Bump pdfmake from 0.2.10 to 0.2.11 in /components

[dependabot]

Bumps pdfmake from 0.2.10 to 0.2.11.

Release notes

Sourced from pdfmake's releases.

0.2.11

• Fixed and validates input values headerRows and keepWithHeaderRows
• Fixed numbering nested ordered lists
• Speed up StyleContextStack.autopush() for large tables
• Fixed widths of table columns with percentages
• Fixed storing the correct context in the ending cell of a row span when there were nested column groups (columns or tables)

Changelog

Sourced from pdfmake's changelog.

0.2.11 - 2024-08-09

• Fixed and validates input values headerRows and keepWithHeaderRows
• Fixed numbering nested ordered lists
• Speed up StyleContextStack.autopush() for large tables
• Fixed widths of table columns with percentages
• Fixed storing the correct context in the ending cell of a row span when there were nested column groups (columns or tables)

Commits

• d0d8133 0.2.11
• c40c0b2 refresh pdfs examples
• 107d298 Update CHANGELOG.md
• 07ec20b backport PR #2764
• 508d120 Update CHANGELOG.md
• 95240e0 backport PR #2762
• d8f0ff0 Update CHANGELOG.md
• c7caabb Merge pull request #2733 from estanglerbm/stylecontext_autopush_faster_override
• 225f6d8 CI - exclude nodejs 12 and 14 on macos (unsupported versions)
• 5abe603 CI - exclude nodejs 12 and 14 on macos (unsupported versions)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dryrunsecurity]

DryRun Security Summary

The provided code changes update the pdfmake dependency in the components/package.json and components/yarn.lock files from version ^0.2.10 to ^0.2.11, a minor version update that typically indicates bug fixes or minor improvements to the library.

Expand for full summary

Summary:

The provided code changes are updates to the pdfmake dependency in the components/package.json and components/yarn.lock files. The version of pdfmake is being updated from ^0.2.10 to ^0.2.11. This is a minor version update, which typically indicates bug fixes or minor improvements to the library.

From an application security perspective, these changes are relatively low-risk. However, it's always a good practice to review the release notes or change logs for the new version of the dependency to ensure that there are no known security issues that have been addressed. Additionally, it's recommended to thoroughly test the application after the dependency update to ensure that the new version of the library does not introduce any unexpected behavior or regressions.

Files Changed:

1. components/package.json: This file has been updated to use the ^0.2.11 version of the pdfmake dependency, which is a minor version update from the previous ^0.2.10 version.

2. components/yarn.lock: This file has been updated to reflect the new 0.2.11 version of the pdfmake dependency.

Overall, these code changes appear to be routine dependency updates and do not raise any immediate security concerns. As long as the updates are properly tested, they should be safe to merge.

Code Analysis

We ran 9 analyzers against 2 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	1 finding

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[mtesauro]

Approved