Update production-dependencies (minor)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
matrix-widget-api	^1.16.1 → ^1.17.0
pdfmake (source)	^0.2.23 → ^0.3.7

---

Release Notes

matrix-org/matrix-widget-api (matrix-widget-api)

v1.17.0

Compare Source

1.17.0 Release

What's Changed

• Fix: PostmessageTransport are leaking as they keep listening to window events when stopped by @​BillCarsonFr in #​155
• feat: Push current sticky state when widgets wants to read sticky events by @​BillCarsonFr in #​161

New Contributors

• @​BillCarsonFr made their first contribution in #​155

Full Changelog: matrix-org/matrix-widget-api@v1.16.1...v1.17.0

bpampuch/pdfmake (pdfmake)

v0.3.7

Compare Source

• Updated pdfkit to 0.18.0

v0.3.6

Compare Source

• Added setUrlAccessPolicy() for defining a custom access policy for external URLs before download
  (addresses a potential server vulnerability CVE-2026-26801)

  Example:

  pdfmake.setUrlAccessPolicy((url) => {
  	// check allowed domain
  	return url.startsWith("https://example.com/");
  });

  For details see documentation

• Added validation for image height and width values

v0.3.5

Compare Source

• Added snakingColumns property for columns to enable newspaper-like column flow
• Added outlines / bookmarks for text node
  • outline - set to true for add to bookmarks
  • outlineText (optional) - set custom bookmark text, otherwise text from node
  • outlineExpanded (optional) - set to true for expanded/opened bookmark
  • outlineParentId (optional) - parent bookmark id
• Added property outlines for ToC, which adds all items to outlines / bookmarks (any existing outline settings on texts are respected)

v0.3.4

Compare Source

• Added vertical alignment for table cells via verticalAlignment property, values: top (default), middle, bottom
• Fixed margin inheritance when styles are extended multiple times

v0.3.3

Compare Source

• Added properties for ToC:
  • hideEmpty - set to true if you can hide an empty ToC
  • sortBy - 'page' (default) or 'title'
  • sortLocale - custom locale to sort by property sortBy
• Added property decorationThickness for text to set width of the decoration line
• Added inherited/extends styles, use property extends in style with style name or array of string with style names
• Fixed margin override with 0 value
• Fixed margin override from multiple styles
• Fixed text decoration for superscript and subscript
• Fixed svg-to-pdfkit - TypeError: t.classList.contains is not a function

v0.3.2

Compare Source

• Fixed non-working open() and print() methods in browser
• Added SVG validation: width and height must be specified (in SVG string/element or svg node)
• Added support for image scaling with only height defined
• Added custom markerColor for each item of ul and ol

v0.3.1

Compare Source

• Added auto page height for multiple pages (for section or after custom page break)
• Added type validation for parameters in method createPdf
• Added support SVGElement object for svg node (SVGElement object is available only in browser)
• Updated svg-to-pdfkit library to the latest GitHub master commit
• Fixed a bug in the write method where it did not wait for the file write operation to complete
• Fixed SVG loading
• Fixed rendering SVG without viewBox

v0.3.0

Compare Source

• Reverted to the original pdfkit package, moving away from @foliojs-fork
• Drop support Internet Explorer 11 (Microsoft will not support from 2022)
• Minimal supported version Node.js 20 LTS
• Port code base to ES6+
• Unify interface for node and browser (breaking change)
• All methods return promise instead of using callback (breaking change)
• Change including virtual font storage in client-side (breaking change)
• Change parameters of pageBreakBefore function (breaking change)
• Support for loading font files and images via URL addresses (https:// or http:// protocol) in Node.js (client and server side now)
• Used fetch API for downloading fonts and images
• Attachments embedding
• Added section node

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • Between 12:00 AM and 05:59 AM, only on Monday (* 0-5 * * 1)
• Automerge
  • Monday through Friday (* * * * 1-5)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 84eb9e9

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR