Bump xmldom and jspdf in /frontend

Removes xmldom. It's no longer used after updating ancestor dependency jspdf. These dependencies need to be updated together.

Removes xmldom

Updates jspdf from 1.5.3 to 2.5.1

Release notes

Sourced from jspdf's releases.

v2.5.1

This release fixes two security related issues.

#3348: Check integrity when loading the pdfobject lib from CDN in calls to output('pdfobjectnewwindow')

#3368: Fix inefficient regular expression in setDisplayMode (CWE-1333)

v2.5.0

This release adds some minor new features and fixes some bugs, e.g. related to multiline text. Thanks to all contributors!

New Features

#3324 add getLineWidth function

#3294: add horizontalScale option to text function

Bugfixes

#3271: fix html function only rendering on the first invocation per document

#3304, #3295: fix context2D.closePath (now properly closes the path)

#3274: fix Acroform text fields with multiline text

#3281: fix textWithLink for multiline text

#3283: fix lineHeightFactor in text options having no effect

#3302: fixes to html typings

#3272: fix return type of save function in typings (promise overload)

v2.4.0

This release brings long awaited improvements to the html function and many other bugfixes and improvements. Thanks to all contributors!

#3203: Add width and windowWidth options to the html method, which will make correct scaling much easier.

#2977: Add/implement margin option for html method and add autoPaging option with two different modes: 'slice' and 'text'.

#3169: Add setLineDash and lineDashOffset to context2d.

#3039: Add rowStart and cellStart events and headerTextColor property to `table' function

#3132: Fix possibly negative line widths in context2d.

#3217: Fix setFont with fontWeight parameter for the built-in basic fonts

#3173: Fix violation of strict mode.

#3121: Improve addImage performance.

#3124: Allow to pass RGBA array to addImage.

#3135: Fix possibly imbalanced render target stack with form objects.

#3148: Add getDrawColor function to typings.

#3149: Fix font name escaping.

#3150: Throw an error when a zero size canvas is passed to addImage.

#3168: Fix word spacing after justified text.

#3215: Fix nullability of style arguments of geometry methods.

#3108: Complete the jsPDFOptions type in the typings.

#3119: Improve typings of the output function.

v2.3.1

Small bugfixes. Thanks to all contributors!

#3073: fix HTMLAnchorElement is not defined in file saver

#3078: fix exception in getTextDimensions() with maxWidth set

#3087: fix typings of table() function

#3091: fix ReDos vulnerability in addImage function

... (truncated)

Commits

7315ccb 2.5.1
a56c882 Fix Inefficient Regular Expression for setZoomMode (#3368)
a5f8fc9 Add integrity check for remote resource (#3348)
513a4da fix canvg_context2d examples (#3358)
a29c092 Create SECURITY.md (#3364)
edd59d8 2.5.0
bcd9900 update contributing guidelines (#3341)
e2d687c Implement getLineWidth function (#3324)
8094918 Fix closePath by using PDF command (#3304)
99927b0 UPDATE: textWithLink method to cover multi-line annotated text (#3281)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/digital-bauhaus/Ferienpass/network/alerts).

digital-bauhaus / Ferienpass

Bump xmldom and jspdf in /frontend #421

v2.5.1

v2.5.0

New Features

Bugfixes

v2.4.0

v2.3.1

Codecov Report