Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 12, 2026

Bumps pdfjs-dist to 5.4.296 and updates ancestor dependency react-pdf. These dependencies need to be updated together.

Updates pdfjs-dist from 3.11.174 to 5.4.296

Release notes

Sourced from pdfjs-dist's releases.

v5.4.296

This release contains improvements for annotations, the annotation editor, font conversion, text selection and the viewer.

Changes since v5.4.149

... (truncated)

Commits
  • f56dc86 Merge pull request #20333 from calixteman/issue20302
  • 19ff148 Fix incremental saving with hybrid references
  • 6c30368 Merge pull request #20301 from mozilla/dependabot/npm_and_yarn/tar-fs-3.1.1
  • d27cd6a Merge pull request #20334 from calixteman/issue20319
  • 4d15bfe Only apply word spacing when there is a 0x20 in the text chunk
  • 4e7db4f Merge pull request #20332 from calixteman/bug1992385
  • 3ecefa5 [Editor] Slightly move the resizer in the sidebar comment in order to make it...
  • e1de28c Merge pull request #20328 from calixteman/fix_dialog_position
  • af542a8 Merge pull request #20329 from calixteman/fix_annotation_layer_driver
  • 17993a0 Fix the creation of the annotation layer in the ref tests
  • Additional commits viewable in compare view

Updates react-pdf from 7.7.1 to 10.3.0

Release notes

Sourced from react-pdf's releases.

v10.3.0

What's new?

  • Added support for filterAnnotations prop in Page component (#1991).
  • Made the code more resilient to promise cancellations (#974).

What's changed?

  • Tests are no longer shipped to npm. This helped reducing publish size from 416 kB to 303 kB.
  • Updated Next.js samples.

Bug fixes

  • Fixed incorrectly calculated dimensions of rotated pages in Page onLoadSuccess handler (#2027). Thanks, @​wkirby!

v10.2.0

This is our first release that uses OIDC trusted publishing and immutable releases! 🎉

What's new?

  • Updated PDF.js to 5.4.296 (#2022).
  • Updated documentation to include warning about workerSrc module execution order (#2024).

Bug fixes

v10.1.0

What's new?

  • Added support for functions as children. React-PDF has never been simpler to work with! Say goodbye toonLoadSuccess, say goodbye to setting number of pages in your own state, say goodbye to extra renders! Now, rendering a simple document is as trivial as:
    <Document file="sample.pdf">
      {({ pdf }) => Array(pdf.numPages)
        .fill(null)
        .map((_, index) => <Page key={index} pageIndex={index} />
      ))}
    </Document>
    Thanks @​adamaoc for inspiration!
  • Updated PDF.js to 5.3.93.
  • Updated documentation on JPEG 2000 support.
  • Updated dependencies.
  • Exported LinkService type for convenience.

What's changed?

  • usePageContext will now provide non-null value sooner than before, before the page is actually loaded. This is uniform with how useDocumentContext behaves and with how types were designed from the start, so you should not be affected by this change.
  • React-PDF now targets es2018 and not es2017. PDF.js, our core dependency, already used modern JavaScript syntax, so you should not be affected by this change.

... (truncated)

Commits
  • dcc9091 v10.3.0
  • 486cc2e Remove unnecessary null check
  • 1402f43 Make the code more resilient to promise cancellations
  • b55b5e6 Update version in README (#2046)
  • e225811 Use full glob patterns in files, exclude unit tests from published tarball
  • 2ff0c3f Migrate from RTL to vitest-browser-react
  • 1ac739b Downgrade biome from 2.2.4 to 2.2.2
  • ce8655d Add support for filterAnnotations prop
  • ce2fda9 Minor formatting
  • 384e2ab Update Vitest to 4.0.0
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for react-pdf since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [pdfjs-dist](https://github.com/mozilla/pdf.js) to 5.4.296 and updates ancestor dependency [react-pdf](https://github.com/wojtekmaj/react-pdf/tree/HEAD/packages/react-pdf). These dependencies need to be updated together.


Updates `pdfjs-dist` from 3.11.174 to 5.4.296
- [Release notes](https://github.com/mozilla/pdf.js/releases)
- [Commits](mozilla/pdf.js@v3.11.174...v5.4.296)

Updates `react-pdf` from 7.7.1 to 10.3.0
- [Release notes](https://github.com/wojtekmaj/react-pdf/releases)
- [Commits](https://github.com/wojtekmaj/react-pdf/commits/v10.3.0/packages/react-pdf)

---
updated-dependencies:
- dependency-name: pdfjs-dist
  dependency-version: 5.4.296
  dependency-type: indirect
- dependency-name: react-pdf
  dependency-version: 10.3.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 12, 2026
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant