chore(deps): bump the major group across 1 directory with 3 updates

[dependabot[bot]]

Bumps the major group with 3 updates in the / directory: react-pdf, uuid and @types/uuid.

Updates react-pdf from 7.7.1 to 9.0.0

Release notes

Sourced from react-pdf's releases.

v9.0.0

See Upgrade guide from version 8.x to 9.x.

This version updates PDF.js to 4.3.136, fixing GHSA-wgrm-67xf-hhpq for good. React-PDF v8.0.2 and v7.7.3 have already included a mitigation of the issue and thus were not affected by this vulnerability, but caused automatic security alerts due to the outdated PDF.js version.

❗️ = breaking change

What's new?

• Updated PDF.js to 4.3.136.
  • Optimizations for CPU and memory usage
  • Performance improvements
  • Image rendering improvements
  • Text selection improvements
  • Accessibility improvements
  • Font conversion improvements
  • Handling of corrupted documents
• Improved Turbopack compatibility.

What's changed?

• ❗️ PDF.js worker extension has been changed from .js to .mjs.
• ❗ PDF.js is now an ESM module.
  • In particular, you may encounter issues running unit tests using Jest. Consider migrating to Vitest.
  • Next.js also have issues with ESM Workers, but a working configuration is already known - see Upgrade guide and updated samples.
• ❗️ Removed deprecated svg renderMode.
• ❗️ Dropped support for older browsers and Node.js versions. In particular, you may need Promise.withResolvers polyfill when running Node.js versions older than 22.0.0.

v8.0.2

Bug fixes

• Force isEvalSupported to false. Fixes GHSA-87hq-q4gp-9wr4 (caused by GHSA-wgrm-67xf-hhpq).

v8.0.1

This version shipped an incorrect fix for a security vulnerability and thus has been deprecated.

Bug fixes

• Force isEvalSupported to true. Fixes GHSA-87hq-q4gp-9wr4 (caused by GHSA-wgrm-67xf-hhpq).

v8.0.0

See Upgrade guide from version 7.x to 8.x.

❗️ = breaking change

What's new?

• Added support for React 19.

... (truncated)

Commits

• 52fd082 v9.0.0
• 6881c82 Update docs on compatibility
• 5544c3b Remove forced isEvalSupported value
• b83b127 Update pdfjs-dist to 4.3.136
• fc0343c Remove workaround for wrong downloadManager type
• 2ba89d8 Add Promise.withResolvers polyfill
• 62a7368 [breaking] Update pdfjs-dist to 4.2.67
• c31e769 [breaking] Update pdfjs-dist to 4.0.379
• 3007e58 Replace global with globalThis
• 6bfef4b Use new syntax for notes
• Additional commits viewable in compare view

Updates uuid from 9.0.1 to 10.0.0

Changelog

Sourced from uuid's changelog.

10.0.0 (2024-06-07)

⚠ BREAKING CHANGES

• update node support (drop node@12, node@14, add node@20) (#750)

Features

• support support rfc9562 MAX uuid (new in RFC9562) (#714) (0385cd3)
• support rfc9562 v6 uuids (#754) (c4ed13e)
• support rfc9562 v7 uuids (#681) (db76a12)
• update node support matrix (only support node 16-20) (#750) (883b163)
• support rfc9562 v8 uuids (#759) (35a5342)

Bug Fixes

• revert "perf: remove superfluous call to toLowerCase (#677)" (#738) (e267b90)

Commits

• da189d1 chore: typo in CHANGELOG
• 65022f7 chore(release): 10.0.0
• 35a5342 feat: v8 support (#759)
• c4ed13e feat: support v6 uuids (#754)
• 8c3ed07 chore: enable corepack w/ npm (#757)
• f24c530 docs: updates for RFC9562 (#753)
• 59c2711 chore: update package dependencies (#752)
• 3fd0f18 build: use node:crypto not crypto when importing (#736)
• 1faad97 ci: disable husky for browserstack builds
• 2cc6c93 ci: cleanup action versions and caching (#707)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by broofa, a new releaser for uuid since your current version.

Updates @types/uuid from 9.0.8 to 10.0.0

Commits

• See full diff in compare view

Updates @types/uuid from 9.0.8 to 10.0.0

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

[Paulijuz]

@dependabot ignore react-pdf major version

[dependabot[bot]]

OK, I won't notify you about version 9.x.x of react-pdf again, unless you unignore it.

[dependabot[bot]]

Superseded by #276.