Skip to content

Bump jspdf from 2.1.1 to 4.2.1 in /ui - #203

Open
dependabot[bot] wants to merge 1 commit into
ns8from
dependabot/npm_and_yarn/ui/jspdf-3.0.1
Open

Bump jspdf from 2.1.1 to 4.2.1 in /ui#203
dependabot[bot] wants to merge 1 commit into
ns8from
dependabot/npm_and_yarn/ui/jspdf-3.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 19, 2025

Copy link
Copy Markdown
Contributor

Bumps jspdf from 2.1.1 to 4.2.1.

Release notes

Sourced from jspdf's releases.

v4.2.1

This release fixes two security issues.

What's Changed

Full Changelog: parallax/jsPDF@v4.2.0...v4.2.1

v4.2.0

This release fixes three security issues.

What's Changed

New Contributors

Full Changelog: parallax/jsPDF@v4.1.0...v4.2.0

v4.1.0

This release fixes several security issues.

What's Changed

Full Changelog: parallax/jsPDF@v4.0.0...v4.1.0

v4.0.0

This release fixes a critical path traversal/local file inclusion security vulnerability in the jsPDF Node.js build. File system access is now restricted by default and can be enabled by either using node's --permission flag or the new jsPDF.allowFsRead property.

There are no other breaking changes.

v3.0.4

This release includes a bunch of bugfixes. Thanks to all contributors!

What's Changed

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 19, 2025
Bumps [jspdf](https://github.com/parallax/jsPDF) from 2.1.1 to 4.2.1.
- [Release notes](https://github.com/parallax/jsPDF/releases)
- [Changelog](https://github.com/parallax/jsPDF/blob/master/RELEASE.md)
- [Commits](parallax/jsPDF@v2.1.1...v4.2.1)

---
updated-dependencies:
- dependency-name: jspdf
  dependency-version: 3.0.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot changed the base branch from master to ns8 May 18, 2026 15:53
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ui/jspdf-3.0.1 branch from 6d78b98 to ac52ef8 Compare May 18, 2026 15:53
@dependabot dependabot Bot changed the title Bump jspdf from 2.1.1 to 3.0.1 in /ui Bump jspdf from 2.1.1 to 4.2.1 in /ui May 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants