build(deps): bump the frontend-dependencies group with 18 updates

[dependabot]

Bumps the frontend-dependencies group with 18 updates:

Package	From	To
@tauri-apps/plugin-dialog	2.7.2	2.7.3
@tauri-apps/plugin-notification	2.3.3	2.4.0
@tauri-apps/plugin-updater	2.10.1	2.11.0
@vitejs/plugin-react	5.2.0	6.1.1
lucide-react	0.468.0	1.44.0
marked	14.1.4	18.0.12
mediabunny	1.55.3	1.56.1
pdfjs-dist	6.2.108	6.3.289
react	18.3.1	19.3.0
@types/react	18.3.31	19.3.0
react-dom	18.3.1	19.3.0
@types/react-dom	18.3.7	19.3.0
vite	6.4.3	8.3.0
@typescript-eslint/eslint-plugin	8.67.0	8.70.0
@typescript-eslint/parser	8.67.0	8.70.0
eslint	9.39.5	10.10.0
eslint-plugin-react-hooks	5.2.0	7.1.1
typescript	5.9.3	7.0.2

Updates @tauri-apps/plugin-dialog from 2.7.2 to 2.7.3

Release notes

Sourced from @​tauri-apps/plugin-dialog's releases.

dialog-js v2.7.3

[2.7.3]

• db9c5998 (#3531 by @​Legend-Master) Fix missing consumer-rules.pro on Gradle v9.
• cc9ec9b4 (#3519 by @​purvsinojiya-inventyv) Fix Android save dialog MIME type when a single MIME type is provided.
• f8053e65 (#3527 by @​Legend-Master) Documented Cargo feature flags in each plugin's crate-level documentation.

Dependencies

• Upgraded to fs@2.5.2

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-dialog@2.7.3
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.5kB README.md
npm notice 6.9kB dist-js/index.cjs
npm notice 14.6kB dist-js/index.d.ts
npm notice 6.8kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 657B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-dialog
npm notice version: 2.7.3
npm notice filename: tauri-apps-plugin-dialog-2.7.3.tgz
npm notice package size: 6.7 kB
npm notice unpacked size: 33.3 kB
npm notice shasum: 7e6d375fec8e39d2a90294604a9d77e66c39a072
npm notice integrity: sha512-CRgE+7TP4tvq9[...]oKbMwSI4IEcfA==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2662645358
+ @tauri-apps/plugin-dialog@2.7.3

dialog v2.7.3

[2.7.3]

... (truncated)

Commits

• 6aa2854 publish new versions (#3509)
• 9d6d032 chore(deps): update h2 to 0.4.19 (#3556)
• 98f8787 ci: fix typo in workflow permissions
• 1a7b12c ci: add explicit token permissions
• 2f4c85c chore(deps): bump serde_with (#3490)
• c546de0 chore(deps): update dependency rollup to v4.62.5 (#3520)
• db9c599 fix(android): missing consumer-rules.pro (#3531)
• 9c93437 chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)
• 685610a fix(fs): default permissions (#3507)
• f8053e6 docs: cargo features (#3527)
• Additional commits viewable in compare view

Updates @tauri-apps/plugin-notification from 2.3.3 to 2.4.0

Release notes

Sourced from @​tauri-apps/plugin-notification's releases.

notification-js v2.4.0

[2.4.0]

• db9c5998 (#3531 by @​Legend-Master) Fix missing consumer-rules.pro on Gradle v9.
• 304292d7 (#2805 by @​Innominus) - Add Rust builders for mobile notification action types.
  • Fix Android action-group entries being stored under the action type ID instead of sequential indices, causing later actions to overwrite earlier ones.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-notification@2.4.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 4.2kB README.md
npm notice 9.1kB dist-js/index.cjs
npm notice 12.6kB dist-js/index.d.ts
npm notice 8.6kB dist-js/index.js
npm notice 11B dist-js/init.d.ts
npm notice 663B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-notification
npm notice version: 2.4.0
npm notice filename: tauri-apps-plugin-notification-2.4.0.tgz
npm notice package size: 6.7 kB
npm notice unpacked size: 36.0 kB
npm notice shasum: f188d3a191cc801f20f4a598cfe39eb6fe49525a
npm notice integrity: sha512-xlJXMcUoKOjNu[...]MMQFjjecIG2xg==
npm notice total files: 7
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2662654315
+ @tauri-apps/plugin-notification@2.4.0

notification v2.4.0

[2.4.0]

• db9c5998 (#3531 by @​Legend-Master) Fix missing consumer-rules.pro on Gradle v9.
• 304292d7 (#2805 by @​Innominus) - Add Rust builders for mobile notification action types.
  • Fix Android action-group entries being stored under the action type ID instead of sequential indices, causing later actions to overwrite earlier ones.

... (truncated)

Commits

• adc23d6 publish new versions (#2808)
• fc573b3 chore(deps): update rust crate tokio-tungstenite to 0.27 (#2768)
• 901ddfb ci: enable create-pull-request sign commits (#2809)
• f209b2f chore(deps): update tauri monorepo to v2.6.0 (v2) (#2804)
• 19ed1bd chore(deps): update dependency prettier to v3.6.1 (#2806)
• 5779099 publish new versions (#2780)
• 2aec8ff feat(opener): add inAppBrowser option for iOS and Android (#2803)
• 9799f0d fix(log): iOS simulator freezing due to early logging (#2802)
• 8cdaacd chore(examples): update API example mobile projects
• d46778e chore(deps): update dependency typescript-eslint to v8.35.0 (#2794)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​tauri-apps/plugin-notification since your current version.

Updates @tauri-apps/plugin-updater from 2.10.1 to 2.11.0

Release notes

Sourced from @​tauri-apps/plugin-updater's releases.

updater-js v2.11.0

[2.11.0]

• f8053e65 (#3527 by @​Legend-Master) Documented Cargo feature flags in each plugin's crate-level documentation.
• 622f02bf (#3516 by @​Legend-Master) On Windows, returns an error if failed to spawn the installer in install through ShellExecuteW
• ab7489c9 (#3299 by @​Legend-Master) On Windows, add a new option restartAfterInstall/restart_after_install to install an update without the installer re-launching the app
• 2371be83 (#3526 by @​Legend-Master) Added system-proxy (enabled by default) feature flag to control reqwest/system-proxy feature (Use Windows and macOS system proxy settings automatically)

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-updater@2.11.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.2kB README.md
npm notice 3.2kB dist-js/index.cjs
npm notice 3.1kB dist-js/index.d.ts
npm notice 3.2kB dist-js/index.js
npm notice 659B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-updater
npm notice version: 2.11.0
npm notice filename: tauri-apps-plugin-updater-2.11.0.tgz
npm notice package size: 3.9 kB
npm notice unpacked size: 14.3 kB
npm notice shasum: e9c012d8afe85ea28adb764ec5965c7bff5657d3
npm notice integrity: sha512-AE36XkOoSna24[...]Hu28LgrsBwIxQ==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2662660526
+ @tauri-apps/plugin-updater@2.11.0

updater v2.11.0

[2.11.0]

• f8053e65 (#3527 by @​Legend-Master) Documented Cargo feature flags in each plugin's crate-level documentation.
• 622f02bf (#3516 by @​Legend-Master) On Windows, returns an error if failed to spawn the installer in install through ShellExecuteW
• ab7489c9 (#3299 by @​Legend-Master) On Windows, add a new option restartAfterInstall/restart_after_install to install an update without the installer re-launching the app

... (truncated)

Commits

• 6aa2854 publish new versions (#3509)
• 9d6d032 chore(deps): update h2 to 0.4.19 (#3556)
• 98f8787 ci: fix typo in workflow permissions
• 1a7b12c ci: add explicit token permissions
• 2f4c85c chore(deps): bump serde_with (#3490)
• c546de0 chore(deps): update dependency rollup to v4.62.5 (#3520)
• db9c599 fix(android): missing consumer-rules.pro (#3531)
• 9c93437 chore(deps): update dependency typescript-eslint to v8.66.0 (#3391)
• 685610a fix(fs): default permissions (#3507)
• f8053e6 docs: cargo features (#3527)
• Additional commits viewable in compare view

Updates @vitejs/plugin-react from 5.2.0 to 6.1.1

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.1.1

Add compiler.logDiagnostics option

Recoverable React Compiler diagnostics are no longer logged by default. Set compiler.logDiagnostics to true to log them through Vite. Fatal diagnostics are always logged and fail the transform.

Respect environment sourcemap option for React Compiler transform when builder.sharedPlugins is enabled (#1439)

The React Compiler transform was using the top-level sourcemap option instead of the environment sourcemap option. This caused a problem when the experimental builder.sharedPlugins was enabled.

plugin-react@6.1.0

Add experimental native React Compiler support (#1419)

Add experimental native React Compiler support.

You can use it by installing oxc-transform-react and enabling it via the compiler option:

npm install -D oxc-transform-react

import { defineConfig } from 'vite'
import react from '@vitejs/plugin-react'
export default defineConfig({
plugins: [
react({ compiler: true })
]
})

plugin-react@6.0.5

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

plugin-react@6.0.4

Fixed $RefreshSig$ is not defined error when running vite dev with NODE_ENV=production

When running vite dev with NODE_ENV=production, the app errored with $RefreshSig$ is not defined. This error is now fixed.

plugin-react@6.0.3

No release notes provided.

plugin-react@6.0.2

Allow all options in reactCompilerPreset (#1189)

This is a type only change. Only compilationMode and target options were available for reactCompilerPreset.

plugin-react@6.0.1

Expand @rolldown/plugin-babel peer dep range (#1146)

... (truncated)

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.1.1 (2026-08-28)

Add compiler.logDiagnostics option

Recoverable React Compiler diagnostics are no longer logged by default. Set compiler.logDiagnostics to true to log them through Vite. Fatal diagnostics are always logged and fail the transform.

Respect environment sourcemap option for React Compiler transform when builder.sharedPlugins is enabled (#1439)

The React Compiler transform was using the top-level sourcemap option instead of the environment sourcemap option. This caused a problem when the experimental builder.sharedPlugins was enabled.

6.1.0 (2026-08-19)

Add experimental native React Compiler support (#1419)

Add experimental native React Compiler support.

You can use it by installing oxc-transform-react and enabling it via the compiler option:

npm install -D oxc-transform-react

import { defineConfig } from 'vite'
import react from '@vitejs/plugin-react'
export default defineConfig({
plugins: [
react({ compiler: true })
]
})

6.0.5 (2026-07-30)

Fixed the react compiler preset filter to be linear (#1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#1349). The filter was changed to be linear to avoid that.

6.0.4 (2026-07-22)

Fixed $RefreshSig$ is not defined error when running vite dev with NODE_ENV=production

When running vite dev with NODE_ENV=production, the app errored with $RefreshSig$ is not defined. This error is now fixed.

6.0.3 (2026-06-23)

Improve the react compiler preset filter to reduce false-positives (#1138)

Improved the filter in the react compiler babel preset to reduce the false-positives so that less modules are processed by the react compiler.

... (truncated)

Commits

• 04cac50 release: plugin-react@6.1.1 (#1440)
• 82d35ab fix(react): respect environment sourcemap option when builder.sharedPlugins...
• 397e847 fix(react): make logging diagnostics an opt-in for React Compiler (#1431)
• 61006e6 fix(deps): update all non-major dependencies (#1433)
• e2a649c chore: use deps.neverBundle instead of external in tsdown config (#1430)
• fb2d6f3 fix(deps): update all non-major dependencies (#1427)
• 39b3173 release: plugin-react@6.1.0 (#1428)
• f1340b0 feat(react): add native React Compiler support (#1419)
• 9ab698e fix(deps): update all non-major dependencies (#1375)
• 68c0cb8 release: plugin-react@6.0.5 (#1362)
• Additional commits viewable in compare view

Updates lucide-react from 0.468.0 to 1.44.0

Release notes

Sourced from lucide-react's releases.

Version 1.44.0

What's Changed

• feat(packages/icons): fixed @​lucide/icons rollup config by @​karsa-mistmere in lucide-icons/lucide#4824
• fix(icons): changed door-open by @​karsa-mistmere in lucide-icons/lucide#4826
• fix(docs): replace missing LucideIcon icon names in guides by @​karsa-mistmere in lucide-icons/lucide#4827
• feat(docs): fixed fuse js search by @​karsa-mistmere in lucide-icons/lucide#4825
• fix(icons): changed satellite-dish icon by @​karsa-mistmere in lucide-icons/lucide#4813
• fix(icons): arcified flip icons & renamed them by @​karsa-mistmere in lucide-icons/lucide#4833
• fix(icons): improve legibility of credit card icons by @​karsa-mistmere in lucide-icons/lucide#4831
• feat(lab): add check-x icon by @​ishanbagra18 in lucide-icons/lucide#4737
• fix(icons): correct compromised tags in shield icons by @​decknamec in lucide-icons/lucide#4835
• feat(icons): added toothbrush icon by @​karsa-mistmere in lucide-icons/lucide#4755

New Contributors

• @​ishanbagra18 made their first contribution in lucide-icons/lucide#4737
• @​decknamec made their first contribution in lucide-icons/lucide#4835

Full Changelog: lucide-icons/lucide@1.43.0...1.44.0

Version 1.43.0

What's Changed

• feat(icons): added tic-tac-toe icon by @​karsa-mistmere in lucide-icons/lucide#4772
• fix(icons): changed id-card icon by @​karsa-mistmere in lucide-icons/lucide#4820
• fix(icons): changed id-card-lanyard icon by @​karsa-mistmere in lucide-icons/lucide#4819
• feat(icons): delegate carton/carton-off from lab by @​karsa-mistmere in lucide-icons/lucide#4818

Full Changelog: lucide-icons/lucide@1.42.0...1.43.0

Version 1.42.0

What's Changed

• feat(docs): added better contribution guide by @​karsa-mistmere in lucide-icons/lucide#4746
• fix(site): fix HomeHeroIconsCard.data.ts by @​karsa-mistmere in lucide-icons/lucide#4805
• fix(icons): deprecated swiss franc icons by @​karsa-mistmere in lucide-icons/lucide#4799
• feat(icons): add gap-horizontal and gap-vertical by @​samuelalake in lucide-icons/lucide#4544
• feat(icons): added trash-off icon by @​lx3133584 in lucide-icons/lucide#4788
• feat(icons): added circle-dashed-check icon by @​karsa-mistmere in lucide-icons/lucide#4796
• feat(icons): added equal-approximately-not icon by @​ryck in lucide-icons/lucide#4802
• feat(icons): added dome icons by @​swastik7805 in lucide-icons/lucide#4261
• chore(lucide-react): Add Lucide React integration tests by @​ericfennis in lucide-icons/lucide#4804
• feat(packages): extract icon build logic into @lucide/shared by @​karsa-mistmere in lucide-icons/lucide#4409
• fix(icons): changed computer icon by @​karsa-mistmere in lucide-icons/lucide#4607
• chore(dependencies): Update dependencies by @​ericfennis with @​Copilot in lucide-icons/lucide#4806
• fix(icons): changed table-2 icon by @​jguddas in lucide-icons/lucide#4810
• feat(icons): added user-group icons by @​karsa-mistmere in lucide-icons/lucide#4782

New Contributors

• @​lx3133584 made their first contribution in lucide-icons/lucide#4788
• @​ryck made their first contribution in lucide-icons/lucide#4802

... (truncated)

Commits

• 94e4cb9 chore(dependencies): Update dependencies (#4806)
• 99d25bd feat(packages): extract icon build logic into @lucide/shared (#4409)
• 75b5516 chore(dev): upgrade ESLint to latest compatible stack (v10) (#4378)
• 0f8d48b test(packages): updates unit test snapshots with face-slightly-smiling (#4676)
• f229f83 chore(depedencies): Update dependencies (#4553)
• 5ff536e ci(release.yml): Fix workflow and remove version scripts in package scripts...
• 07c885e fix(docs): fix zephyr-cloud URL in readmes
• 50d8af5 docs(readme): Update readme files (#4320)
• 653e44b feat(packages): use .mjs for ESM bundles (#4285)
• 7623e23 feat(docs): add Zephyr Cloud to Hero Backers tier & rework updateSponsors scr...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for lucide-react since your current version.

Updates marked from 14.1.4 to 18.0.12

Release notes

Sourced from marked's releases.

v18.0.12

18.0.12 (2026-09-07)

Bug Fixes

• allow a tab before the closing sequence of an ATX heading (#4084) (4417582)
• allow one more level of nested brackets in a link label (#4064) (37b28d8)
• do not add a newline to an empty code block (#4073) (23b1706)
• escape character references in autolink destinations (#4053) (8f432f0)
• reject GFM email autolink when the domain ends in _ or - (#4063) (df57534)
• reject invalid characters in HTML tag names (#4083) (300bb1d)
• remove up to the fence indentation from each content line (#4074) (0244f08)

v18.0.11

18.0.11 (2026-08-24)

Bug Fixes

• do not nest a link inside a link (#4051) (e250e31)
• inlineTokens rebuilds the reflink-mask preamble per call (#4040) (0653c24)
• keep emphasis in the text of a rejected reference link (#4059) (b699db3)

v18.0.10

18.0.10 (2026-08-18)

Bug Fixes

• keep the em/strong mask the same length as the source (#4044) (681373c)
• parse EOF backtick fences after paragraphs (#4039) (81bd750)
• place task checkboxes after list loose is finalized (#4046) (b8cf7dc), closes #4045

v18.0.9

18.0.9 (2026-08-04)

Bug Fixes

• an unmatched strong run before emphasis stays literal (#4008) (e8544e6)
• Fix spurious deeper nesting in a blockquote continuation (#4030) (452f1ed)
• pedantic foo: and "word" emphasis parsing (#3999) (823093f)

v18.0.8

18.0.8 (2026-08-04)

Bug Fixes

... (truncated)

Commits

• 24bf47c chore(release): 18.0.12 [skip ci]
• 475ba3d chore(deps-dev): bump eslint from 10.9.1 to 10.10.0 (#4088)
• 4417582 fix: allow a tab before the closing sequence of an ATX heading (#4084)
• 23b1706 fix: do not add a newline to an empty code block (#4073)
• df57534 fix: reject GFM email autolink when the domain ends in _ or - (#4063)
• 37b28d8 fix: allow one more level of nested brackets in a link label (#4064)
• 8f432f0 fix: escape character references in autolink destinations (#4053)
• 44ddc31 docs: add inspect.software health badge (#4062)
• 0244f08 fix: remove up to the fence indentation from each content line (#4074)
• 300bb1d fix: reject invalid characters in HTML tag names (#4083)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for marked since your current version.

Updates mediabunny from 1.55.3 to 1.56.1

Release notes

Sourced from mediabunny's releases.

v1.56.1

• Repeated metadata keys for Vorbis-style metadata (Ogg, FLAC) are now surfaced as string[] in raw (#490)
• Fixed FLAC muxer preferring raw.date over date for metadata
• Fixed AVC software decoder dropping B-frames (#488)

v1.56.0

The theme of this release is negative timestamps and better copy conversions, a long-requested feature! For more, check out Copying media data.

• Conversion API can now do copy conversions for arbitrary trim ranges, allowing you to trim media without transcoding it (#149)
• Added ConversionOptions.copy for controlling copy-specific behavior, such as the tolerated timestamp shift that's allowed to make copy conversions work
• Added support for muxing negative timestamps for ISOBMFF, Matroska, and MPEG-TS. In the case of ISOBMFF, this generates an edit list that trims off the negative section of the media.
• MPEG-TS demuxer now infers negative timestamps and handles one modulus wrap of timestamps
• Added OutputFormat.negativeTimestampSupport
• Added handleUnhandledError to most source options to enable better handling of otherwise unhandled errors that are thrown out of band (#489)
• Fixed Matroska getDurationFromMetadata() computation logic
• Fixed empty audio trim range crashing conversions (#486)
• Fixed Content-Length being used incorrectly when the server returns compressed content (#487)

v1.55.7

• Fixed sample iterators not terminating internally when throwing (#484)

v1.55.6

• Relaxed erroneous assert in esds box parsing (#481)

v1.55.5

• Fixed Infinity being rejected for some numeric fields despite the docs permitting it (#478)
• Made AudioSample.copyTo() reliable for non-f32-planar targets across all browser versions (#479)
• Fixed browser-internal memory leak in BlobSource

v1.55.4

• Added logic that extracts color space information directly from the video bitstream if no metadata is set in the container
• Fixed incomplete color space being passed to Chromium's VideoDecoder, resulting in incorrect colors
• Fixed AV1 and VP9 packet parsing logic
• Fixed vpcC box generation
• ISOBMFF and Matroska muxers now mux even partial color space information into the container
• Fixed missing audio decoding timestamp offset in rare cases
• Fixed Chromium choking on AVC SEI recovery points

Commits

• cee57d1 Bump patch
• f767b6f Fix AVC software decoder sometimes dropping B-frames (fixes #488)
• 4b140fe Change FLAC test
• b2b4087 Surface repeated keys are string[] for Vorbis-style metadata (fixes #490)
• 533c857 Bump minor
• 4f88d71 Add handleUnhandledError to most sources (closes #489)
• 6e6785e Add more conversion tests for trimming wholly outside of the available media ...
• 450c5de Fix incorrect use of Content-Length when the server compresses the content (f...
• b560977 Fix empty audio trim range crashing conversion (fixes #486)
• 8a25743 Negative timestamps (#485)
• Additional commits viewable in compare view

Updates pdfjs-dist from 6.2.108 to 6.3.289

Release notes

Sourced from pdfjs-dist's releases.

v6.3.289

This release contains improvements for accessibility, annotation editing, annotation rendering, font conversion, image decoding, performance, text selection and the viewer.

Changes since v6.2.108

• Bump the stable version in pdfjs.config by @​timvandermeij in mozilla/pdf.js#21655
• [Editor] Restore pinch-to-resize on an editor which came back from an undo by @​calixteman in mozilla/pdf.js#21644
• Use more more optional chaining in the src/ folder by @​Snuffleupagus in mozilla/pdf.js#21661
• Avoid duplicate shared object clones by @​calixteman in mozilla/pdf.js#21658
• Avoid mutating source widget parents by @​calixteman in mozilla/pdf.js#21660
• Fix the selection rendering when a page has been destroyed and rendered again (bug 2054348) by @​calixteman in mozilla/pdf.js#21666
• l10n: Update locale files by @​sync-l10n-for-pdf-js[bot] in mozilla/pdf.js#21669
• Sync the viewer chrome with the Firefox design system by @​calixteman in mozilla/pdf.js#21665
• [api-minor] Convert getJSActions to return data in a Map by @​Snuffleupagus in mozilla/pdf.js#21664
• Use the client coordinates for the pinch-zoom origin by @​calixteman in mozilla/pdf.js#21659
• Re-factor the EventBus to use Map/Set internally by @​Snuffleupagus in mozilla/pdf.js#21673
• Replace simple return if statements with ternary operators by @​Snuffleupagus in mozilla/pdf.js#21672
• Let pointerup/cancel propagate in TouchManager by @​calixteman in mozilla/pdf.js#21674
• Shorten the ViewHistory class a little bit by @​Snuffleupagus in mozilla/pdf.js#21678
• Don't throw on an invalid XML character reference by @​calixteman in mozilla/pdf.js#21682
• Fix the regex used to normalize css fonts in XFA by @​calixteman in mozilla/pdf.js#21680
• Trim the response headers with a backward scan by @​calixteman in mozilla/pdf.js#21684
• Find the PDF filename in a URL hash in two linear steps by @​calixteman in mozilla/pdf.js#21685
• Scan backwards to delete a word in a text field by @​calixteman in mozilla/pdf.js#21687
• Add scripts correctly in Field.prototype.setAction (PR 12569 follow-up) by @​Snuffleupagus in mozilla/pdf.js#21691
• Update dependencies to the most recent versions by @​timvandermeij in mozilla/pdf.js#21689
• Exclude "&" from the XML entity names by @​calixteman in mozilla/pdf.js#21692
• [api-minor] Convert getFieldObjects to return data in a Map by @​Snuffleupagus in mozilla/pdf.js#21671
• Anchor the regex used to extract the XFA path positions by @​calixteman in mozilla/pdf.js#21686
• Don't write numbers in exponential notation when saving a pdf by @​calixteman in mozilla/pdf.js#21683
• Bound the email parts in the autolinker regex by @​calixteman in mozilla/pdf.js#21693
• Safely serialize CSS font family names by @​calixteman in mozilla/pdf.js#21694
• Add a go to first/last menu-item helper method in the Menu class by @​Snuffleupagus in mozilla/pdf.js#21690
• Document how to use the viewer to open files by @​martinthomson in mozilla/pdf.js#21695
• Add integration tests for the Home/End keys in the Menu class by @​calixteman in mozilla/pdf.js#21706
• Bump undici from 7.28.0 to 7.29.0 by @​dependabot[bot] in <...

  Description has been truncated

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml