Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump phenx/php-svg-lib from 0.3.3 to 0.5.1 in /plugins/dompdf #2

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Dec 13, 2023

Bumps phenx/php-svg-lib from 0.3.3 to 0.5.1.

Release notes

Sourced from phenx/php-svg-lib's releases.

Kickin' Koala

Security release to address the following reported vulnerabilities:

Jesting Jackal

  • Adds full support for non-user space length values (percent, unit values)
  • Improves processing of use elements
  • Improves path rendering and syntax support
  • Adds support for colors with alpha
  • Adds support for non-namespaced "href" attribute
  • Improves font parsing

See the 0.5.0 milestone for issues and PRs

Gracious thanks to the contributors who helped make this release possible.

Ignaminous Iguanga

  • Re-target base PHP support to 7.1
  • Skips rendering of indeterminate (return-to-origin) arc segments

Howling Hyena

  • Improves compatibility with PHP 8.1
    • Update Cpdf to latest version
    • Updates php-css-parser dependency to 8.4

Garrulous Gazelle

  • Drop PHP support older than 7.4
  • Fix PHP warning when open_basedir restriction in effect
  • Correct namespace for CPdf class
  • Fixed a memory leak
  • Address potential offset error on null value
  • Don't include tests in composer package
  • Improve parsing of arc segments
  • Support strokeDashoffset
Commits
  • 8a8a1eb Add basic protection against PHAR deserialization
  • 08ce6a9 Do not merge additional USE element attributes
  • 88163cb Prevent circular reference in use elements
  • 4b43073 Create SECURITY.md
  • 76876c6 Support non-namespaced href attribute
  • 058524e Update Cpdf Surface font selection logic
  • 7926073 Conditionally close a path when adding stroke
  • e02e6f7 Improve T/t command point calc when drawing a path
  • fe9b0c3 Apply skew using Surface::transform
  • 80b2f15 Safely parse preg_match_all matches
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [phenx/php-svg-lib](https://github.com/PhenX/php-svg-lib) from 0.3.3 to 0.5.1.
- [Release notes](https://github.com/PhenX/php-svg-lib/releases)
- [Commits](dompdf/php-svg-lib@v0.3.3...0.5.1)

---
updated-dependencies:
- dependency-name: phenx/php-svg-lib
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Dec 13, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file php Pull requests that update Php code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants