middle, bottom
  • Fixed margin inheritance when styles are extended multiple times

v0.3.3

Compare Source

  • Added properties for ToC:
    • hideEmpty - set to true if you can hide an empty ToC
    • sortBy - 'page' (default) or 'title'
    • sortLocale - custom locale to sort by property sortBy
  • Added property decorationThickness for text to set width of the decoration line
  • Added inherited/extends styles, use property extends in style with style name or array of string with style names
  • Fixed margin override with 0 value
  • Fixed margin override from multiple styles
  • Fixed text decoration for superscript and subscript
  • Fixed svg-to-pdfkit - TypeError: t.classList.contains is not a function

v0.3.2

Compare Source

  • Fixed non-working open() and print() methods in browser
  • Added SVG validation: width and height must be specified (in SVG string/element or svg node)
  • Added support for image scaling with only height defined
  • Added custom markerColor for each item of ul and ol

v0.3.1

Compare Source

  • Updated pdfkit to 0.19.1 (fixed RGB JPEG embedded as DeviceGray, bug introduced in 0.19.0)

v0.3.0

Compare Source

  • Reverted to the original pdfkit package, moving away from @foliojs-fork
  • Drop support Internet Explorer 11 (Microsoft will not support from 2022)
  • Minimal supported version Node.js 20 LTS
  • Port code base to ES6+
  • Unify interface for node and browser (breaking change)
  • All methods return promise instead of using callback (breaking change)
  • Change including virtual font storage in client-side (breaking change)
  • Change parameters of pageBreakBefore function (breaking change)
  • Support for loading font files and images via URL addresses (https:// or http:// protocol) in Node.js (client and server side now)
  • Used fetch API for downloading fonts and images
  • Attachments embedding
  • Added section node

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "after 9am and before 3pm"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot
renovate-bot requested a review from a team as a code owner September 3, 2026 09:06
@product-auto-label product-auto-label Bot added the size: xs Pull request size is extra small. label Sep 3, 2026
@trusted-contributions-gcf trusted-contributions-gcf Bot added kokoro:force-run Add this label to force Kokoro to re-run the tests. owlbot:run Add this label to trigger the Owlbot post processor. labels Sep 3, 2026
@gcf-owl-bot gcf-owl-bot Bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Sep 3, 2026
@yoshi-kokoro yoshi-kokoro removed the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Sep 3, 2026
@danieljbruce danieljbruce added the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Sep 3, 2026
@yoshi-kokoro yoshi-kokoro removed kokoro:force-run Add this label to force Kokoro to re-run the tests. labels Sep 3, 2026
@renovate-bot renovate-bot changed the title Update dependency pdfmake to ^0.3.0 chore(deps): update dependency pdfmake to ^0.3.0 Sep 3, 2026
@trusted-contributions-gcf trusted-contributions-gcf Bot added kokoro:force-run Add this label to force Kokoro to re-run the tests. owlbot:run Add this label to trigger the Owlbot post processor. labels Sep 3, 2026
@gcf-owl-bot gcf-owl-bot Bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Sep 3, 2026
@yoshi-kokoro yoshi-kokoro removed the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Sep 3, 2026
@trusted-contributions-gcf trusted-contributions-gcf Bot added kokoro:force-run Add this label to force Kokoro to re-run the tests. owlbot:run Add this label to trigger the Owlbot post processor. labels Sep 4, 2026
@gcf-owl-bot gcf-owl-bot Bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Sep 4, 2026
@yoshi-kokoro yoshi-kokoro removed the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Sep 4, 2026
@renovate-bot renovate-bot changed the title chore(deps): update dependency pdfmake to ^0.3.0 Update dependency pdfmake to ^0.3.0 Sep 4, 2026
@trusted-contributions-gcf trusted-contributions-gcf Bot added kokoro:force-run Add this label to force Kokoro to re-run the tests. owlbot:run Add this label to trigger the Owlbot post processor. labels Sep 4, 2026
@gcf-owl-bot gcf-owl-bot Bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Sep 4, 2026
@yoshi-kokoro yoshi-kokoro removed the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Sep 4, 2026
@trusted-contributions-gcf trusted-contributions-gcf Bot added kokoro:force-run Add this label to force Kokoro to re-run the tests. owlbot:run Add this label to trigger the Owlbot post processor. labels Sep 8, 2026
@renovate-bot renovate-bot changed the title Update dependency pdfmake to ^0.3.0 chore(deps): update dependency pdfmake to ^0.3.0 Sep 9, 2026
@trusted-contributions-gcf trusted-contributions-gcf Bot added kokoro:force-run Add this label to force Kokoro to re-run the tests. owlbot:run Add this label to trigger the Owlbot post processor. labels Sep 9, 2026
@gcf-owl-bot gcf-owl-bot Bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Sep 9, 2026
@yoshi-kokoro yoshi-kokoro removed the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Sep 9, 2026
@trusted-contributions-gcf trusted-contributions-gcf Bot added kokoro:force-run Add this label to force Kokoro to re-run the tests. owlbot:run Add this label to trigger the Owlbot post processor. labels Sep 9, 2026
@gcf-owl-bot gcf-owl-bot Bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Sep 9, 2026
@yoshi-kokoro yoshi-kokoro removed the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Sep 9, 2026
@trusted-contributions-gcf trusted-contributions-gcf Bot added kokoro:force-run Add this label to force Kokoro to re-run the tests. owlbot:run Add this label to trigger the Owlbot post processor. labels Sep 10, 2026
@gcf-owl-bot gcf-owl-bot Bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Sep 10, 2026
@yoshi-kokoro yoshi-kokoro removed the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Sep 10, 2026
@trusted-contributions-gcf trusted-contributions-gcf Bot added kokoro:force-run Add this label to force Kokoro to re-run the tests. owlbot:run Add this label to trigger the Owlbot post processor. labels Sep 10, 2026
@gcf-owl-bot gcf-owl-bot Bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Sep 10, 2026
@yoshi-kokoro yoshi-kokoro removed the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Sep 10, 2026
@trusted-contributions-gcf trusted-contributions-gcf Bot added kokoro:force-run Add this label to force Kokoro to re-run the tests. owlbot:run Add this label to trigger the Owlbot post processor. labels Sep 10, 2026
@gcf-owl-bot gcf-owl-bot Bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Sep 10, 2026
@yoshi-kokoro yoshi-kokoro removed the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Sep 10, 2026
@trusted-contributions-gcf trusted-contributions-gcf Bot added kokoro:force-run Add this label to force Kokoro to re-run the tests. owlbot:run Add this label to trigger the Owlbot post processor. labels Sep 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size: xs Pull request size is extra small.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants