Bump pdfjs-dist from 4.10.38 to 6.2.108

[dependabot]

Bumps pdfjs-dist from 4.10.38 to 6.2.108.

Release notes

Sourced from pdfjs-dist's releases.

v6.2.108

This release contains improvements for annotation rendering, annotation editing, font conversion, image conversion, performance, SMask handling and text selection.

Changes since v6.1.200

• Bump the stable version in pdfjs.config by @​timvandermeij in mozilla/pdf.js#21510
• Add a workflow to publish the per-test coverage index by @​calixteman in mozilla/pdf.js#21507
• Add support for Sound annotations playing embedded audio by @​calixteman in mozilla/pdf.js#21501
• Remove the BOM from html files (bug 2051221) by @​calixteman in mozilla/pdf.js#21513
• Digital Signature and Certificate verification by @​beurdouche in mozilla/pdf.js#21247
• Bump actions/setup-python from 6.2.0 to 6.3.0 by @​dependabot[bot] in mozilla/pdf.js#21516
• Bump actions/checkout from 6.0.3 to 7.0.0 by @​dependabot[bot] in mozilla/pdf.js#21518
• Bump actions/cache/save from 5.0.5 to 6.1.0 by @​dependabot[bot] in mozilla/pdf.js#21515
• Bump actions/cache/restore from 5.0.5 to 6.1.0 by @​dependabot[bot] in mozilla/pdf.js#21517
• Take into account the current transform when getting font size for FreeText by @​calixteman in mozilla/pdf.js#20505
• Fix the version comment in the font tests GitHub Actions workflow by @​timvandermeij in mozilla/pdf.js#21519
• Fix escapePDFName producing malformed name escapes for control characters by @​spokodev in mozilla/pdf.js#21522
• A couple of SignaturePropertiesManager improvements (PR 21247 follow-up) by @​Snuffleupagus in mozilla/pdf.js#21524
• Serialize GitHub Pages deployments to avoid concurrent deploy failures by @​calixteman in mozilla/pdf.js#21528
• Deduplicate the signature-properties warn/error toolbar icon by @​beurdouche in mozilla/pdf.js#21530
• l10n: Update locale files by @​sync-l10n-for-pdf-js[bot] in mozilla/pdf.js#21532
• [GeckoView] Add web-digital_signature_properties_manager import map (PR 21247 follow-up) by @​Snuffleupagus in mozilla/pdf.js#21529
• Reduce duplication when updating undoButton/undoCloseButton in PDFThumbnailViewer.prototype.#updateStatus by @​Snuffleupagus in mozilla/pdf.js#21531
• Add basic support for non-embedded TrebuchetMS fonts (issue 21523) by @​Snuffleupagus in mozilla/pdf.js#21527
• Avoid text selection workaround in modern Chromium by @​nicolo-ribaudo in mozilla/pdf.js#21514
• Use the #getPageL10nArgs helper in the PDFThumbnailView.prototype.addPasteButton method by @​Snuffleupagus in mozilla/pdf.js#21534
• Move the bannerStateForResults helper into the SignaturePropertiesManager class (PR 21247 follow-up) by @​Snuffleupagus in mozilla/pdf.js#21533
• Update to Babel 8 by @​nicolo-ribaudo in mozilla/pdf.js#21475
• Apply the appearance-stream scale factor when text is shown, not on setFont by @​calixteman in mozilla/pdf.js#21525
• Do not drop the character after U+FFFE or U+FFFF in encodeToXmlString by @​spokodev in mozilla/pdf.js#21526
• Enable the unicorn/logical-assignment-operators ESLint plugin rule by @​Snuffleupagus in mozilla/pdf.js#21511
• Remove unneeded this.#signatureData = null; lines in src/core/document.js by @​Snuffleupagus in mozilla/pdf.js#21536
• Use the MathClamp helper in the PDFImage.prototype.getComponents method by @​Snuffleupagus in mozilla/pdf.js#21537
• Update dependencies to the most recent versions by @​timvandermeij in mozilla/pdf.js#21539
• Add API unit-tests for getSignatures and getSignatureData (PR 21247 follow-up) by @​Snuffleupagus in mozilla/pdf.js#21541
• Do not drop the character after U+FFFE or U+FFFF in Font.prototype.encodeString by @​mahirhir in mozilla/pdf.js#21538
• Don't needlessly wrap the marked content id-attribute in a string by @​Snuffleupagus in mozilla/pdf.js#21545
• Lookup "lenIV" inline in the Type1Parser.prototype.extractFontProgram method by @​Snuffleupagus in mozilla/pdf.js#21544
• Use Intl.Segmenter for the entire-word search matching by @​calixteman in mozilla/pdf.js#21521
• Implement a unit test for passing unsupported data types to MurmurHash3_64.update() by @​timvandermeij in mozilla/pdf.js#21546
• Add a FakeSignatureVerifier for development mode and TESTING builds (PR 21247 follow-up) by @​Snuffleupagus in mozilla/pdf.js#21543
• Implement unit tests for the getRotationMatrix core utility function by @​timvandermeij in mozilla/pdf.js#21547
• Change Promise-returning worker message-handler functions to be asynchronous by @​Snuffleupagus in mozilla/pdf.js#21550
• l10n: Update locale files by @​sync-l10n-for-pdf-js[bot] in mozilla/pdf.js#21555
• Replace a couple of indexOf calls with startsWith by @​Snuffleupagus in mozilla/pdf.js#21554
• Bug 2048531 - Improve selection contrast in dark mode by @​nicolo-ribaudo in mozilla/pdf.js#21553
• Use for...of even more in the code-base by @​Snuffleupagus in mozilla/pdf.js#21560
• Update dependencies to the most recent versions by @​timvandermeij in mozilla/pdf.js#21561
• Use direct return await a bit more in the src/core/ folder by @​Snuffleupagus in mozilla/pdf.js#21563
• Improve the GitHub Actions workflow triggers and requirements by @​timvandermeij in mozilla/pdf.js#21562
• Commit the current editing session before saving (bug 2047516) by @​calixteman in mozilla/pdf.js#21568

... (truncated)

Commits

• 0365cbd Merge pull request #21654 from calixteman/fix/cycles
• f704f2e Merge pull request #21652 from Snuffleupagus/signatures-async-helpers
• 01ba4c4 Merge pull request #21646 from calixteman/update/pdf.js.qcms
• 0299cdc Merge pull request #21653 from Snuffleupagus/jsActions-_getElementsByName-sho...
• 8c3e101 Merge pull request #21650 from mozilla/dependabot/github_actions/github/codeq...
• 14afb86 Merge pull request #21649 from mozilla/dependabot/github_actions/github/codeq...
• 14fc73b Merge pull request #21648 from mozilla/dependabot/github_actions/github/codeq...
• 257f4c2 Merge pull request #21647 from mozilla/dependabot/github_actions/actions/setu...
• 93958e4 Merge pull request #21640 from Snuffleupagus/defaultOptions-Map
• bc6b5b0 Merge pull request #21651 from mozilla/dependabot/github_actions/actions/chec...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for pdfjs-dist since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[stoatworks-labs]

Closing unmerged — pdf.js 6 changes the rendering contract.

From v6, pdfjs-dist requires a canvas implementation to be supplied for rendering, which is a code change on our side rather than a version bump. This needs to be done as a deliberate migration, not an automated bump.

No ignore: rule is being added, because an ignore would also suppress any future security update for this package — and that's the PR worth having.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.