search

LSCOIT / LegalNavigator

Phase 3 Access2Justice continued
Creative Commons Attribution 4.0 International
9 stars 3 forks source link

Bump xmldom and jspdf in /Web/Access2Justice.Web/ClientApp #1158

Open dependabot[bot] opened 2 years ago

dependabot[bot] commented 2 years ago

Removes xmldom. It's no longer used after updating ancestor dependency jspdf. These dependencies need to be updated together.

Removes xmldom

Updates jspdf from 1.4.1 to 2.5.1

Release notes

Sourced from jspdf's releases.

v2.5.1

This release fixes two security related issues.

  • #3348: Check integrity when loading the pdfobject lib from CDN in calls to output('pdfobjectnewwindow')
  • #3368: Fix inefficient regular expression in setDisplayMode (CWE-1333)

v2.5.0

This release adds some minor new features and fixes some bugs, e.g. related to multiline text. Thanks to all contributors!

New Features

  • #3324 add getLineWidth function
  • #3294: add horizontalScale option to text function

Bugfixes

  • #3271: fix html function only rendering on the first invocation per document
  • #3304, #3295: fix context2D.closePath (now properly closes the path)
  • #3274: fix Acroform text fields with multiline text
  • #3281: fix textWithLink for multiline text
  • #3283: fix lineHeightFactor in text options having no effect
  • #3302: fixes to html typings
  • #3272: fix return type of save function in typings (promise overload)

v2.4.0

This release brings long awaited improvements to the html function and many other bugfixes and improvements. Thanks to all contributors!

  • #3203: Add width and windowWidth options to the html method, which will make correct scaling much easier.
  • #2977: Add/implement margin option for html method and add autoPaging option with two different modes: 'slice' and 'text'.
  • #3169: Add setLineDash and lineDashOffset to context2d.
  • #3039: Add rowStart and cellStart events and headerTextColor property to `table' function
  • #3132: Fix possibly negative line widths in context2d.
  • #3217: Fix setFont with fontWeight parameter for the built-in basic fonts
  • #3173: Fix violation of strict mode.
  • #3121: Improve addImage performance.
  • #3124: Allow to pass RGBA array to addImage.
  • #3135: Fix possibly imbalanced render target stack with form objects.
  • #3148: Add getDrawColor function to typings.
  • #3149: Fix font name escaping.
  • #3150: Throw an error when a zero size canvas is passed to addImage.
  • #3168: Fix word spacing after justified text.
  • #3215: Fix nullability of style arguments of geometry methods.
  • #3108: Complete the jsPDFOptions type in the typings.
  • #3119: Improve typings of the output function.

v2.3.1

Small bugfixes. Thanks to all contributors!

  • #3073: fix HTMLAnchorElement is not defined in file saver
  • #3078: fix exception in getTextDimensions() with maxWidth set
  • #3087: fix typings of table() function
  • #3091: fix ReDos vulnerability in addImage function

... (truncated)

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/LSCOIT/LegalNavigator/network/alerts).