Skip to content

Bump pdfjs-dist from 4.5.136 to 5.0.375#206

Closed
dependabot[bot] wants to merge 2 commits intomainfrom
dependabot/npm_and_yarn/pdfjs-dist-5.0.375
Closed

Bump pdfjs-dist from 4.5.136 to 5.0.375#206
dependabot[bot] wants to merge 2 commits intomainfrom
dependabot/npm_and_yarn/pdfjs-dist-5.0.375

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 18, 2025

Bumps pdfjs-dist from 4.5.136 to 5.0.375.

Release notes

Sourced from pdfjs-dist's releases.

v5.0.375

PDF.js 5.0 is a major release that contains a number of API changes, features and bugfixes.

The following significant new features are highlighted:

  • Improved JPEG 2000 decoding support
    • The OpenJPEG decoder was moved into a separate .wasm file, which requires setting a new wasmUrl API option in order to use it; see PR mozilla/pdf.js#19329.
    • A (much slower) JavaScript OpenJPEG fallback decoder was added (also uses the wasmUrl API option) for environments without WebAssembly support; see PR mozilla/pdf.js#19525.
  • Support for ICC profiles
    • This requires WebAssembly support, and that the wasmUrl API option is set; see PR mozilla/pdf.js#19564.
    • Use an ICC profile to improve CMYK to RGB color conversion, which requires setting a new iccUrl API option in order to use it; see PR mozilla/pdf.js#19620.
    • Currently Lab profiles are not supported, which is tracked in bug 1717767.
  • Improved rendering of large pages in the viewer
    • Render the currently visible portion of pages at full resolution, once we've reached the size limits and are falling back to CSS-zooming; see PR mozilla/pdf.js#19128.
    • Limit the maximum canvas dimensions, to avoid rendering breaking and canvases being empty; see PR mozilla/pdf.js#19604.
  • Enable creation of hyperlinks, in the viewer, from text that look like URLs
    • This is disabled by default because of some remaining issues, but can be enabled in the viewer with the enableAutoLinking option/preference; see PR mozilla/pdf.js#19110.

The following significant changes are highlighted (which may require changes in third-party PDF.js implementations):

The complete list of changes in this release is shown below. If you're upgrading to PDF.js 5.0 we recommend checking the changes prefixed with [api-minor] and [api-major] since those might require updates to your code.

Changes since v4.10.38

... (truncated)

Commits
  • 23972e1 Merge pull request #19661 from Snuffleupagus/thumbnails-inline-finishRenderTask
  • 6548c9f Inline the PDFThumbnailView.prototype.#finishRenderTask helper method
  • 7ee061b Add a helper function, in web/pdf_thumbnail_view.js, for "zeroing" a canvas
  • b7eef92 Shorten the PDFThumbnailView.prototype.#getReducedImageDims method (PR 1963...
  • 4b2683e Merge pull request #19656 from Snuffleupagus/shorten-MeshStreamReader
  • 9967ab4 Merge pull request #19657 from Snuffleupagus/GenericL10n-rm-regex
  • 9180e27 Replace the regular expression in GenericL10n.#getPaths with simple string ...
  • ec30f07 Slightly shorten a couple of MeshStreamReader methods
  • 2294a51 Merge pull request #19653 from calixteman/rm_strings_html
  • 88c3ed9 Remove all the translatable strings from the html
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 18, 2025
@netlify
Copy link
Copy Markdown

netlify bot commented Mar 18, 2025

Deploy Preview for graypaper-reader failed.

Name Link
🔨 Latest commit 920e1c6
🔍 Latest deploy log https://app.netlify.com/sites/graypaper-reader/deploys/67de71b22fba1900088d4ffd

Bumps [pdfjs-dist](https://github.com/mozilla/pdf.js) from 4.5.136 to 5.0.375.
- [Release notes](https://github.com/mozilla/pdf.js/releases)
- [Commits](mozilla/pdf.js@v4.5.136...v5.0.375)

---
updated-dependencies:
- dependency-name: pdfjs-dist
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pdfjs-dist-5.0.375 branch from baca1d8 to 51a34a8 Compare March 21, 2025 09:22
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 31, 2025

A newer version of pdfjs-dist exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

@tomusdrw
Copy link
Copy Markdown
Member

Closing in favor of a single combined dependency update PR.

@tomusdrw tomusdrw closed this Mar 25, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 25, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/pdfjs-dist-5.0.375 branch March 25, 2026 09:10
tomusdrw added a commit that referenced this pull request Mar 25, 2026
Update all project dependencies including major version bumps:
- @biomejs/biome 1.8.3 → 2.4.8 (with config migration)
- vite 6.3.6 → 8.0.2, @vitejs/plugin-react 5.0.1 → 6.0.1
- typescript 5.8.3 → 6.0.2, vitest 3.1.2 → 4.1.1
- pdfjs-dist 4.5.136 → 5.5.207 (API change: canvas param now required)
- jspdf 3.0.1 → 4.2.1 (removed @types/jspdf stub)
- lucide-react 0.554.0 → 1.6.0
- react 19.1.0 → 19.2.4, react-dom 19.2.0 → 19.2.4
- @commitlint/cli 19.8.1 → 20.5.0
- tailwindcss/postcss/vite 4.1.x → 4.2.2
- @types/node 22.x → 25.x across workspace packages
- All other dependencies bumped to latest

Also removes unused dependencies: @fluffylabs/migrate-selection,
@fluffylabs/synctex-store, @fluffylabs/types, @types/jspdf.

Closes #368, #364, #363, #318, #206, #204.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
tomusdrw added a commit that referenced this pull request Mar 25, 2026
* chore(deps): update all dependencies to latest versions

Update all project dependencies including major version bumps:
- @biomejs/biome 1.8.3 → 2.4.8 (with config migration)
- vite 6.3.6 → 8.0.2, @vitejs/plugin-react 5.0.1 → 6.0.1
- typescript 5.8.3 → 6.0.2, vitest 3.1.2 → 4.1.1
- pdfjs-dist 4.5.136 → 5.5.207 (API change: canvas param now required)
- jspdf 3.0.1 → 4.2.1 (removed @types/jspdf stub)
- lucide-react 0.554.0 → 1.6.0
- react 19.1.0 → 19.2.4, react-dom 19.2.0 → 19.2.4
- @commitlint/cli 19.8.1 → 20.5.0
- tailwindcss/postcss/vite 4.1.x → 4.2.2
- @types/node 22.x → 25.x across workspace packages
- All other dependencies bumped to latest

Also removes unused dependencies: @fluffylabs/migrate-selection,
@fluffylabs/synctex-store, @fluffylabs/types, @types/jspdf.

Closes #368, #364, #363, #318, #206, #204.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix(ci): update Playwright Docker image and add Node version constraint

- Bump Playwright Docker image from v1.55.1 to v1.58.2 to match
  @playwright/test dependency
- Add .node-version file (Node 22) for Netlify deploy compatibility
  with Vite 8 (requires Node 20.19+ or 22.12+)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* test: update visual regression snapshots for dependency updates

Regenerated all 30 Linux snapshots to match rendering changes
from updated dependencies (pdfjs-dist 5, lucide-react 1.x,
radix-ui, tailwindcss 4.2, Playwright 1.58).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* chore: add Node.js engine constraint for Vite 8 compatibility

Vite 8 requires Node.js 20.19+ or 22.12+. Declare this in
engines so npm warns on incompatible runtimes.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: rename .sidebar class to avoid pdfjs-dist v5 CSS clash

pdfjs-dist v5 ships a global .sidebar class with border, background,
box-shadow, border-radius, backdrop-filter, and fixed width — all of
which override our sidebar layout. Rename to .gp-sidebar to avoid
the conflict.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* test: regenerate visual snapshots after sidebar CSS fix

Clean Docker rebuild to ensure .gp-sidebar rename is reflected
in all snapshot baselines.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* test: regenerate snapshots on linux/amd64 to match CI

Previous snapshots were generated on aarch64 (ARM), causing font
rendering differences vs CI's amd64 runners. Rebuilt with
--platform linux/amd64 for pixel-perfect match.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* ci: auto-update visual snapshots on PRs before verification

On PRs, run --update-snapshots first to regenerate baselines on
native amd64, commit if changed, then run verification. This
avoids architecture-dependent rendering differences when
generating snapshots on ARM Macs with Docker emulation.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* test: auto-update visual regression snapshots

* fix(ci): mount tests dir in verification step for updated snapshots

The verification step was using snapshots baked into the Docker image
(from before the update), not the freshly updated ones on the host.
Mount the tests directory so verification uses the correct baselines.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant