BC-12006 - Bump pdfmake from 0.2.23 to 0.3.11

[dependabot]

Bumps pdfmake from 0.2.23 to 0.3.11.

Release notes

Sourced from pdfmake's releases.

0.3.11

• Updated pdfkit to 0.19.1 (fixed RGB JPEG embedded as DeviceGray, bug introduced in 0.19.0)

0.3.10

• Updated pdfkit to 0.19.0

0.3.9

• Fixed table rowSpan cell height in last column

0.3.8

• Added server-side method setLocalAccessPolicy() for defining a custom access policy for local file

  Example:

  pdfmake.setLocalAccessPolicy((path) => {
  	// check allowed local file path
  	return path.startsWith("fonts/");
  });

• Improved URL Access Policy (setUrlAccessPolicy method); URLs are now validated even before each redirection in Node.js and after final redirection in browser (browsers do not support validation before redirection)

• Fixed extra blank page when using headerRows, dontBreakRows and cell pageBreak together

• Fixed rendering of an invalid color name - previously it used the last valid color; now it defaults to black

• Fixed dontBreakRows rowSpan ending offset across pages

0.3.7

• Updated pdfkit to 0.18.0

0.3.6

• Added setUrlAccessPolicy() for defining a custom access policy for external URLs before download (addresses a potential server vulnerability CVE-2026-26801)

  Example:

  pdfmake.setUrlAccessPolicy((url) => {
  	// check allowed domain
  	return url.startsWith("https://example.com/");
  });

  For details see documentation

• Added validation for image height and width values

0.3.5

• Added snakingColumns property for columns to enable newspaper-like column flow
• Added outlines / bookmarks for text node
  • outline - set to true for add to bookmarks
  • outlineText (optional) - set custom bookmark text, otherwise text from node
  • outlineExpanded (optional) - set to true for expanded/opened bookmark
  • outlineParentId (optional) - parent bookmark id
• Added property outlines for ToC, which adds all items to outlines / bookmarks (any existing outline settings on texts are respected)

... (truncated)

Changelog

Sourced from pdfmake's changelog.

0.3.11 - 2026-06-12

• Updated pdfkit to 0.19.1 (fixed RGB JPEG embedded as DeviceGray, bug introduced in 0.19.0)

0.3.10 - 2026-06-07

• Updated pdfkit to 0.19.0

0.3.9 - 2026-05-23

• Fixed table rowSpan cell height in last column

0.3.8 - 2026-05-06

• Added server-side method setLocalAccessPolicy() for defining a custom access policy for local file

  Example:

  pdfmake.setLocalAccessPolicy((path) => {
  	// check allowed local file path
  	return path.startsWith("fonts/");
  });

• Improved URL Access Policy (setUrlAccessPolicy method); URLs are now validated even before each redirection in Node.js and after final redirection in browser (browsers do not support validation before redirection)

• Fixed extra blank page when using headerRows, dontBreakRows and cell pageBreak together

• Fixed rendering of an invalid color name - previously it used the last valid color; now it defaults to black

• Fixed dontBreakRows rowSpan ending offset across pages

0.3.7 - 2026-03-17

• Updated pdfkit to 0.18.0

0.3.6 - 2026-03-10

• Added setUrlAccessPolicy() for defining a custom access policy for external URLs before download (addresses a potential server vulnerability CVE-2026-26801)

  Example:

  pdfmake.setUrlAccessPolicy((url) => {
  	// check allowed domain
  	return url.startsWith("https://example.com/");
  });

  For details see documentation

• Added validation for image height and width values

0.3.5 - 2026-02-22

• Added snakingColumns property for columns to enable newspaper-like column flow

... (truncated)

Commits

• c880a93 0.3.11
• 94d5fca refresh pdf examples
• b0afca5 updated pdfkit to 0.19.1
• 36a9138 0.3.10
• 6cf5ca1 refresh pdf examples
• c17ce74 updated pdfkit to 0.19.0
• 8c9b99f update dependencies
• bef60b5 0.3.9
• ef306b7 added setUrlAccessPolicy and setLocalAccessPolicy in tests
• dd593d0 refresh pdf examples
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for pdfmake since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)