Skip to content

Update dependency pdfmake to ^0.3.0 - #3996

Open
renovate-bot wants to merge 1 commit into
googleapis:mainfrom
renovate-bot:renovate/pdfmake-0.x
Open

Update dependency pdfmake to ^0.3.0#3996
renovate-bot wants to merge 1 commit into
googleapis:mainfrom
renovate-bot:renovate/pdfmake-0.x

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
pdfmake (source) ^0.2.19^0.3.0 age confidence

Release Notes

bpampuch/pdfmake (pdfmake)

v0.3.11

Compare Source

  • Updated pdfkit to 0.19.1 (fixed RGB JPEG embedded as DeviceGray, bug introduced in 0.19.0)

v0.3.10

Compare Source

  • Updated pdfkit to 0.19.0

v0.3.9

Compare Source

  • Fixed table rowSpan cell height in last column

v0.3.8

Compare Source

  • Added server-side method setLocalAccessPolicy() for defining a custom access policy for local file

    Example:

    pdfmake.setLocalAccessPolicy((path) => {
    	// check allowed local file path
    	return path.startsWith("fonts/");
    });
  • Improved URL Access Policy (setUrlAccessPolicy method); URLs are now validated even before each redirection in Node.js and after final redirection in browser (browsers do not support validation before redirection)

  • Fixed extra blank page when using headerRows, dontBreakRows and cell pageBreak together

  • Fixed rendering of an invalid color name - previously it used the last valid color; now it defaults to black

  • Fixed dontBreakRows rowSpan ending offset across pages

v0.3.7

Compare Source

  • Updated pdfkit to 0.18.0

v0.3.6

Compare Source

  • Added setUrlAccessPolicy() for defining a custom access policy for external URLs before download
    (addresses a potential server vulnerability CVE-2026-26801)

    Example:

    pdfmake.setUrlAccessPolicy((url) => {
    	// check allowed domain
    	return url.startsWith("https://example.com/");
    });

    For details see documentation

  • Added validation for image height and width values

v0.3.5

Compare Source

  • Added snakingColumns property for columns to enable newspaper-like column flow
  • Added outlines / bookmarks for text node
    • outline - set to true for add to bookmarks
    • outlineText (optional) - set custom bookmark text, otherwise text from node
    • outlineExpanded (optional) - set to true for expanded/opened bookmark
    • outlineParentId (optional) - parent bookmark id
  • Added property outlines for ToC, which adds all items to outlines / bookmarks (any existing outline settings on texts are respected)

v0.3.4

Compare Source

  • Added vertical alignment for table cells via verticalAlignment property, values: top (default), middle, bottom
  • Fixed margin inheritance when styles are extended multiple times

v0.3.3

Compare Source

  • Added properties for ToC:
    • hideEmpty - set to true if you can hide an empty ToC
    • sortBy - 'page' (default) or 'title'
    • sortLocale - custom locale to sort by property sortBy
  • Added property decorationThickness for text to set width of the decoration line
  • Added inherited/extends styles, use property extends in style with style name or array of string with style names
  • Fixed margin override with 0 value
  • Fixed margin override from multiple styles
  • Fixed text decoration for superscript and subscript
  • Fixed svg-to-pdfkit - TypeError: t.classList.contains is not a function

v0.3.2

Compare Source

  • Fixed non-working open() and print() methods in browser
  • Added SVG validation: width and height must be specified (in SVG string/element or svg node)
  • Added support for image scaling with only height defined
  • Added custom markerColor for each item of ul and ol

v0.3.1

Compare Source

  • Updated pdfkit to 0.19.1 (fixed RGB JPEG embedded as DeviceGray, bug introduced in 0.19.0)

v0.3.0

Compare Source

  • Reverted to the original pdfkit package, moving away from @foliojs-fork
  • Drop support Internet Explorer 11 (Microsoft will not support from 2022)
  • Minimal supported version Node.js 20 LTS
  • Port code base to ES6+
  • Unify interface for node and browser (breaking change)
  • All methods return promise instead of using callback (breaking change)
  • Change including virtual font storage in client-side (breaking change)
  • Change parameters of pageBreakBefore function (breaking change)
  • Support for loading font files and images via URL addresses (https:// or http:// protocol) in Node.js (client and server side now)
  • Used fetch API for downloading fonts and images
  • Attachments embedding
  • Added section node

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "after 9am and before 3pm"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot
renovate-bot requested a review from a team as a code owner September 3, 2026 09:06
@product-auto-label product-auto-label Bot added the size: xs Pull request size is extra small. label Sep 3, 2026
@trusted-contributions-gcf trusted-contributions-gcf Bot added kokoro:force-run Add this label to force Kokoro to re-run the tests. owlbot:run Add this label to trigger the Owlbot post processor. labels Sep 3, 2026
@gcf-owl-bot gcf-owl-bot Bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Sep 3, 2026
@yoshi-kokoro yoshi-kokoro removed the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Sep 3, 2026
@danieljbruce danieljbruce added the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Sep 3, 2026
@yoshi-kokoro yoshi-kokoro removed kokoro:force-run Add this label to force Kokoro to re-run the tests. labels Sep 3, 2026
@renovate-bot renovate-bot changed the title Update dependency pdfmake to ^0.3.0 chore(deps): update dependency pdfmake to ^0.3.0 Sep 3, 2026
@trusted-contributions-gcf trusted-contributions-gcf Bot added kokoro:force-run Add this label to force Kokoro to re-run the tests. owlbot:run Add this label to trigger the Owlbot post processor. labels Sep 3, 2026
@gcf-owl-bot gcf-owl-bot Bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Sep 3, 2026
@yoshi-kokoro yoshi-kokoro removed the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Sep 3, 2026
@trusted-contributions-gcf trusted-contributions-gcf Bot added kokoro:force-run Add this label to force Kokoro to re-run the tests. owlbot:run Add this label to trigger the Owlbot post processor. labels Sep 4, 2026
@gcf-owl-bot gcf-owl-bot Bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Sep 4, 2026
@yoshi-kokoro yoshi-kokoro removed the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Sep 4, 2026
@renovate-bot renovate-bot changed the title chore(deps): update dependency pdfmake to ^0.3.0 Update dependency pdfmake to ^0.3.0 Sep 4, 2026
@trusted-contributions-gcf trusted-contributions-gcf Bot added kokoro:force-run Add this label to force Kokoro to re-run the tests. owlbot:run Add this label to trigger the Owlbot post processor. labels Sep 4, 2026
@gcf-owl-bot gcf-owl-bot Bot removed the owlbot:run Add this label to trigger the Owlbot post processor. label Sep 4, 2026
@yoshi-kokoro yoshi-kokoro removed the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Sep 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size: xs Pull request size is extra small.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants