Bump pdfmake from 0.2.17 to 0.2.18 in /components

[dependabot]

Bumps pdfmake from 0.2.17 to 0.2.18.

Release notes

Sourced from pdfmake's releases.

0.2.18

• Update pdfkit
• Fixed a potential issue in the minimized library when detecting the orientation of JPEG images

Changelog

Sourced from pdfmake's changelog.

0.2.18 - 2025-01-01

• Update pdfkit
• Fixed a potential issue in the minimized library when detecting the orientation of JPEG images

Commits

• a7b349a 0.2.18
• e8dbc24 Update pdfkit
• d2dd211 year++
• 4c50979 update dependencies
• 98558fd fixed a potential issue in the minimized library when detecting the orientati...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dryrunsecurity]

DryRun Security Summary

The pull request updates the versions of @foliojs-fork/pdfkit and pdfmake dependencies to address potential bug fixes and improve application security by keeping dependencies current.

Expand for full summary

Summary:

The code changes in this pull request primarily involve updating the versions of the @foliojs-fork/pdfkit and pdfmake dependencies used in the application. These updates are likely to address bug fixes or improvements in the respective libraries, which are used for generating PDF documents.

From an application security perspective, keeping dependencies up-to-date is generally a good practice, as it helps to mitigate potential security risks and improve the overall security posture of the application. However, it's important to thoroughly test the changes to ensure that the updated dependencies do not introduce any regressions or unexpected behavior in the application.

Additionally, it's crucial to review the changelog or release notes of the updated dependencies to ensure that there are no known security vulnerabilities that have been addressed in the new versions. Maintaining an up-to-date inventory of dependencies, monitoring for security advisories, and conducting thorough testing are all important steps to take to ensure the ongoing security of the application.

Files Changed:

1. components/package.json: The version of the pdfmake dependency has been updated from ^0.2.17 to ^0.2.18. This is a minor version update, which typically includes bug fixes and minor feature improvements.
2. components/yarn.lock: The versions of the @foliojs-fork/pdfkit and pdfmake dependencies have been updated. The @foliojs-fork/pdfkit dependency has been updated from version 0.15.2 to 0.15.3, and the pdfmake dependency has been updated from version 0.2.17 to 0.2.18.

Code Analysis

We ran 9 analyzers against 2 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	1 finding

View PR in the DryRun Dashboard.

[dryrunsecurity]

DryRun Security Summary

The pull request updates the versions of @foliojs-fork/pdfkit and pdfmake dependencies to address potential bug fixes and improve application security by maintaining up-to-date libraries.

Expand for full summary

Summary:

The code changes in this pull request primarily involve updating the versions of the @foliojs-fork/pdfkit and pdfmake dependencies used in the application. These updates are likely to address bug fixes or improvements in the respective libraries, which are used for generating PDF documents.

From an application security perspective, keeping dependencies up-to-date is generally a good practice, as it helps to mitigate potential security risks and improve the overall security posture of the application. However, it's important to thoroughly test the changes to ensure that the updated dependencies do not introduce any regressions or unexpected behavior in the application.

Additionally, it's crucial to review the changelog or release notes of the updated dependencies to ensure that there are no known security vulnerabilities that have been addressed in the new versions. Maintaining an up-to-date inventory of dependencies, monitoring for security advisories, and conducting thorough testing are all important steps to take to ensure the ongoing security of the application.

Files Changed:

1. components/package.json: The version of the pdfmake dependency has been updated from ^0.2.17 to ^0.2.18. This is a minor version update, which typically includes bug fixes and minor feature improvements.
2. components/yarn.lock: The versions of the @foliojs-fork/pdfkit and pdfmake dependencies have been updated. The @foliojs-fork/pdfkit dependency has been updated from version 0.15.2 to 0.15.3, and the pdfmake dependency has been updated from version 0.2.17 to 0.2.18.

Code Analysis

We ran 9 analyzers against 2 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	1 finding

View PR in the DryRun Dashboard.

[mtesauro]

Approved