Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): bump jspdf from 2.2.0 to 2.5.1 #120

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jan 31, 2022

Bumps jspdf from 2.2.0 to 2.5.1.

Release notes

Sourced from jspdf's releases.

v2.5.1

This release fixes two security related issues.

  • #3348: Check integrity when loading the pdfobject lib from CDN in calls to output('pdfobjectnewwindow')
  • #3368: Fix inefficient regular expression in setDisplayMode (CWE-1333)

v2.5.0

This release adds some minor new features and fixes some bugs, e.g. related to multiline text. Thanks to all contributors!

New Features

  • #3324 add getLineWidth function
  • #3294: add horizontalScale option to text function

Bugfixes

  • #3271: fix html function only rendering on the first invocation per document
  • #3304, #3295: fix context2D.closePath (now properly closes the path)
  • #3274: fix Acroform text fields with multiline text
  • #3281: fix textWithLink for multiline text
  • #3283: fix lineHeightFactor in text options having no effect
  • #3302: fixes to html typings
  • #3272: fix return type of save function in typings (promise overload)

v2.4.0

This release brings long awaited improvements to the html function and many other bugfixes and improvements. Thanks to all contributors!

  • #3203: Add width and windowWidth options to the html method, which will make correct scaling much easier.
  • #2977: Add/implement margin option for html method and add autoPaging option with two different modes: 'slice' and 'text'.
  • #3169: Add setLineDash and lineDashOffset to context2d.
  • #3039: Add rowStart and cellStart events and headerTextColor property to `table' function
  • #3132: Fix possibly negative line widths in context2d.
  • #3217: Fix setFont with fontWeight parameter for the built-in basic fonts
  • #3173: Fix violation of strict mode.
  • #3121: Improve addImage performance.
  • #3124: Allow to pass RGBA array to addImage.
  • #3135: Fix possibly imbalanced render target stack with form objects.
  • #3148: Add getDrawColor function to typings.
  • #3149: Fix font name escaping.
  • #3150: Throw an error when a zero size canvas is passed to addImage.
  • #3168: Fix word spacing after justified text.
  • #3215: Fix nullability of style arguments of geometry methods.
  • #3108: Complete the jsPDFOptions type in the typings.
  • #3119: Improve typings of the output function.

v2.3.1

Small bugfixes. Thanks to all contributors!

  • #3073: fix HTMLAnchorElement is not defined in file saver
  • #3078: fix exception in getTextDimensions() with maxWidth set
  • #3087: fix typings of table() function
  • #3091: fix ReDos vulnerability in addImage function

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [jspdf](https://github.com/MrRio/jsPDF) from 2.2.0 to 2.5.1.
- [Release notes](https://github.com/MrRio/jsPDF/releases)
- [Changelog](https://github.com/parallax/jsPDF/blob/master/RELEASE.md)
- [Commits](parallax/jsPDF@v2.2.0...v2.5.1)

---
updated-dependencies:
- dependency-name: jspdf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jan 31, 2022

Dependabot tried to add @thecodework as a reviewer to this PR, but received the following error from GitHub:

POST https://api.github.com/repos/thecodework/invoicious/pulls/120/requested_reviewers: 422 - Reviews may only be requested from collaborators. One or more of the users or teams you specified is not a collaborator of the thecodework/invoicious repository. // See: https://docs.github.com/rest/reference/pulls#request-reviewers-for-a-pull-request

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 31, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants