chore: bump the production-dependencies group across 1 directory with 3 updates by dependabot[bot] · Pull Request #122 · JamesWeatherhead/CaseAttend

dependabot · 2026-09-17T23:35:50Z

Bumps the production-dependencies group with 3 updates in the / directory: pdfjs-dist, react and react-dom.

Updates pdfjs-dist from 6.2.108 to 6.3.289

Release notes

v6.3.289

This release contains improvements for accessibility, annotation editing, annotation rendering, font conversion, image decoding, performance, text selection and the viewer.

Changes since v6.2.108

Bump the stable version in pdfjs.config by @timvandermeij in mozilla/pdf.js#21655

[Editor] Restore pinch-to-resize on an editor which came back from an undo by @calixteman in mozilla/pdf.js#21644

Use more more optional chaining in the src/ folder by @Snuffleupagus in mozilla/pdf.js#21661

Avoid duplicate shared object clones by @calixteman in mozilla/pdf.js#21658

Avoid mutating source widget parents by @calixteman in mozilla/pdf.js#21660

Fix the selection rendering when a page has been destroyed and rendered again (bug 2054348) by @calixteman in mozilla/pdf.js#21666

l10n: Update locale files by @sync-l10n-for-pdf-js[bot] in mozilla/pdf.js#21669

Sync the viewer chrome with the Firefox design system by @calixteman in mozilla/pdf.js#21665

[api-minor] Convert getJSActions to return data in a Map by @Snuffleupagus in mozilla/pdf.js#21664

Use the client coordinates for the pinch-zoom origin by @calixteman in mozilla/pdf.js#21659

Re-factor the EventBus to use Map/Set internally by @Snuffleupagus in mozilla/pdf.js#21673

Replace simple return if statements with ternary operators by @Snuffleupagus in mozilla/pdf.js#21672

Let pointerup/cancel propagate in TouchManager by @calixteman in mozilla/pdf.js#21674

Shorten the ViewHistory class a little bit by @Snuffleupagus in mozilla/pdf.js#21678

Don't throw on an invalid XML character reference by @calixteman in mozilla/pdf.js#21682

Fix the regex used to normalize css fonts in XFA by @calixteman in mozilla/pdf.js#21680

Trim the response headers with a backward scan by @calixteman in mozilla/pdf.js#21684

Find the PDF filename in a URL hash in two linear steps by @calixteman in mozilla/pdf.js#21685

Scan backwards to delete a word in a text field by @calixteman in mozilla/pdf.js#21687

Add scripts correctly in Field.prototype.setAction (PR 12569 follow-up) by @Snuffleupagus in mozilla/pdf.js#21691

Update dependencies to the most recent versions by @timvandermeij in mozilla/pdf.js#21689

Exclude "&" from the XML entity names by @calixteman in mozilla/pdf.js#21692

[api-minor] Convert getFieldObjects to return data in a Map by @Snuffleupagus in mozilla/pdf.js#21671

Anchor the regex used to extract the XFA path positions by @calixteman in mozilla/pdf.js#21686

Don't write numbers in exponential notation when saving a pdf by @calixteman in mozilla/pdf.js#21683

Bound the email parts in the autolinker regex by @calixteman in mozilla/pdf.js#21693

Safely serialize CSS font family names by @calixteman in mozilla/pdf.js#21694

Add a go to first/last menu-item helper method in the Menu class by @Snuffleupagus in mozilla/pdf.js#21690

Document how to use the viewer to open files by @martinthomson in mozilla/pdf.js#21695

Add integration tests for the Home/End keys in the Menu class by @calixteman in mozilla/pdf.js#21706

Bump undici from 7.28.0 to 7.29.0 by @dependabot[bot] in mozilla/pdf.js#21701

Bump github/codeql-action/analyze from 4.37.2 to 4.37.3 by @dependabot[bot] in mozilla/pdf.js#21705

Bump github/codeql-action/init from 4.37.2 to 4.37.3 by @dependabot[bot] in mozilla/pdf.js#21704

Bump github/codeql-action/autobuild from 4.37.2 to 4.37.3 by @dependabot[bot] in mozilla/pdf.js#21703

Shorten the Menu constructor a tiny bit by @Snuffleupagus in mozilla/pdf.js#21700

Enable the regexp/no-super-linear-move ESLint rule by @calixteman in mozilla/pdf.js#21708

Bump fast-uri from 3.1.4 to 3.1.5 by @dependabot[bot] in mozilla/pdf.js#21712

Remove the ambiguity from the PostScript number regex by @calixteman in mozilla/pdf.js#21709

Avoid an infinite loop on cyclic field Parent chains by @calixteman in mozilla/pdf.js#21699

Enable a few more eslint-plugin-regexp rules by @calixteman in mozilla/pdf.js#21710

Give copied annotations distinct references by @calixteman in mozilla/pdf.js#21707

Use the MathClamp helper in the src/core/annotation.js file by @Snuffleupagus in mozilla/pdf.js#21715

Update PDFViewerApplication._initializeAutoPrint to handle getJSActions returning a Map (PR 21664 follow-up) by @Snuffleupagus in mozilla/pdf.js#21716

Move SCALE_MATRIX into CanvasGraphics and initialize its DOMMatrix lazily (issue 21720) by @Snuffleupagus in mozilla/pdf.js#21721

Convert TranslatedFont.prototype.loadType3Data to an asynchronous method by @Snuffleupagus in mozilla/pdf.js#21719

Don't re-encode the file parameter in the viewer by @calixteman in mozilla/pdf.js#21718

... (truncated)

Commits

1c8020a Merge pull request #21841 from Snuffleupagus/src-core-misc-fixes
67c035f Inline the PDFDocument.prototype._parseHasJSActions method
c58a275 Move some WorkerTask class field definitions out of the constructor
d1725ab Merge pull request #21837 from Snuffleupagus/rm-ColorSpace-getoutputlength
159dca9 Remove the unused getOutputLength method from the ColorSpace classes (PR ...
8801a6a Merge pull request #21835 from Snuffleupagus/getViewerPreferences-tests
08a0600 Merge pull request #21834 from Snuffleupagus/markInfo-Map
2895922 Improve unit-test coverage for the getViewerPreferences functionality
16b94d1 [api-minor] Convert markInfo to return data in a Map
c3257df Merge pull request #21833 from mozilla/update-locales
Additional commits viewable in compare view

Updates react from 19.2.8 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

Fix hang when updating a dehydrated boundary inside a hidden tree (@gaearon #37135)

Don't reacquire Host Singletons during dev effect validation (@gnoff #37113)

Only remove properties from Host Singletons on release (@gnoff #37112)

... (truncated)

Commits

2dc7da7 [test] Bump Jest to 30.4 (#37382)
4f93894 docs: remove stale parentType param from validateChildKeys JSDoc (#36928)
dbc3750 Update required references to GitHub repo (#36752)
900ae09 [flow] Bump flow to v0.317.0 (#36701)
fbb1370 [flow] Bump flow to v0.307.1 (#36199)
56922cf [react-native-renderer] Delete Paper (legacy) renderer (#36285)
74568e8 [Flight] Transport AggregateErrors.errors (#36156)
e66ef64 [tests] remove withoutStack from assertConsole helpers (#35498)
db71391 [Fiber] Instrument the lazy initializer thenable in all cases (#35521)
3e1abcc [tests] Require exact error messages in assertConsole helpers (#35497)
Additional commits viewable in compare view

Updates react-dom from 19.2.8 to 19.3.0

Release notes

Sourced from react-dom's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo()... Description has been truncated

… 3 updates Bumps the production-dependencies group with 3 updates in the / directory: [pdfjs-dist](https://github.com/mozilla/pdf.js), [react](https://github.com/react/react/tree/HEAD/packages/react) and [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom). Updates `pdfjs-dist` from 6.2.108 to 6.3.289 - [Release notes](https://github.com/mozilla/pdf.js/releases) - [Commits](mozilla/pdf.js@v6.2.108...v6.3.289) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) --- updated-dependencies: - dependency-name: pdfjs-dist dependency-version: 6.3.289 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 17, 2026

dependabot Bot requested a review from JamesWeatherhead as a code owner September 17, 2026 23:35

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 17, 2026

github-actions Bot enabled auto-merge (squash) September 17, 2026 23:36

Navigation Menu

chore: bump the production-dependencies group across 1 directory with 3 updates - #122

chore: bump the production-dependencies group across 1 directory with 3 updates#122
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-9ad8b4f402

dependabot Bot commented on behalf of github Sep 17, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v6.3.289

Changes since v6.2.108

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 17, 2026 •

edited

Loading