dependabot[bot] opened a new pull request, #3872: URL: https://github.com/apache/causeway/pull/3872
Bumps [org.webjars.npm:pdfjs-dist](https://github.com/mozilla/pdf.js) from 5.4.624 to 6.4.299. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mozilla/pdf.js/releases">org.webjars.npm:pdfjs-dist's releases</a>.</em></p> <blockquote> <h2>v6.4.299</h2> <p>This release contains improvements for annotation rendering, font conversion, form handling, pattern rendering, performance, text selection and the viewer.</p> <h2>Changes since v6.3.289</h2> <ul> <li>Bump the stable version in <code>pdfjs.config</code> by <a href="https://github.com/timvandermeij"><code>@timvandermeij</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21843">mozilla/pdf.js#21843</a></li> <li>Update dependencies to the most recent versions by <a href="https://github.com/timvandermeij"><code>@timvandermeij</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21844">mozilla/pdf.js#21844</a></li> <li>Improve the runtime of Chrome tests by <a href="https://github.com/timvandermeij"><code>@timvandermeij</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21846">mozilla/pdf.js#21846</a></li> <li>Fix the adjacent-page reordering integration test by <a href="https://github.com/calixteman"><code>@calixteman</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21847">mozilla/pdf.js#21847</a></li> <li>Implement unit tests for the error cases in <code>src/core/xml_parser.js</code> by <a href="https://github.com/timvandermeij"><code>@timvandermeij</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21848">mozilla/pdf.js#21848</a></li> <li>Use arrow functions consistently with Promise <code>catch</code> methods by <a href="https://github.com/Snuffleupagus"><code>@Snuffleupagus</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21849">mozilla/pdf.js#21849</a></li> <li>Fix the [Object] param entry in createAndAddNewEditor and three similar slips by <a href="https://github.com/darkdi"><code>@darkdi</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21850">mozilla/pdf.js#21850</a></li> <li>Fix incorrect text stroke width caused by stale pixel-width cache by <a href="https://github.com/HyeryongChoi"><code>@HyeryongChoi</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21829">mozilla/pdf.js#21829</a></li> <li>Remove old <code>info</code> logging from the "GetOperatorList"/"GetTextContent" handlers (issue 21836) by <a href="https://github.com/Snuffleupagus"><code>@Snuffleupagus</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21840">mozilla/pdf.js#21840</a></li> <li>Get the l10n arguments at once in <code>PDFDocumentProperties.prototype.#parsePageSize</code> by <a href="https://github.com/Snuffleupagus"><code>@Snuffleupagus</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21856">mozilla/pdf.js#21856</a></li> <li>Move checks into the <code>ScreenAnnotation.#isPlayAction</code> method by <a href="https://github.com/Snuffleupagus"><code>@Snuffleupagus</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21862">mozilla/pdf.js#21862</a></li> <li>Remove the unused <code>fallback</code> parameter from <code>L10n.prototype.get</code> by <a href="https://github.com/Snuffleupagus"><code>@Snuffleupagus</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21857">mozilla/pdf.js#21857</a></li> <li>Add a helper to reduce duplication in the <code>collectActions</code> function by <a href="https://github.com/Snuffleupagus"><code>@Snuffleupagus</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21863">mozilla/pdf.js#21863</a></li> <li>[api-minor] Expose the <code>operatorList</code> to the <code>operationsFilter</code> callback function (issue 20399) by <a href="https://github.com/Snuffleupagus"><code>@Snuffleupagus</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21868">mozilla/pdf.js#21868</a></li> <li>Bump github/codeql-action/analyze from 4.37.7 to 4.37.8 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21864">mozilla/pdf.js#21864</a></li> <li>Bump github/codeql-action/autobuild from 4.37.7 to 4.37.8 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21865">mozilla/pdf.js#21865</a></li> <li>Bump github/codeql-action/init from 4.37.7 to 4.37.8 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21866">mozilla/pdf.js#21866</a></li> <li>Set <code>deployment: false</code> on the <code>code-coverage</code> environment jobs by <a href="https://github.com/calixteman"><code>@calixteman</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21853">mozilla/pdf.js#21853</a></li> <li>Add JSDoc linting by <a href="https://github.com/calixteman"><code>@calixteman</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21855">mozilla/pdf.js#21855</a></li> <li>Account for the Firefox font size quantization in the text layer by <a href="https://github.com/calixteman"><code>@calixteman</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21810">mozilla/pdf.js#21810</a></li> <li>Bump fast-uri from 3.1.5 to 3.1.7 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21875">mozilla/pdf.js#21875</a></li> <li>Bump <code>@humanfs/node</code> from 0.16.7 to 0.16.8 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21876">mozilla/pdf.js#21876</a></li> <li>Address the high-severity zizmor findings by <a href="https://github.com/calixteman"><code>@calixteman</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21854">mozilla/pdf.js#21854</a></li> <li>Fix the fill area computation for a rotated tiling pattern by <a href="https://github.com/calixteman"><code>@calixteman</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21880">mozilla/pdf.js#21880</a></li> <li>Fix the vertical alignment of the views manager header by <a href="https://github.com/calixteman"><code>@calixteman</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21871">mozilla/pdf.js#21871</a></li> <li>Use moz-message-bar for the Firefox features notification (bug 2057608) by <a href="https://github.com/calixteman"><code>@calixteman</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21874">mozilla/pdf.js#21874</a></li> <li>Replace simple callback functions with arrow functions by <a href="https://github.com/Snuffleupagus"><code>@Snuffleupagus</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21879">mozilla/pdf.js#21879</a></li> <li>l10n: Update locale files by <a href="https://github.com/sync-l10n-for-pdf-js"><code>@sync-l10n-for-pdf-js</code></a>[bot] in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21882">mozilla/pdf.js#21882</a></li> <li>Improve the filename extension detection in <code>MediaAnnotation.prototype._getContentType</code> by <a href="https://github.com/Snuffleupagus"><code>@Snuffleupagus</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21887">mozilla/pdf.js#21887</a></li> <li>Shorten some Pattern-handling code a little bit by <a href="https://github.com/Snuffleupagus"><code>@Snuffleupagus</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21893">mozilla/pdf.js#21893</a></li> <li>Convert the font <code>seacMap</code> and <code>seacs</code> structures into Maps by <a href="https://github.com/Snuffleupagus"><code>@Snuffleupagus</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21884">mozilla/pdf.js#21884</a></li> <li>Modernize the <code>MessageHandler</code> class by <a href="https://github.com/Snuffleupagus"><code>@Snuffleupagus</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21883">mozilla/pdf.js#21883</a></li> <li>Convert the <code>CmdCache</code>, <code>NameCache</code>, and <code>RefCache</code> to use Maps by <a href="https://github.com/Snuffleupagus"><code>@Snuffleupagus</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21888">mozilla/pdf.js#21888</a></li> <li>Wait for the deferred focus changes in the editor integration tests by <a href="https://github.com/calixteman"><code>@calixteman</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21892">mozilla/pdf.js#21892</a></li> <li>Remove the unused <code>@babel/runtime</code> dependency by <a href="https://github.com/calixteman"><code>@calixteman</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21894">mozilla/pdf.js#21894</a></li> <li>Replace <code>kleur</code> with <code>util.styleText</code> by <a href="https://github.com/calixteman"><code>@calixteman</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21895">mozilla/pdf.js#21895</a></li> <li>Use <code>@napi-rs/canvas</code> for PNG decoding in integration tests by <a href="https://github.com/calixteman"><code>@calixteman</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21896">mozilla/pdf.js#21896</a></li> <li>Fix TextWidgetAnnotation not inheriting text alignment from AcroForm by <a href="https://github.com/diogotcorreia"><code>@diogotcorreia</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21886">mozilla/pdf.js#21886</a></li> <li>Keep the ToUnicode mapping of unencoded glyphs in non-embedded Type1 fonts by <a href="https://github.com/calixteman"><code>@calixteman</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21872">mozilla/pdf.js#21872</a></li> <li>Avoid a CPU DoS when auto-sizing text fields (bug 2069428) by <a href="https://github.com/calixteman"><code>@calixteman</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21889">mozilla/pdf.js#21889</a></li> <li>Fix comment tooltip and highlight test races by <a href="https://github.com/calixteman"><code>@calixteman</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21897">mozilla/pdf.js#21897</a></li> <li>Prevent NaN values in sampled functions with a degenerate Domain by <a href="https://github.com/NakuRei"><code>@NakuRei</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21891">mozilla/pdf.js#21891</a></li> <li>Make <code>Ref.fromString</code> more strict, by not accepting "bad" arguments by <a href="https://github.com/Snuffleupagus"><code>@Snuffleupagus</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21898">mozilla/pdf.js#21898</a></li> <li>Move the the <code>interpolate</code> helper, such that it can be re-used more in <code>src/core/function.js</code> code by <a href="https://github.com/Snuffleupagus"><code>@Snuffleupagus</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21905">mozilla/pdf.js#21905</a></li> <li>Convert the <code>CFFOffsetTracker</code> offsets into a Map by <a href="https://github.com/Snuffleupagus"><code>@Snuffleupagus</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21910">mozilla/pdf.js#21910</a></li> <li>Convert the <code>missingGlyphs</code>, used in the <code>Font</code> class, into a Set by <a href="https://github.com/Snuffleupagus"><code>@Snuffleupagus</code></a> in <a href="https://redirect.github.com/mozilla/pdf.js/pull/21911">mozilla/pdf.js#21911</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mozilla/pdf.js/commit/d0991a0d53f3bb3a7307e3b83f279c1d117aafb3"><code>d0991a0</code></a> Merge pull request <a href="https://redirect.github.com/mozilla/pdf.js/issues/22064">#22064</a> from Snuffleupagus/_requestChunks-avoid-pointless-r...</li> <li><a href="https://github.com/mozilla/pdf.js/commit/d7e710169d3374bcce38b24be93e616bf00e7d46"><code>d7e7101</code></a> Merge pull request <a href="https://redirect.github.com/mozilla/pdf.js/issues/22062">#22062</a> from timvandermeij/updates</li> <li><a href="https://github.com/mozilla/pdf.js/commit/bcf89431d5ed0ca683155c84bd01958c81fa2d18"><code>bcf8943</code></a> Avoid creating a pointless <code>requestId</code> in the `ChunkedStreamManager.prototype...</li> <li><a href="https://github.com/mozilla/pdf.js/commit/d03359cb576ed2cedf9e25c17995b03124d38f62"><code>d03359c</code></a> Merge pull request <a href="https://redirect.github.com/mozilla/pdf.js/issues/22061">#22061</a> from Snuffleupagus/SupportedImageMimeTypes-Set</li> <li><a href="https://github.com/mozilla/pdf.js/commit/76f6eb635695892ea5f6fe346d3ddbe10cbc3087"><code>76f6eb6</code></a> Fix vulnerability in the <code>fast-uri</code> dependency</li> <li><a href="https://github.com/mozilla/pdf.js/commit/e987c74cd63f6843ba5a4a2772499c0d36948347"><code>e987c74</code></a> Upgrade <code>eslint-plugin-unicorn</code> to version 77.0.0</li> <li><a href="https://github.com/mozilla/pdf.js/commit/bf5f6ea4b1b0e689f37dd2dd1b99ad63420537c9"><code>bf5f6ea</code></a> Upgrade <code>eslint-plugin-jsdoc</code> to version 65.0.2</li> <li><a href="https://github.com/mozilla/pdf.js/commit/7dc3cf0421b09d28d388c7fbceb1ab85952c6cd5"><code>7dc3cf0</code></a> Update dependencies to the most recent versions</li> <li><a href="https://github.com/mozilla/pdf.js/commit/e9d1c85c7cfbb8c438bbb45898e3dc37d50fdf4f"><code>e9d1c85</code></a> Merge pull request <a href="https://redirect.github.com/mozilla/pdf.js/issues/22041">#22041</a> from calixteman/sampled-fn-arity</li> <li><a href="https://github.com/mozilla/pdf.js/commit/c67fe1529d1abda222a3365a474556e9ea15f2d3"><code>c67fe15</code></a> Check shading function dimensions and bound sampled interpolation</li> <li>Additional commits viewable in <a href="https://github.com/mozilla/pdf.js/compare/v5.4.624...v6.4.299">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
