Upgrade or replace pdfkit

[gamboz]

Please note that pdfkit 1.0.0 suffers from CVE-2025-26240 (aka GHSA-9g3x-6x24-vf9f )

In JazzCore python-pdfkit 1.0.0, the from_string method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files.

This have been marked as High severity and, ATM, there is no patch.

pdfkit is used in transform.logic

[ajrbyers]

Thanks @gamboz CASSIUS is no longer used and we can remove this entire module.

[gamboz]

Please note that there might be references to the "transform" in the following (but you probably already know 🙂 )

• src/templates/admin/journal/manage/archive_article.html

  96 <a href="{% url 'cassius_generate' galley.pk %}?return={{ request.path|urlencode }}">

• src/templates/admin/production/assigned_article.html

  239 <a href="{% url 'cassius_generate' galley.pk %}?return={{ request.path|urlencode }}">

• src/templates/admin/production/typeset_task.html

  101 <a href="{% url 'cassius_generate' galley.pk %}?return={{ request.path|urlencode }}">

• src/templates/admin/proofing/proofing_article.html

  207 <a href="{% url 'cassius_generate' galley.pk %}?return={{ request.path|urlencode }}">