deps: bump pdfkit from 0.17.2 to 0.18.0 in /server

[dependabot]

Bumps pdfkit from 0.17.2 to 0.18.0.

Release notes

Sourced from pdfkit's releases.

0.18.0

• Fix garbled text copying in Chrome/Edge for PDFs with >256 unique characters (#1659)
• Fix Link accessibility issues
• Fix Table Accessibility Issue: Operator CS/cs not allowed in this current state
• Fix Interlaced PNG with indexed transparency rendered incorrectly
• Fix SVG path parser incorrectly handle arc flags without separators
• Add pageLayout option to control how pages are displayed in PDF viewers
• Preserve existing PageMode instead of overwriting when adding outlines
• Add userUnit option for custom page units (PDF 1.6)
• Support outlines that jump to specific page positions with custom zoom level
• Add robust handling of null byte padding in JPEG images
• Replace outdated jpeg-exif with minimal implementation
• Replace outdated crypto-js with maintained small alternatives
• Fix issue with indentation with indentAllLines: true when a new page is created

Changelog

Sourced from pdfkit's changelog.

[v0.18.0] - 2026-03-14

• Fix garbled text copying in Chrome/Edge for PDFs with >256 unique characters (#1659)
• Fix Link accessibility issues
• Fix Table Accessibility Issue: Operator CS/cs not allowed in this current state
• Fix Interlaced PNG with indexed transparency rendered incorrectly
• Fix SVG path parser incorrectly handle arc flags without separators
• Add pageLayout option to control how pages are displayed in PDF viewers
• Preserve existing PageMode instead of overwriting when adding outlines
• Add userUnit option for custom page units (PDF 1.6)
• Support outlines that jump to specific page positions with custom zoom level
• Add robust handling of null byte padding in JPEG images
• Replace outdated jpeg-exif with minimal implementation
• Replace outdated crypto-js with maintained small alternatives
• Fix issue with indentation with indentAllLines: true when a new page is created

Commits

• 6e3727f v0.18.0
• 1dda5ae added Node.js version 24 LTS
• 7216cc8 BUGFIX: (#1686)
• a2f240e refactor: replace crypto-js (#1681)
• 75b978c fix(jpeg) robust and minimal JPEG EXIF parser (#1680)
• 713ac8f fix(svg): parse arc flags without separators correctly (#1679)
• edcbd4b feat(page): add userUnit option for custom page units (PDF 1.6) (#1676)
• d2d3720 feat(document): Add pageLayout option to control how pages are displayed in P...
• 171042a feat(outline): add pageNumber option and XYZ destination support (#1674)
• b27f9f2 fix: handle interlaced PNG with indexed transparency (#1673)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.