github-starred/cs249r_book
2
0
Fork 0
mirror of https://github.com/harvard-edge/cs249r_book.git synced 2026-05-07 18:18:42 -05:00
Code Issues 85 Packages Projects Releases 24 Wiki Activity

[PR #1535] [MERGED] build(deps): bump jspdf and jspdf-autotable in /socratiq #8244

New Issue
Closed
opened 2026-04-27 17:35:56 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-04-27 17:35:56 -05:00
Owner
Copy Link

📋 Pull Request Information

Original PR: https://github.com/harvard-edge/cs249r_book/pull/1535
Author: @dependabot[bot]
Created: 4/25/2026
Status: ✅ Merged
Merged: 4/25/2026
Merged by: @profvjreddi

Base: dev ← Head: dependabot/npm_and_yarn/socratiq/multi-1a3f9df82b

📝 Commits (1)

  • 007fd45 build(deps): bump jspdf and jspdf-autotable in /socratiq

📊 Changes

2 files changed (+58 additions, -70 deletions)

View changed files

📝 socratiq/package-lock.json (+56 -68)
📝 socratiq/package.json (+2 -2)

📄 Description

Bumps jspdf and jspdf-autotable. These dependencies needed to be updated together.
Updates jspdf from 2.5.2 to 4.2.1

Release notes

Sourced from jspdf's releases.

v4.2.1

This release fixes two security issues.

What's Changed

Full Changelog: https://github.com/parallax/jsPDF/compare/v4.2.0...v4.2.1

v4.2.0

This release fixes three security issues.

What's Changed

New Contributors

Full Changelog: https://github.com/parallax/jsPDF/compare/v4.1.0...v4.2.0

v4.1.0

This release fixes several security issues.

What's Changed

Full Changelog: https://github.com/parallax/jsPDF/compare/v4.0.0...v4.1.0

v4.0.0

This release fixes a critical path traversal/local file inclusion security vulnerability in the jsPDF Node.js build. File system access is now restricted by default and can be enabled by either using node's --permission flag or the new jsPDF.allowFsRead property.

There are no other breaking changes.

v3.0.4

This release includes a bunch of bugfixes. Thanks to all contributors!

What's Changed

... (truncated)

Commits

Updates jspdf-autotable from 3.8.4 to 5.0.7

Release notes

Sourced from jspdf-autotable's releases.

v5.0.7

Fixed npm publishing (v5.0.5 was never published)

v5.0.5

Updated to allow jsPDF 4.0 as peer dependency.

v5.0

Summary of changes in 5.0.0-5.0.2

  • Breaking: The plugin is no longer auto applied to jsPDF in none browser environments (see more below)
  • The esm build file is now chosen automatically based on your packages environment (no need to use the jspdf-autotable/es path anymore)
  • HookData is now exported simonbengtsson/jsPDF-AutoTable#1075

Plugin no longer applied automatically

In this release the plugin is no longer auto applied to jsPDF in none browser environments. This is a breaking change for users that for example uses this plugin in node js and call autoTable method on the jsPDF doc instance (doc.autoTable({...}).

It is now recommended to import the autoTable method and pass it the jsPDF doc instance.

import { jsPDF } from 'jspdf'
import { autoTable } from 'jspdf-autotable'

const doc = new jsPDF()

autoTable(doc, { ... })

If you want to keep calling the plugin method on the jsPDF doc instance you can also apply the plugin to it yourself using applyPlugin:

import { jsPDF } from 'jspdf'
import { applyPlugin } from 'jspdf-autotable'

// This is now required in non browser environments to use the old

// way of calling autoTable on the jspdf doc instance.

applyPlugin(jsPDF)


const doc = new jsPDF()

doc.autoTable({ ... })

v4.0.0

Mostly minor changes but bumping major version due to old deprecation removals and upgrade to jsPDF 3.0 (that removes support for internet explorer).

  • Jspdf 3.0 (removes support for internet explorer)
  • You can now import autoTable with a named import import { autoTable } from ‘jspdf-autotable’) . The previously exported autoTable type is now exported as autoTableInstanceType instead.
  • Removed long time deprecations
    • Removed support for all old options and styles that was soft removed and deprecated in v3.0
    • Removed old ways to get information of the last autoTable drawn: doc.previousAutoTable , doc.autoTable.previous and doc.autoTableEndPosY. Now you should use doc.lastAutoTable.
    • Removed Table#pageCount field. You should now use Table#pageNumber.
    • Removed old column/body way of calling autoTable doc.autoTable(columns, body, options). You should now use autoTable(doc, options) or doc.autoTable(options).
    • Removed doc.autoTableAddPageContent. You should now use jsPDF.autoTableSetDefaults({didDrawPage: () => {}})
    • Removed doc.autoTableAddPage(). You should now use doc.addPage().
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for jspdf-autotable since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/harvard-edge/cs249r_book/pull/1535 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 4/25/2026 **Status:** ✅ Merged **Merged:** 4/25/2026 **Merged by:** [@profvjreddi](https://github.com/profvjreddi) **Base:** `dev` ← **Head:** `dependabot/npm_and_yarn/socratiq/multi-1a3f9df82b` --- ### 📝 Commits (1) - [`007fd45`](https://github.com/harvard-edge/cs249r_book/commit/007fd454096d6884368dd662dee6e666b3c29828) build(deps): bump jspdf and jspdf-autotable in /socratiq ### 📊 Changes **2 files changed** (+58 additions, -70 deletions) <details> <summary>View changed files</summary> 📝 `socratiq/package-lock.json` (+56 -68) 📝 `socratiq/package.json` (+2 -2) </details> ### 📄 Description Bumps [jspdf](https://github.com/parallax/jsPDF) and [jspdf-autotable](https://github.com/simonbengtsson/jsPDF-AutoTable). These dependencies needed to be updated together. Updates `jspdf` from 2.5.2 to 4.2.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/parallax/jsPDF/releases">jspdf's releases</a>.</em></p> <blockquote> <h2>v4.2.1</h2> <p>This release fixes two security issues.</p> <h2>What's Changed</h2> <ul> <li>Fix <a href="https://github.com/parallax/jsPDF/security/advisories/GHSA-wfv2-pwc8-crg5">HTML Injection in output methods</a> vulnerability.</li> <li>Fix <a href="https://github.com/parallax/jsPDF/security/advisories/GHSA-7x6v-j9x4-qf24">PDF Object Injection via free text annotation color</a> vulnerability.</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/parallax/jsPDF/compare/v4.2.0...v4.2.1">https://github.com/parallax/jsPDF/compare/v4.2.0...v4.2.1</a></p> <h2>v4.2.0</h2> <p>This release fixes three security issues.</p> <h2>What's Changed</h2> <ul> <li>Fix <a href="https://github.com/parallax/jsPDF/security/advisories/GHSA-p5xg-68wr-hm3m">PDF Injection in AcroForm module allows Arbitrary JavaScript Execution (RadioButton children)</a> vulnerability.</li> <li>Fix <a href="https://github.com/parallax/jsPDF/security/advisories/GHSA-67pg-wm7f-q7fj">Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions</a> vulnerability.</li> <li>Fix <a href="https://github.com/parallax/jsPDF/security/advisories/GHSA-9vjf-qc39-jprp">PDF Object Injection via Unsanitized Input in addJS Method</a> vulnerability.</li> <li>Add &quot;default&quot; property to export section in package.json by <a href="https://github.com/stefan-schweiger"><code>@​stefan-schweiger</code></a> in <a href="https://redirect.github.com/parallax/jsPDF/pull/3953">parallax/jsPDF#3953</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/stefan-schweiger"><code>@​stefan-schweiger</code></a> made their first contribution in <a href="https://redirect.github.com/parallax/jsPDF/pull/3953">parallax/jsPDF#3953</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/parallax/jsPDF/compare/v4.1.0...v4.2.0">https://github.com/parallax/jsPDF/compare/v4.1.0...v4.2.0</a></p> <h2>v4.1.0</h2> <p>This release fixes several security issues.</p> <h2>What's Changed</h2> <ul> <li>Upgrade optional dompurify dependency to 3.3.1 in <a href="https://redirect.github.com/parallax/jsPDF/pull/3948">parallax/jsPDF#3948</a></li> <li>Fix <a href="https://github.com/parallax/jsPDF/security/advisories/GHSA-pqxr-3g65-p328">PDF Injection in AcroForm module allows Arbitrary JavaScript Execution</a> vulnerability</li> <li>Fix <a href="https://github.com/parallax/jsPDF/security/advisories/GHSA-vm32-vv63-w422">Stored XMP Metadata Injection (Spoofing &amp; Integrity Violation)</a> vulnerability</li> <li>Fix <a href="https://github.com/parallax/jsPDF/security/advisories/GHSA-cjw8-79x6-5cj4">Shared State Race Condition in addJS Method</a> vulnerability</li> <li>Fix <a href="https://github.com/parallax/jsPDF/security/advisories/GHSA-95fx-jjr5-f39c">Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoder</a> vulnerability</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/parallax/jsPDF/compare/v4.0.0...v4.1.0">https://github.com/parallax/jsPDF/compare/v4.0.0...v4.1.0</a></p> <h2>v4.0.0</h2> <p>This release fixes a critical path traversal/local file inclusion <a href="https://github.com/parallax/jsPDF/security/advisories/GHSA-f8cm-6447-x5h2">security vulnerability</a> in the jsPDF Node.js build. File system access is now restricted by default and can be enabled by either using node's <a href="https://nodejs.org/api/permissions.html"><code>--permission</code></a> flag or the new <a href="https://raw.githack.com/MrRio/jsPDF/master/docs/module-fileloading.html#~allowFsRead"><code>jsPDF.allowFsRead</code></a> property.</p> <p>There are no other breaking changes.</p> <h2>v3.0.4</h2> <p>This release includes a bunch of bugfixes. Thanks to all contributors!</p> <h2>What's Changed</h2> <ul> <li>[Snyk] Upgrade <code>@​babel/runtime</code> from 7.28.3 to 7.28.4 by <a href="https://github.com/MrRio"><code>@​MrRio</code></a> in <a href="https://redirect.github.com/parallax/jsPDF/pull/3895">parallax/jsPDF#3895</a></li> <li>fix: cell function now properly accepts align parameter by <a href="https://github.com/vishal-rathod-07"><code>@​vishal-rathod-07</code></a> in <a href="https://redirect.github.com/parallax/jsPDF/pull/3896">parallax/jsPDF#3896</a></li> <li>Remove duplicated function &quot;ga&quot; from WebPDecoder.js by <a href="https://github.com/jvdp"><code>@​jvdp</code></a> in <a href="https://redirect.github.com/parallax/jsPDF/pull/3902">parallax/jsPDF#3902</a></li> <li>Fix font state management issue <a href="https://redirect.github.com/parallax/jsPDF/issues/3890">#3890</a> by <a href="https://github.com/srikanth-s2003"><code>@​srikanth-s2003</code></a> in <a href="https://redirect.github.com/parallax/jsPDF/pull/3891">parallax/jsPDF#3891</a></li> <li>Fix pages property to always return current array reference ( <a href="https://redirect.github.com/parallax/jsPDF/issues/3898">#3898</a> ) by <a href="https://github.com/Opineppes"><code>@​Opineppes</code></a> in <a href="https://redirect.github.com/parallax/jsPDF/pull/3899">parallax/jsPDF#3899</a></li> <li>Fix jsPDF + Vite compatibility issue <a href="https://redirect.github.com/parallax/jsPDF/issues/3851">#3851</a> by <a href="https://github.com/tishajain25"><code>@​tishajain25</code></a> in <a href="https://redirect.github.com/parallax/jsPDF/pull/3903">parallax/jsPDF#3903</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/parallax/jsPDF/commit/4562ce8aa35bd5ecd98cd5e262e3da2af96476f6"><code>4562ce8</code></a> 4.2.1</li> <li><a href="https://github.com/parallax/jsPDF/commit/4155c4819d5eca284168e51e0e1e81126b4f14b8"><code>4155c48</code></a> Merge commit from fork</li> <li><a href="https://github.com/parallax/jsPDF/commit/87a40bbd07e6b30575196370670b41f264aa78d7"><code>87a40bb</code></a> Merge commit from fork</li> <li><a href="https://github.com/parallax/jsPDF/commit/b1607a9391d4cd65ea7ade25998aea8345ae1be3"><code>b1607a9</code></a> Bump minimatch from 3.1.2 to 3.1.5 (<a href="https://redirect.github.com/parallax/jsPDF/issues/3961">#3961</a>)</li> <li><a href="https://github.com/parallax/jsPDF/commit/42ac89097de83bcedd10870af47a0a25c11ca3d1"><code>42ac890</code></a> Bump rollup from 2.79.2 to 2.80.0 (<a href="https://redirect.github.com/parallax/jsPDF/issues/3960">#3960</a>)</li> <li><a href="https://github.com/parallax/jsPDF/commit/7af912cadaf0f9a2ad28afe7af53033a2c61de64"><code>7af912c</code></a> 4.2.0</li> <li><a href="https://github.com/parallax/jsPDF/commit/56b46d45b052346f5995b005a34af5dcdddd5437"><code>56b46d4</code></a> Merge commit from fork</li> <li><a href="https://github.com/parallax/jsPDF/commit/2e5e156e284d92c7d134bce97e6418756941d5e6"><code>2e5e156</code></a> Merge commit from fork</li> <li><a href="https://github.com/parallax/jsPDF/commit/71ad2dbfa6c7c189ab42b855b782620fa8a38375"><code>71ad2db</code></a> Merge commit from fork</li> <li><a href="https://github.com/parallax/jsPDF/commit/885a7778070d500887c9a5d2b02b55460009a9d0"><code>885a777</code></a> fix: upgrade <code>@​babel/runtime</code> from 7.28.4 to 7.28.6 (<a href="https://redirect.github.com/parallax/jsPDF/issues/3954">#3954</a>)</li> <li>Additional commits viewable in <a href="https://github.com/parallax/jsPDF/compare/v2.5.2...v4.2.1">compare view</a></li> </ul> </details> <br /> Updates `jspdf-autotable` from 3.8.4 to 5.0.7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/simonbengtsson/jsPDF-AutoTable/releases">jspdf-autotable's releases</a>.</em></p> <blockquote> <h2>v5.0.7</h2> <p>Fixed npm publishing (v5.0.5 was never published)</p> <h2>v5.0.5</h2> <p>Updated to allow jsPDF 4.0 as peer dependency.</p> <h2>v5.0</h2> <p>Summary of changes in 5.0.0-5.0.2</p> <ul> <li>Breaking: The plugin is no longer auto applied to jsPDF in none browser environments (see more below)</li> <li>The esm build file is now chosen automatically based on your packages environment (no need to use the <code>jspdf-autotable/es</code> path anymore)</li> <li>HookData is now exported <a href="https://redirect.github.com/simonbengtsson/jsPDF-AutoTable/issues/1075">simonbengtsson/jsPDF-AutoTable#1075</a></li> </ul> <h3>Plugin no longer applied automatically</h3> <p>In this release the plugin is no longer auto applied to jsPDF in none browser environments. This is a breaking change for users that for example uses this plugin in node js and call autoTable method on the jsPDF doc instance (doc.autoTable({...}).</p> <p>It is now recommended to import the autoTable method and pass it the jsPDF doc instance.</p> <pre lang="js"><code>import { jsPDF } from 'jspdf' import { autoTable } from 'jspdf-autotable' <p>const doc = new jsPDF()<br /> autoTable(doc, { ... })<br /> </code></pre></p> <p>If you want to keep calling the plugin method on the jsPDF doc instance you can also apply the plugin to it yourself using applyPlugin:</p> <pre lang="js"><code>import { jsPDF } from 'jspdf' import { applyPlugin } from 'jspdf-autotable' <p>// This is now required in non browser environments to use the old<br /> // way of calling autoTable on the jspdf doc instance.<br /> applyPlugin(jsPDF)</p> <p>const doc = new jsPDF()<br /> doc.autoTable({ ... })<br /> </code></pre></p> <h2>v4.0.0</h2> <p>Mostly minor changes but bumping major version due to old deprecation removals and upgrade to jsPDF 3.0 (that removes support for internet explorer).</p> <ul> <li>Jspdf 3.0 (removes support for internet explorer)</li> <li>You can now import autoTable with a named import <code>import { autoTable } from ‘jspdf-autotable’)</code> . The previously exported autoTable type is now exported as <code>autoTableInstanceType</code> instead.</li> <li>Removed long time deprecations <ul> <li>Removed support for all old options and styles that was soft removed and deprecated in v3.0</li> <li>Removed old ways to get information of the last autoTable drawn: <code>doc.previousAutoTable</code> , <code>doc.autoTable.previous</code> and <code>doc.autoTableEndPosY</code>. Now you should use <code>doc.lastAutoTable</code>.</li> <li>Removed <code>Table#pageCount</code> field. You should now use <code>Table#pageNumber</code>.</li> <li>Removed old column/body way of calling autoTable <code>doc.autoTable(columns, body, options)</code>. You should now use <code>autoTable(doc, options)</code> or <code>doc.autoTable(options)</code>.</li> <li>Removed <code>doc.autoTableAddPageContent</code>. You should now use <code>jsPDF.autoTableSetDefaults({didDrawPage: () =&gt; {}})</code></li> <li>Removed <code>doc.autoTableAddPage()</code>. You should now use <code>doc.addPage()</code>.</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/simonbengtsson/jsPDF-AutoTable/commit/360a0ed0b30dbd3bcf7598b097b3e1d0c197b221"><code>360a0ed</code></a> 5.0.7</li> <li><a href="https://github.com/simonbengtsson/jsPDF-AutoTable/commit/a826a7aa8c73f489b336aeb15dd4b7a354cf8314"><code>a826a7a</code></a> Update permissions</li> <li><a href="https://github.com/simonbengtsson/jsPDF-AutoTable/commit/b4f5bfddc3ba646cb82a163083a3b04321e23324"><code>b4f5bfd</code></a> Add permissions</li> <li><a href="https://github.com/simonbengtsson/jsPDF-AutoTable/commit/5438c54122744b6ddeea3e7eb17f9d84667e7812"><code>5438c54</code></a> 5.0.6</li> <li><a href="https://github.com/simonbengtsson/jsPDF-AutoTable/commit/2add1694b70bad8e7d681a7b155fa9b845269897"><code>2add169</code></a> Upgrade libs</li> <li><a href="https://github.com/simonbengtsson/jsPDF-AutoTable/commit/dc7c9854b0777b30e1d4baf6d54a74caefd197e1"><code>dc7c985</code></a> 5.0.5</li> <li><a href="https://github.com/simonbengtsson/jsPDF-AutoTable/commit/6e1e41997d86dea6d16025d398f8a873025fb74b"><code>6e1e419</code></a> Remove token from workflow</li> <li><a href="https://github.com/simonbengtsson/jsPDF-AutoTable/commit/3e859811f58748964e489d27a13ae81257257b74"><code>3e85981</code></a> 5.0.4</li> <li><a href="https://github.com/simonbengtsson/jsPDF-AutoTable/commit/c8ae7d8e6f831fef482ab5b979f9966d2e8a1b7a"><code>c8ae7d8</code></a> Fix tests</li> <li><a href="https://github.com/simonbengtsson/jsPDF-AutoTable/commit/cb74b82816700929fb6f31cfc8ad3e2901deb85e"><code>cb74b82</code></a> Upgrade workflows</li> <li>Additional commits viewable in <a href="https://github.com/simonbengtsson/jsPDF-AutoTable/compare/v3.8.4...v5.0.7">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for jspdf-autotable since your current version.</p> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/harvard-edge/cs249r_book/network/alerts). </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-27 17:35:56 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
area: book
area: collabs
area: kits
area: socratiq
area: tinytorch
area: tools
area: website
bug
dependencies
format: epub
format: pdf
link-health
link-rot
priority-high
pull-request
Mirrored from GitHub Pull Request
 staffml
type: bug
type: citation
type: code
type: errata
type: improvement
type: new
type: question
vault-sli
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/cs249r_book#8244
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?