Skip to content

Conversation

@abailly-akamai
Copy link
Contributor

@abailly-akamai abailly-akamai commented Jan 7, 2026

⚠️ Merging this pull request will resolve a critical severity Dependabot alert on jspdf.

Opened my own PR in favor of #13241

This update resulted in some type pollution which were tricky to resolve (mostly in test files).

This should be tested properly!

Changes

Bumps jspdf from 3.0.2 to 4.0.0.

Release notes

Sourced from jspdf's releases.

v4.0.0

This release fixes a critical path traversal/local file inclusion security vulnerability in the jsPDF Node.js build. File system access is now restricted by default and can be enabled by either using node's --permission flag or the new jsPDF.allowFsRead property.

There are no other breaking changes.

v3.0.4

This release includes a bunch of bugfixes. Thanks to all contributors!

What's Changed

New Contributors

Full Changelog: parallax/jsPDF@v3.0.3...v3.1.0

v3.0.3

This release fixes regressions with PNG encoding that were introduced in v3.0.2.

What's Changed

New Contributors

Full Changelog: parallax/jsPDF@v3.0.2...v3.0.3

Commits
  • e6cf03d 4.0.0
  • a688c8f restrict file system access in node build (#3931)
  • a504e97 3.0.4
  • de802ab Fix Incorrect Typing for Margins in the TableConfig Interface Definition (#3816)
  • 87162d1 chore: bump checkout, setup-node, and stale actions (#3907)
  • e7dc622 Fix: Context2d font regex too restrictive ( #3904 ) (#3906)
  • e080935 Do not add pages dynamically unless autoPaging is enabled (#3915)
  • c768910 add package.json exports field (#3903)
  • c10d90c Fix API.internal.pages not being updated when restoring a RenderTarget ( #389...
  • 2db3d9d fix font list cache invalidation issue in context2d module (#3891)
  • Additional commits viewable in compare view

What to test

  • Navigate to billing
    • ✅ Confirm PDF generation in Billing History panel
  • Navigate to billing/invoices/
    • ✅ Confirm PDF generation

@abailly-akamai abailly-akamai marked this pull request as ready for review January 7, 2026 12:00
@abailly-akamai abailly-akamai requested a review from a team as a code owner January 7, 2026 12:00
@abailly-akamai abailly-akamai changed the title chore: bump jspdf to 4.0.0 chore: [UIE-9926] - Bump jspdf to 4.0.0 Jan 7, 2026
"@types/eslint-plugin-jsx-a11y": "^6.10.0",
"@types/he": "^1.1.0",
"@types/history": "4",
"@types/jspdf": "^1.3.3",
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great! I hate it when packages don't provide their own type-definitions!

reader.onloadend = () => resolve(reader.result as string);
reader.onerror = reject;
reader.readAsDataURL(response.data);
});
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

tests were failing - this method is valid for both node (tests) and the browser

Copy link
Member

@bnussman-akamai bnussman-akamai left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for taking care of this! PDF generation looks good from my testing. Left one comment about the window.location patch

"@types/eslint-plugin-jsx-a11y": "^6.10.0",
"@types/he": "^1.1.0",
"@types/history": "4",
"@types/jspdf": "^1.3.3",
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great! I hate it when packages don't provide their own type-definitions!

@linode-gh-bot
Copy link
Collaborator

Cloud Manager UI test results

🔺 1 failing test on test run #6 ↗︎

❌ Failing✅ Passing↪️ Skipped🕐 Duration
1 Failing859 Passing11 Skipped42m 34s

Details

Failing Tests
SpecTest
clone-linode.spec.tsCloud Manager Cypress Tests→clone linode » can clone a Linode from Linode details page

Troubleshooting

Use this command to re-run the failing tests:

pnpm cy:run -s "cypress/e2e/core/linodes/clone-linode.spec.ts"

@bnussman-akamai bnussman-akamai added the Dependencies Pull requests that update a dependency file label Jan 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies Pull requests that update a dependency file

Projects

Status: Review

Development

Successfully merging this pull request may close these issues.

3 participants