Skip to content

Bump pdfmake from 0.3.3 to 0.3.6 in /CSETWebNg#5450

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/CSETWebNg/pdfmake-0.3.6
Open

Bump pdfmake from 0.3.3 to 0.3.6 in /CSETWebNg#5450
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/CSETWebNg/pdfmake-0.3.6

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 11, 2026

Bumps pdfmake from 0.3.3 to 0.3.6.

Release notes

Sourced from pdfmake's releases.

0.3.6

  • Added setUrlAccessPolicy() for defining a custom access policy for external URLs before download (addresses a potential server vulnerability CVE-2026-26801)

    Example:

    pdfmake.setUrlAccessPolicy((url) => {
    	// check allowed domain
    	return url.startsWith("https://example.com/");
    });

    For details see documentation

  • Added validation for image height and width values

0.3.5

  • Added snakingColumns property for columns to enable newspaper-like column flow
  • Added outlines / bookmarks for text node
    • outline - set to true for add to bookmarks
    • outlineText (optional) - set custom bookmark text, otherwise text from node
    • outlineExpanded (optional) - set to true for expanded/opened bookmark
    • outlineParentId (optional) - parent bookmark id
  • Added property outlines for ToC, which adds all items to outlines / bookmarks (any existing outline settings on texts are respected)

0.3.4

  • Added vertical alignment for table cells via verticalAlignment property, values: top (default), middle, bottom
  • Fixed margin inheritance when styles are extended multiple times
Changelog

Sourced from pdfmake's changelog.

0.3.6 - 2026-03-10

  • Added setUrlAccessPolicy() for defining a custom access policy for external URLs before download (addresses a potential server vulnerability CVE-2026-26801)

    Example:

    pdfmake.setUrlAccessPolicy((url) => {
    	// check allowed domain
    	return url.startsWith("https://example.com/");
    });

    For details see documentation

  • Added validation for image height and width values

0.3.5 - 2026-02-22

  • Added snakingColumns property for columns to enable newspaper-like column flow
  • Added outlines / bookmarks for text node
    • outline - set to true for add to bookmarks
    • outlineText (optional) - set custom bookmark text, otherwise text from node
    • outlineExpanded (optional) - set to true for expanded/opened bookmark
    • outlineParentId (optional) - parent bookmark id
  • Added property outlines for ToC, which adds all items to outlines / bookmarks (any existing outline settings on texts are respected)

0.3.4 - 2026-02-13

  • Added vertical alignment for table cells via verticalAlignment property, values: top (default), middle, bottom
  • Fixed margin inheritance when styles are extended multiple times
Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for pdfmake since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [pdfmake](https://github.com/bpampuch/pdfmake) from 0.3.3 to 0.3.6.
- [Release notes](https://github.com/bpampuch/pdfmake/releases)
- [Changelog](https://github.com/bpampuch/pdfmake/blob/master/CHANGELOG.md)
- [Commits](bpampuch/pdfmake@0.3.3...0.3.6)

---
updated-dependencies:
- dependency-name: pdfmake
  dependency-version: 0.3.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants