chore(backend)(deps): bump pdfkit from 0.14.0 to 0.17.2 in /backend

[dependabot]

Bumps pdfkit from 0.14.0 to 0.17.2.

Release notes

Sourced from pdfkit's releases.

0.17.2

• Fix rendering lists that spans across pages

0.17.1

• Fix null values in table cells rendering as [object Object]
• Fix further LineWrapper precision issues
• Optmize standard font handling. Less code, less memory usage

0.17.0

• Fix precision rounding issues in LineWrapper
• Fix fonts without a postscriptName
• Add support for dynamic sizing
• Add support for rotatable text
• Fix page cascade options when text overflows
• Add table generation
• Fix y position when using image() without x and y coordinates
• Improve Prettier configuration

0.16.0

• Update fontkit to 2.0
• Update linebreak to 1.1
• Add support for spot colors
• Add support to scale text horizontally
• Add an option to keep the indentation after a new line starts and allow to indent a whole paragraph/text element
• Add Name property for set custom icon for note()
• Fix sets tab order to "Structure" when a document is tagged
• Fix font cache collision for fonts with missing postscript name or bad TTF metadata or identical metadata for different fonts
• Fix for embedding fonts into PDF (font name must not contain spaces)
• Fix measuring text when OpenType features are passed in to .text()

0.15.2

• Fix index not counting when rendering ordered lists (#1517)
• Fix PDF/A3 compliance of attachments
• Fix CIDSet generation only for PDF/A1 subset
• Fix missing acroform font dictionary
• Fix modify time comparison check equality embedded files

0.15.1

• Fix browserify transform sRGB_IEC61966_2_1.icc file
• Fix time comparison check equality embedded files

0.15.0

• Add subset for PDF/UA
• Fix for line breaks in list items (#1486)
• Fix for soft hyphen not being replaced by visible hyphen if necessary (#457)
• Optimize output files by ignoring identity transforms
• Fix for Acroforms - setting an option to false will still apply the flag (#1495)
• Fix for text extraction in PDFium-based viewers due to invalid ToUnicodeMap (#1498)
• Remove deprecated write method
• Drop support for Node.js < 18 and for browsers released before 2020

Changelog

Sourced from pdfkit's changelog.

[v0.17.2] - 2025-08-30

• Fix rendering lists that spans across pages

[v0.17.1] - 2025-05-02

• Fix null values in table cells rendering as [object Object]
• Fix further LineWrapper precision issues
• Optmize standard font handling. Less code, less memory usage

[v0.17.0] - 2025-04-12

• Fix precision rounding issues in LineWrapper
• Fix fonts without a postscriptName
• Add support for dynamic sizing
• Add support for rotatable text
• Fix page cascade options when text overflows
• Add table generation
• Fix y position when using image() without x and y coordinates
• Improve Prettier configuration

[v0.16.0] - 2024-12-29

• Update fontkit to 2.0
• Update linebreak to 1.1
• Add support for spot colors
• Add support to scale text horizontally
• Add an option to keep the indentation after a new line starts and allow to indent a whole paragraph/text element
• Add Name property for set custom icon for note()
• Fix sets tab order to "Structure" when a document is tagged
• Fix font cache collision for fonts with missing postscript name or bad TTF metadata or identical metadata for different fonts
• Fix for embedding fonts into PDF (font name must not contain spaces)
• Fix measuring text when OpenType features are passed in to .text()

[v0.15.2] - 2024-12-15

• Fix index not counting when rendering ordered lists (#1517)
• Fix PDF/A3 compliance of attachments
• Fix CIDSet generation only for PDF/A1 subset
• Fix missing acroform font dictionary
• Fix modify time comparison check equality embedded files

[v0.15.1] - 2024-10-30

• Fix browserify transform sRGB_IEC61966_2_1.icc file
• Fix time comparison check equality embedded files

[v0.15.0] - 2024-03-23

• Add subset for PDF/UA

... (truncated)

Commits

• d837a13 v0.17.1
• 4b2030e Streamline AFMFont parsing. Do not keep contents in memory
• 715c2e3 Remove AFMFont.charWidths
• 194f2ef Remove AFMFont.open
• f4edf3d Do not assign match variable on condition check
• 54e6600 Fix precision rounding issues in LineWrapper (#1595)
• f3c1776 Fix table with null text (#1609)
• e016c22 update canvas
• 38fa457 Update .npmignore
• a05373f guide 0.17.0
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

Assignees

The following users could not be added as assignees: Tech-lead, tech-lead. Either they do not exist or they do not have the correct permissions to be added as an assignee.

Labels

The following labels could not be found: backend, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dpurandare]

Closing stale PR. Dependabot will recreate with latest versions against current main.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.