update jspdf

warm-coolguy · warm-coolguy · commit da7323596a55 · 2026-01-06T12:53:25.000+01:00
diff --git a/package-lock.json b/package-lock.json
diff --git a/packages/plugins/Export/CHANGELOG.md b/packages/plugins/Export/CHANGELOG.md
@@ -1,5 +1,9 @@
 # CHANGELOG
 
+## unpublished
+
+- Chore: The dependency `jspdf` was updated from `^2.5.2` to `^4.0.0` due to a [security issue](https://github.com/parallax/jsPDF/security/advisories/GHSA-f8cm-6447-x5h2). The security issue did not affect POLAR builds, and no further action is required.
+
 ## 1.2.2
 
 - Chore: Update `@polar/lib-custom-types` to `v2.0.0`.
diff --git a/packages/plugins/Export/package.json b/packages/plugins/Export/package.json
@@ -27,7 +27,7 @@
     "CHANGELOG.md"
   ],
   "dependencies": {
-    "jspdf": "^2.5.2"
+    "jspdf": "^4.0.0"
   },
   "peerDependencies": {
     "@repositoryname/vuex-generators": "^1.1.2",
