build(deps-dev): bump the npm-deps group with 4 updates

[dependabot]

Bumps the npm-deps group with 4 updates: pdfjs-dist, prettier, stylelint and typescript-eslint.

Updates pdfjs-dist from 5.4.394 to 5.4.449

Release notes

Sourced from pdfjs-dist's releases.

v5.4.449

This release contains improvements for the annotation editor, performance, text selection and the viewer.

Changes since v5.4.394

• Bump the stable version in pdfjs.config by @​timvandermeij in mozilla/pdf.js#20414
• Create the number tree for the ParentTree only one time by @​calixteman in mozilla/pdf.js#20425
• Add the possibility to create a pdf from different ones (bug 1997379) by @​calixteman in mozilla/pdf.js#20409
• Update the page labels tree when a pdf is extracted (bug 1997379) by @​calixteman in mozilla/pdf.js#20411
• Update the named page destinations when some pdf are combined (bug 1997379) by @​calixteman in mozilla/pdf.js#20421
• Version entry in the catalog has to be a name and not a string by @​calixteman in mozilla/pdf.js#20432
• Add a wrapper for the new xref in order to be able to get some values from cloned dictionaries by @​calixteman in mozilla/pdf.js#20431
• Update dependencies and translations to the most recent versions by @​timvandermeij in mozilla/pdf.js#20429
• Introduce a helper function to create a freetext editor in the integration tests by @​timvandermeij in mozilla/pdf.js#20430
• Add telemetry for tagged pdfs (bug 1997134) by @​calixteman in mozilla/pdf.js#20405
• Merge the structure trees coming from different pdfs (bug 1997379) by @​calixteman in mozilla/pdf.js#20436
• Add regression test for PR 19184 by @​maettuu in mozilla/pdf.js#20151
• Bump glob by @​dependabot[bot] in mozilla/pdf.js#20448
• Bump js-yaml from 3.14.1 to 3.14.2 by @​dependabot[bot] in mozilla/pdf.js#20449
• Lint and format the HTML in using Prettier by @​calixteman in mozilla/pdf.js#20447
• Add setter for some FontFaceObject properties by @​Aditi-1400 in mozilla/pdf.js#20427
• fix: deleteAnnotationElement takes a full editor object by @​sachiniyer in mozilla/pdf.js#20413
• When searching for a group of punctuation signs, only add extraspaces around the group by @​calixteman in mozilla/pdf.js#20456
• [XFA] Set default max value in occur tag to -1 (bug 1998843) by @​calixteman in mozilla/pdf.js#20455
• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in mozilla/pdf.js#20459
• Include missing cached-iterable dev dependency in package.json by @​Mario34 in mozilla/pdf.js#20450
• Don't use firstChild/lastChild when getting elements (follow-up of #20447) by @​calixteman in mozilla/pdf.js#20458
• [Editor] Allow to save an edited comment in using CTRL+Enter shortcut. by @​calixteman in mozilla/pdf.js#20460
• Create a sidebar object by @​calixteman in mozilla/pdf.js#20467
• Fix the regex string used to find the chars to normalize with NFKC when searching by @​calixteman in mozilla/pdf.js#20465
• Use OIDC trusted publishing in the GitHub Actions release workflow by @​timvandermeij in mozilla/pdf.js#20468
• Slightly reduce the memory used by thumbnails by @​calixteman in mozilla/pdf.js#20462

Commits

• f44e5f0 Merge pull request #20462 from calixteman/improve_thumbnails
• 423379e Slightly reduce the memory used by thumbnails
• a965536 Merge pull request #20468 from timvandermeij/trusted-publishing
• 8eb7476 Use OIDC trusted publishing in the GitHub Actions release workflow
• ec5330f Merge pull request #20465 from calixteman/update_char_to_nfkc
• 925fc3d Merge pull request #20467 from calixteman/make_sidebar
• 45578aa Create a sidebar object
• eee20cf Fix the regex string used to find the chars to normalize with NFKC when searc...
• 907cceb Merge pull request #20460 from calixteman/issue20452
• 40b52fa Merge pull request #20458 from calixteman/fix_firstchild
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for pdfjs-dist since your current version.

Updates prettier from 3.7.1 to 3.7.3

Release notes

Sourced from prettier's releases.

3.7.3

What's Changed

• Fix prettier.getFileInfo() change that breaks VSCode extension by @​fisker in prettier/prettier#18375

🔗 Changelog

3.7.2

What's Changed

• Fix string print when switching quotes by @​fisker in prettier/prettier#18351
• Preserve quote for embedded HTML attribute values by @​kovsu in prettier/prettier#18352
• Fix comment in empty type literal by @​fisker in prettier/prettier#18364

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.7.3

diff

API: Fix prettier.getFileInfo() change that breaks VSCode extension (#18375 by @​fisker)

An internal refactor accidentally broke the VSCode extension plugin loading.

3.7.2

diff

JavaScript: Fix string print when switching quotes (#18351 by @​fisker)

// Input
console.log("A descriptor\\'s .kind must be \"method\" or \"field\".")
// Prettier 3.7.1
console.log('A descriptor\'s .kind must be "method" or "field".');
// Prettier 3.7.2
console.log('A descriptor\'s .kind must be "method" or "field".');

JavaScript: Preserve quote for embedded HTML attribute values (#18352 by @​kovsu)

// Input
const html = /* HTML */ ` <div class="${styles.banner}"></div> `;
// Prettier 3.7.1
const html = /* HTML */ &lt;div class=${styles.banner}&gt;&lt;/div&gt;;
// Prettier 3.7.2
const html = /* HTML */ &lt;div class=&quot;${styles.banner}&quot;&gt;&lt;/div&gt;;

TypeScript: Fix comment in empty type literal (#18364 by @​fisker)

// Input
export type XXX = {
  // tbd
};
// Prettier 3.7.1
</tr></table>

... (truncated)

Commits

• fdfa670 Release 3.7.3
• 2dce3ec Fix typo
• 27d6c64 Revert previous change to getFileInfo (#18375)
• f4a7afa Add types for config related functions (#18376)
• 9266e3e Add resolved test cases (#18358)
• 3bfc014 Bump Prettier dependency to 3.7.2
• 081b846 Clean changelog_unreleased
• 03384c9 Release 3.7.2
• 514e51a Release @​prettier/plugin-hermes & @​prettier/plugin-oxc v0.1.2
• 29a11ae Fix comment in empty type literal (#18364)
• Additional commits viewable in compare view

Updates stylelint from 16.26.0 to 16.26.1

Release notes

Sourced from stylelint's releases.

16.26.1

It fixes numerous false positive bugs, including many in the declaration-property-value-no-unknown rule for the latest CSS specifications.

• Fixed: *-no-unknown false positives for latest specs by integrating @csstools/css-syntax-patches-for-csstree (#8850) (@​romainmenke).
• Fixed: at-rule-no-unknown false positives for @function (#8851) (@​jeddy3).
• Fixed: declaration-property-value-no-unknown false positives for attr(), if() and custom functions (#8853) (@​jeddy3).
• Fixed: function-url-quotes false positives when URLs require quoting (#8804) (@​taearls).
• Fixed: selector-pseudo-element-no-unknown false positives for ::scroll-button() (#8856) (@​Mouvedia).

Changelog

Sourced from stylelint's changelog.

16.26.1 - 2025-11-28

It fixes numerous false positive bugs, including many in the declaration-property-value-no-unknown rule for the latest CSS specifications.

• Fixed: *-no-unknown false positives for latest specs by integrating @csstools/css-syntax-patches-for-csstree (#8850) (@​romainmenke).
• Fixed: at-rule-no-unknown false positives for @function (#8851) (@​jeddy3).
• Fixed: declaration-property-value-no-unknown false positives for attr(), if() and custom functions (#8853) (@​jeddy3).
• Fixed: function-url-quotes false positives when URLs require quoting (#8804) (@​taearls).
• Fixed: selector-pseudo-element-no-unknown false positives for ::scroll-button() (#8856) (@​Mouvedia).

Commits

• b968143 Release 16.26.1 (#8857)
• 2b24b9c Fix selector-pseudo-element-no-unknown false positives for `::scroll-button...
• f152564 Fix *-no-unknown false positives for latest specs by integrating `@csstools...
• 431cb53 Fix at-rule-no-unknown false positives for @function (#8851)
• 119097e Fix declaration-property-value-no-unknown false positives for attr() and ...
• 4b9c68b Fix function-url-quotes false positives when URLs require quoting (#8804)
• 8cc4ced Bump rollup from 4.52.5 to 4.53.2 (#8848)
• 4383feb Bump file-entry-cache from 11.1.0 to 11.1.1 (#8846)
• a8a7560 Bump the eslint group with 2 updates (#8845)
• 947ad33 Fix patch-package warning about mismatched @types/css-tree version (#8844)
• See full diff in compare view

Updates typescript-eslint from 8.47.0 to 8.48.0

Release notes

Sourced from typescript-eslint's releases.

v8.48.0

8.48.0 (2025-11-24)

🚀 Features

• eslint-plugin: [no-redundant-type-constituents] use assignability checking for redundancy checks (#10744)
• rule-tester: remove workaround for jest circular structure error (#11772)
• typescript-estree: gate all errors behind allowInvalidAST (#11693)
• typescript-estree: replace fast-glob with tinyglobby (#11740)

🩹 Fixes

• eslint-plugin: [consistent-generic-constructors] ignore when constructor is typed array (#10477)
• scope-manager: change unhelpful aaa error message and change analyze to expects Program (#11747)
• typescript-estree: infers singleRun as true for project service (#11327)
• typescript-estree: disallow binding patterns in parameter properties (#11760)

❤️ Thank You

• Ben McCann @​benmccann
• Dima Barabash @​dbarabashh
• fisker Cheung @​fisker
• James Henry @​JamesHenry
• JamesHenry @​JamesHenry
• Josh Goldberg
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• mdm317 @​gen-ip-1
• Younsang Na @​nayounsang

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.48.0 (2025-11-24)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

• 6fb1551 chore(release): publish 8.48.0
• a4dc42a chore: migrate to nx 22 (#11780)
• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
pdfjs-dist	[>= 4.0.a, < 4.1]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions