Bump itextpdf.version from 9.2.0 to 9.3.0 (#2511)

Bumps `itextpdf.version` from 9.2.0 to 9.3.0.
Updates `com.itextpdf:kernel` from 9.2.0 to 9.3.0

Updates `com.itextpdf:itext-core` from 9.2.0 to 9.3.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/itext/itext7/releases">com.itextpdf:itext-core's
releases</a>.</em></p>
<blockquote>
<h2>iText Core/Community 9.3.0</h2>
<p>For this Q3 release of iText Core we’ve further enhanced iText’s
digital signature validation by adding support for the official EU eIDAS
Trusted Lists.</p>
<h2>EU Trusted Lists in Validation</h2>
<p>Furthering our efforts to make developers' lives easier when dealing
with PDF digital signatures, we’re pleased to announce that iText now
supports retrieval, validation, and usage of the EU’s List of Trusted
Lists (LOTL). This greatly simplifies the process of establishing a
chain of trust for electronic signatures, and helps ensure that
signatures validated with iText meet stringent European standards for
trust and authenticity..</p>
<p>For those unaware, the LOTL is a central, signed XML file containing
links to trusted lists from EU and EEA Member States. These Member State
lists identify both trust service providers and the trust services they
offer; e.g. digital signatures and seals. The LOTL is an official
resource which aids achieving compliance with EU eIDAS regulations.
Previously, you would need to manually provide the trusted certificates
to use for validation with iText; which is still possible, but is less
convenient. Now, iText will retrieve, parse, and validate the LOTL to
provide the root trusted certificates for you.</p>
<p>For security reasons, rather than expect iText to repeatedly retrieve
the trusted certificates to validate the LOTL from the Internet, we
instead provide a specialized repository which has the required
certificates pre-downloaded. This can be found on <a
href="https://github.com/itext/itext-eu-trusted-lists-resources">GitHub</a>,
or alternatively on <a
href="https://repo1.maven.org/maven2/com/itextpdf/eu-trusted-lists-resources/">Maven</a>
and <a
href="https://www.nuget.org/packages/itext.eu-trusted-lists-resources">NuGet</a>.</p>
<p>You can find full details on this implementation and its usage linked
in the <a
href="https://kb.itextpdf.com/itext/release-itext-core-9-3-0">release
notes</a> on the iText Knowledge Base.</p>
<h3>Thread Safety Improvements</h3>
<p>Internal updates have improved thread safety across key components,
making iText Core more robust in multithreaded environments. This is
especially beneficial for developers building scalable, concurrent
applications.</p>
<h2>Pull Requests</h2>
<p>We’d like to thank <a
href="https://github.com/itext/itext-dotnet/commits?author=SangeethaDivya">SangeethaDivya</a>
for their contribution to <a
href="https://github.com/itext/itext-dotnet/commit/1199ffe3c72c96f4a323b69af14c32547730214d">remove
duplicate constants</a> on .NET, which we used as a basis for a Java
reimplementation and ported it to .NET. Thanks also to <a
href="https://github.com/craffael">craffael</a> who fixed a typo in the
PDFA-1 checking code which led to documents with no device-dependent
color spaces failing the checks.</p>
<h2>Bug Fixes and Miscellaneous</h2>
<p>A bug in PDF 2.0 structure destinations has been fixed, improving how
tagged content is linked and navigated when converting from HTML. This
is now more in line with the PDF 2.0 and PDF/UA-2 specifications and is
particularly useful for accessibility and structured document
workflows.</p>
<p>We’ve also fixed an issue related to color depth support in PDF image
data streams, which would result in an
<code>com.itextpdf.io.exceptions.IOException: The color depth 1 is not
supported.</code> error.</p>
<p>We’ve also resolved a StackOverflowException resulting from invalid
PDFs with cyclic references in the trailer dictionary, improving
robustness and error handling.</p>
<h2>Other Stuff</h2>
<p>As always, you can see the Changelog below to see the full rundown on
what’s new in Core, and details of other improvements and bug fixes for
this release.</p>
<p><strong>Java</strong></p>
<ul>
<li><a
href="https://github.com/itext/itext-publications-examples-java">https://github.com/itext/itext-publications-examples-java</a></li>
<li><a
href="https://github.com/itext/itext-publications-book-java">https://github.com/itext/itext-publications-book-java</a></li>
<li><a
href="https://github.com/itext/itext-publications-signing-examples-java">https://github.com/itext/itext-publications-signing-examples-java</a></li>
<li><a
href="https://github.com/itext/itext-publications-signatures-java">https://github.com/itext/itext-publications-signatures-java</a></li>
<li><a
href="https://github.com/itext/itext-publications-highlevel-java">https://github.com/itext/itext-publications-highlevel-java</a></li>
<li><a
href="https://github.com/itext/itext-publications-jumpstart-java">https://github.com/itext/itext-publications-jumpstart-java</a></li>
</ul>
<p><strong>.NET</strong></p>
<ul>
<li><a
href="https://github.com/itext/itext-publications-samples-dotnet">https://github.com/itext/itext-publications-samples-dotnet</a></li>
</ul>
<p><strong>NOTE:</strong> If you want to create
ZUGFeRD/Factur-X-e-invoices with iText Core, we have both <a
href="https://github.com/itext/itext-publications-examples-java/blob/develop/src/main/java/com/itextpdf/samples/sandbox/zugferd/BasicSample.java">Java</a>
and <a
href="https://github.com/itext/itext-publications-samples-dotnet/blob/develop/itext/itext.samples/itext/samples/sandbox/zugferd/BasicSample.cs">.NET</a>
code samples available targeting the current ZUGFeRD/Factur-X
specification. They demonstrate how to embed the XML invoice data and
add the metadata required for conformance.</p>
<p>Bear in mind that our <code>master</code> branch contains samples for
the current stable release, while the default <code>develop</code>
branch is for the bleeding edge commits towards the next release.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/itext/itext-java/commit/db3cb38be10f7ca75103b1d07dd8beddef6fd84c"><code>db3cb38</code></a>
[RELEASE] iText 9.3.0</li>
<li><a
href="https://github.com/itext/itext-java/commit/033c3be0aeacb44e4e79abd3332a9792eec0f9d7"><code>033c3be</code></a>
[RELEASE] 9.3.0</li>
<li><a
href="https://github.com/itext/itext-java/commit/fcdc4ddfe91382222f1b927008e8bf61665a5d72"><code>fcdc4dd</code></a>
Finalize LOTL API</li>
<li><a
href="https://github.com/itext/itext-java/commit/187b42caad5228e9ec154694bb5526b73af62d18"><code>187b42c</code></a>
Update bouncycastle version</li>
<li><a
href="https://github.com/itext/itext-java/commit/748c60e5b5b97ca942514721daade8c724a8044b"><code>748c60e</code></a>
Add support for more colorspaces for inline images</li>
<li><a
href="https://github.com/itext/itext-java/commit/3db6279597a80d786ea469b2681d1484c0a8f7ca"><code>3db6279</code></a>
Adjust styled-xml-parser version in pom</li>
<li><a
href="https://github.com/itext/itext-java/commit/cf822e0927c124994812d3b1ab5a158ff2e2132f"><code>cf822e0</code></a>
Add javadocs and update TODO's + add a simple test</li>
<li><a
href="https://github.com/itext/itext-java/commit/860b23b50426439d2e0aa42e9a0340fb5da7217c"><code>860b23b</code></a>
Add caching to LOTL mechanism + finalize api</li>
<li><a
href="https://github.com/itext/itext-java/commit/bf03cda25e811bbf922bdc7424eddb5f3ec4482b"><code>bf03cda</code></a>
Disable parallel test execution for layout module</li>
<li><a
href="https://github.com/itext/itext-java/commit/b06cb5ef451dcf004dc761c4edde86b1e67bd20e"><code>b06cb5e</code></a>
Improve and fix TrueType font merging logic</li>
<li>Additional commits viewable in <a
href="https://github.com/itext/itext7/compare/9.2.0...9.3.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.itextpdf:layout` from 9.2.0 to 9.3.0


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

pom.xml

@@ -82,7 +82,7 @@
         <geotools.version>33.2</geotools.version>
         <jdbc-util.version>19.2.1</jdbc-util.version>
         <jts.version>1.20.0</jts.version>
-        <itextpdf.version>9.2.0</itextpdf.version>
+        <itextpdf.version>9.3.0</itextpdf.version>
         <postgresql.jdbc.version>42.7.7</postgresql.jdbc.version>
         <postgresql.postgis-jdbc.version>2025.1.1</postgresql.postgis-jdbc.version>
         <oracle.jdbc.version>23.9.0.25.07</oracle.jdbc.version>