Skip to content

Bump jspdf from 3.0.3 to 4.0.0#2

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/jspdf-4.0.0
Closed

Bump jspdf from 3.0.3 to 4.0.0#2
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/jspdf-4.0.0

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 5, 2026

Bumps jspdf from 3.0.3 to 4.0.0.

Release notes

Sourced from jspdf's releases.

v4.0.0

This release fixes a critical path traversal/local file inclusion security vulnerability in the jsPDF Node.js build. File system access is now restricted by default and can be enabled by either using node's --permission flag or the new jsPDF.allowFsRead property.

There are no other breaking changes.

v3.0.4

This release includes a bunch of bugfixes. Thanks to all contributors!

What's Changed

New Contributors

Full Changelog: parallax/jsPDF@v3.0.3...v3.1.0

Commits
  • e6cf03d 4.0.0
  • a688c8f restrict file system access in node build (#3931)
  • a504e97 3.0.4
  • de802ab Fix Incorrect Typing for Margins in the TableConfig Interface Definition (#3816)
  • 87162d1 chore: bump checkout, setup-node, and stale actions (#3907)
  • e7dc622 Fix: Context2d font regex too restrictive ( #3904 ) (#3906)
  • e080935 Do not add pages dynamically unless autoPaging is enabled (#3915)
  • c768910 add package.json exports field (#3903)
  • c10d90c Fix API.internal.pages not being updated when restoring a RenderTarget ( #389...
  • 2db3d9d fix font list cache invalidation issue in context2d module (#3891)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [jspdf](https://github.com/parallax/jsPDF) from 3.0.3 to 4.0.0.
- [Release notes](https://github.com/parallax/jsPDF/releases)
- [Changelog](https://github.com/parallax/jsPDF/blob/master/RELEASE.md)
- [Commits](parallax/jsPDF@v3.0.3...v4.0.0)

---
updated-dependencies:
- dependency-name: jspdf
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 5, 2026
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 2, 2026

Superseded by #5.

@dependabot dependabot bot closed this Feb 2, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/jspdf-4.0.0 branch February 2, 2026 11:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants