Skip to content

fix(security): bumping jspdf dep to 4.2.1#17065

Merged
damyanpetev merged 3 commits intomasterfrom
sec-update
Mar 19, 2026
Merged

fix(security): bumping jspdf dep to 4.2.1#17065
damyanpetev merged 3 commits intomasterfrom
sec-update

Conversation

@kdinev
Copy link
Member

@kdinev kdinev commented Mar 19, 2026

Closes #

Additional information (check all that apply):

  • Bug fix
  • New functionality
  • Documentation
  • Demos
  • CI/CD

Checklist:

  • All relevant tags have been applied to this PR
  • This PR includes unit tests covering all the new code (test guidelines)
  • This PR includes API docs for newly added methods/properties (api docs guidelines)
  • This PR includes feature/README.MD updates for the feature docs
  • This PR includes general feature table updates in the root README.MD
  • This PR includes CHANGELOG.MD updates for newly added functionality
  • This PR contains breaking changes
  • This PR includes ng update migrations for the breaking changes (migrations guidelines)
  • This PR includes behavioral changes and the feature specification has been updated with them

Copilot AI review requested due to automatic review settings March 19, 2026 16:56
@kdinev kdinev requested a review from damyanpetev March 19, 2026 16:59
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the jspdf dependency to a patched version to address a security concern, keeping both the workspace and published library package aligned.

Changes:

  • Bump jspdf from ^4.0.0 to ^4.2.1 in the root workspace package.json.
  • Bump jspdf from ^4.0.0 to ^4.2.1 in projects/igniteui-angular/package.json.
  • Document the security-related dependency bump in CHANGELOG.md under a new 21.1.3 entry.

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated no comments.

File Description
package.json Updates workspace dependency version for jspdf to ^4.2.1.
projects/igniteui-angular/package.json Updates the library package dependency version for jspdf to ^4.2.1.
CHANGELOG.md Adds a 21.1.3 “Security Fixes” note for the jspdf bump.

You can also share your feedback on Copilot code review. Take the survey.

@damyanpetev damyanpetev merged commit a4dc501 into master Mar 19, 2026
6 checks passed
@damyanpetev damyanpetev deleted the sec-update branch March 19, 2026 17:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants