[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
pdfjs-dist (source)	6.4.299 → 6.5.438

---

Release Notes

mozilla/pdf.js (pdfjs-dist)

v6.5.438

Compare Source

This release contains improvements for accessibility, annotation editing, annotation rendering, font conversion, image conversion, performance, scripting, tiling pattern rendering and the viewer.

Changes since v6.4.299

• Bump the stable version in pdfjs.config by @​timvandermeij in #​22066
• Fix a few edge cases when converting RGB images in convertRGBToRGBA and ImageResizer by @​calixteman in #​22046
• Directly call Set.prototype.delete in the ChunkedStreamManager code by @​Snuffleupagus in #​22065
• Don't stop at the first broken /Kids entry in Catalog.getAllPageDicts (issue 22011) by @​xjtu-ctgg in #​22013
• Keep the sign of negative numbers greater than -1 in util.printf by @​kwy404 in #​22017
• Downscale large images without a full-size RGBA buffer by @​calixteman in #​22067
• Create the LIGATURE_TO_UNICODE Map only once by @​Snuffleupagus in #​22068
• Replace gulp-replace with transform for the Chromium manifest by @​calixteman in #​22072
• [api-minor] Don't re-layout the textLayer on update (PR 20492 follow-up) by @​Snuffleupagus in #​22045
• Bump library version to 6.5 by @​Snuffleupagus in #​22073
• Remove the explicit gulp-cli dependency by @​calixteman in #​22077
• Replace ttest with a local Welch's t-test by @​calixteman in #​22075
• Add a reference test for issue 7802 by @​Snuffleupagus in #​22074
• Replace webpack-stream with the Webpack API by @​calixteman in #​22070
• Match the whole string in the getCharUnicodeCategory regular expression (issue 21890) by @​Om-singhaI in #​21960
• Add pull request viewer previews by @​calixteman in #​22090
• [api-minor] Offload canvas drawing operations to a worker by @​Aditi-1400 in #​21860
• Check preview deployment before posting links by @​calixteman in #​22093
• Bump source-map-js from 1.2.1 to 1.2.2 by @​dependabot[bot] in #​22091
• Bump github/codeql-action/init from 4.38.1 to 4.38.2 by @​dependabot[bot] in #​22084
• Bump github/codeql-action/analyze from 4.38.1 to 4.38.2 by @​dependabot[bot] in #​22085
• Bump github/codeql-action/autobuild from 4.38.1 to 4.38.2 by @​dependabot[bot] in #​22086
• Ensure that errors in the Optional Content won't prevent all rendering by @​Snuffleupagus in #​22082
• Replace Metalsmith with a docs gulp task by @​calixteman in #​22081
• Don't swallow postMessage errors when replying to sendWithPromise messages (issue 22079) by @​Snuffleupagus in #​22080
• Collect renderer worker coverage by @​calixteman in #​22094
• Extract viewer preview checks and preparation into scripts by @​calixteman in #​22095
• Use CharCodeMap for font character mappings (bug 2077176) by @​calixteman in #​22092
• Ensure that the RendererWorker version matches the API version, and reduce the size of the built pdf.renderer.mjs file (PR 21860 follow-up) by @​Snuffleupagus in #​22097
• Fix the DOMCanvasFactory import in the new debugger (PR 22097 follow-up) by @​Snuffleupagus in #​22098
• Resolve PDF.js aliases when linting imports by @​calixteman in #​22099
• A couple of RendererWorker improvements (PR 21860 follow-up) by @​Snuffleupagus in #​22103
• Move renderer worker support out of api.js (PR 21860 follow-up) by @​calixteman in #​22105
• Always check if crypto.randomUUID is available in the getUuid helper (issue 22107) by @​Snuffleupagus in #​22108
• Split the src/display/display_utils.js file into multiple ones (PR 21860 follow-up) by @​Snuffleupagus in #​22101
• Reduce duplication in the type1FontGlyphMapping function by @​Snuffleupagus in #​22104
• Create canvasFactory and filterFactory just once in the RendererMessageHandler (PR 21860 follow-up) by @​Snuffleupagus in #​22114
• Cache decoded page images in the worker in Firefox (PR 22105 follow-up) by @​calixteman in #​22112
• Test main-thread and worker rendering paths by @​calixteman in #​22096
• Use the main-thread pixel ratio for worker image smoothing by @​calixteman in #​22120
• Fit the Nova zoom select in the compact toolbar (bug 2075731) by @​calixteman in #​22118
• Add unit-tests for the StatTimer.prototype.toString method by @​Snuffleupagus in #​22109
• Add a method in BaseCanvasFactory for getting a no-alpha canvas context by @​Snuffleupagus in #​22116
• Update the thumbnail status label and controls together (bug 2080269) by @​calixteman in #​22119
• Keep scripting internals out of the global scope (issue 22121) by @​calixteman in #​22122
• Parse structure trees without a ParentTree by @​calixteman in #​22115
• Cache operator lists in the renderer worker (PR 21860 follow-up) by @​calixteman in #​22126
• Fix repeated util.scand calls (PR 21681 follow-up) by @​calixteman in #​22146
• Fix choice-field currentValueIndices (PR 12826 follow-up) by @​calixteman in #​22147
• Fix initial radio button selection (PR 12637 follow-up) by @​calixteman in #​22148
• Run OpenAction once on document open (PR #​15822 follow-up) by @​calixteman in #​22149
• Ensure that Wasm-decoding of images work if multiple PDFs are parsed in parallel in one worker-thread (fixes issue 22131) by @​Snuffleupagus in #​22145
• Keep Path2D caches out of nested operator lists (PR 21860 follow-up) by @​calixteman in #​22156
• Fix render completion after errors in nested operators by @​calixteman in #​22153
• Use MessageChannel to yield in the renderer worker (PR 21860 follow-up) by @​calixteman in #​22161
• Handle non-object message handler failures by @​calixteman in #​22154
• Use the canvas factory for worker frame contexts (PR 21860 follow-up) by @​calixteman in #​22157
• Use the interactive border color for the Nova zoom select (bug 2071594) by @​calixteman in #​22152
• Use Nova text color for toggled controls (bug 2071599) by @​calixteman in #​22151
• Only register the window "updatefromsandbox" listener if necessary, when using the standalone viewer-components (issue 22133) by @​Snuffleupagus in #​22136
• [Editor] Fix saving stamps after removing alt text by @​calixteman in #​22135
• Ignore collapsed selections after pointer release by @​calixteman in #​22137
• [Editor] Defer signature undo until a signature is added by @​calixteman in #​22138
• Preserve page deletions when restoring page order by @​calixteman in #​22139
• Report PDF modifications to Firefox (bug 2076546) by @​calixteman in #​22162
• Handle invalid canvas sizes in worker rendering (PR 21860 follow-up) by @​calixteman in #​22155
• Fall back after renderer worker failures (PR 21860 follow-up) by @​calixteman in #​22163
• Prevent "uncaught exceptions" from the PDFFetchStreamRangeReader and PDFNodeStreamRangeReader classes (issue 22171) by @​Snuffleupagus in #​22173
• Catch getPermissions errors in PDFViewer.prototype.setDocument by @​Snuffleupagus in #​22168
• Fix JPX images with subsampled components or mismatched component counts by @​calixteman in #​22169
• Fix the PostScript Wasm compiler for a mod by a constant zero by @​calixteman in #​22174
• Fix script error reporting by @​calixteman in #​22166
• Handle document destruction during a hanging range request (issue 22051) by @​Snuffleupagus in #​22164
• Preserve decoded data in truncated FlateDecode streams (issue 22044) by @​calixteman in #​22182
• Load documents without waiting for renderer startup (PR 21860 follow-up) by @​calixteman in #​22167
• Ship the QuickJS license files with the sandbox by @​calixteman in #​22185
• Improve the performances of the jpx decoder and reduce its size and the jbig2 one by @​calixteman in #​22175
• Add CodSpeed performance benchmarks by @​codspeed[bot] in #​22187
• Fix radio button and checkbox scripting by @​calixteman in #​22160
• Don't parse inferred link-annotations if textLayer rendering was aborted (issue 22179) by @​Snuffleupagus in #​22184
• Bump actions/upload-artifact from 7.0.1 to 7.0.2 by @​dependabot[bot] in #​22188
• Bump actions/download-artifact from 8.0.1 to 8.0.2 by @​dependabot[bot] in #​22189
• Ignore invalid scripting timer handles by @​calixteman in #​22176
• Use the original eval for PDF actions by @​calixteman in #​22177
• Simplify scripting helpers by @​calixteman in #​22181
• Avoid integer conversion traps in PostScript Wasm by @​calixteman in #​22191
• Hide the page background behind the main canvas (bug 2070624) by @​calixteman in #​22196
• Add gulp benchmark task by @​calixteman in #​22197
• l10n: Update locale files by @​sync-l10n-for-pdf-js[bot] in #​22200
• Add scripting API regression tests by @​calixteman in #​22178
• Use a DataView when populating the w array in the calculateMD5 function by @​Snuffleupagus in #​22201
• Use a DataView when populating the w array in the calculateSHA256 function by @​Snuffleupagus in #​22203
• Use DataViews when reading/writing data in the calculateSHA512 function by @​Snuffleupagus in #​22204
• Let Nova Tools menu rows shrink before scrolling (bug 2076522) by @​calixteman in #​22205
• Reuse existing popups when saving edited comments by @​calixteman in #​22206
• Change the codeLenCodeMap, used with FlateStream, into a Uint8Array by @​Snuffleupagus in #​22217
• Avoid unnecessary wrapping in multiline text fields (bug 2065923) by @​calixteman in #​22214
• Fix stream encryption and metadata decryption by @​calixteman in #​22216
• Use copyWithin, rather than a manual loop, for non-overlapping data in FlateStream.prototype.#readBlock by @​Snuffleupagus in #​22220
• Use fill, rather than a manual loop, for repeated data in FlateStream.prototype.#readBlock by @​Snuffleupagus in #​22221
• Add some benchmarks by @​calixteman in #​22199
• Use the renderer workers preloaded by Firefox (bug 2079251) by @​calixteman in #​22165
• Compute the table entry once in the FlateStream.prototype.generateHuffmanTable method by @​Snuffleupagus in #​22219
• Avoid some String.fromCharCode calls in the Lexer.prototype.getString method by @​Snuffleupagus in #​22227
• Distinguish PostScript booleans from numbers by @​calixteman in #​22226
• Serialize indirect strings when extracting pages by @​calixteman in #​22223
• Compile benchmark WebAssembly with TurboFan only by @​calixteman in #​22228
• Wait for structure trees in accessibility tests by @​calixteman in #​22222
• Avoid showing an empty canvas when worker rendering pauses by @​calixteman in #​22230
• Anchor NoRotate annotations at the top-left corner of their rect (bug 2082236) by @​calixteman in #​22195
• Don't remove a MessageHandler shared by multiple BasePdfManager instances (PR 22145 follow-up) by @​Snuffleupagus in #​22186
• Skip invalid and pure XFA documents when extracting pages by @​calixteman in #​22232
• Don't compress metadata streams when writing by @​calixteman in #​22234
• Drop PDF/X and PDF/E claims from extracted document info by @​calixteman in #​22235
• Wait for the link to be visible before clicking it in presentation mode by @​calixteman in #​22233
• Test Wasm fetching after page extraction (PR 22186) by @​calixteman in #​22237
• Update actions/setup-node to version 7.1.0 by @​timvandermeij in #​22239
• Update dependencies to the most recent versions by @​timvandermeij in #​22238
• Tweak the copyWithin threshold in FlateStream.prototype.#readBlock (PR 22220 follow-up) by @​Snuffleupagus in #​22240
• Wait for the WillSave actions to run before saving by @​calixteman in #​22241
• Bound the work and recursion depth of PostScript Type 4 compilation by @​calixteman in #​22231
• Support XRef stream offsets larger than 2 GiB by @​buondevid in #​22172
• Compile benchmark JavaScript with Sparkplug on first call by @​calixteman in #​22245
• Release discarded canvases by @​calixteman in #​22248
• Use the toHexDigit parser-helper in the Type1Parser code by @​Snuffleupagus in #​22253
• Deflate small streams synchronously by @​nicolo-ribaudo in #​22273
• Simplify the Parser.prototype.findASCII85DecodeInlineStreamEnd method by @​Snuffleupagus in #​22274
• Reset the alpha of colored Type3 glyphs in the glyph's graphics state by @​calixteman in #​22282
• Start directly drawn tiling pattern cells from the initial graphics state by @​calixteman in #​22283
• Bound format 12 cmap expansion by @​calixteman in #​22255
• Add a Util helper for creating a Uint8Array identity-map with 256 elements by @​Snuffleupagus in #​22236
• Reset the alpha of colored Type3 glyphs in their operator list by @​calixteman in #​22284
• Speed up asyncGetBytesFromDecompressionStream by @​calixteman in #​22276
• Render the existing page in the issue10491-partial reftest by @​calixteman in #​22287
• Keep pending clip and fill-rule state out of pattern tiles by @​calixteman in #​22286
• Fix Type3 text advances by @​calixteman in #​22285
• Use TypedArray.prototype.set in the meshPackData function by @​Snuffleupagus in #​22250
• Avoid five-argument Math.min/max calls in Util.axialAlignedBoundingBox by @​calixteman in #​22290
• Use the font bbox to extend the head table bounds (bug 1888084) by @​calixteman in #​22298
• Use codspeed macro runners for running the perf benchmarks by @​calixteman in #​22302
• Bump markdown-it from 14.3.2 to 14.3.3 by @​dependabot[bot] in #​22292
• Bump @​vitest/mocker and vitest by @​dependabot[bot] in #​22293
• Bump actions/create-github-app-token from 3.2.0 to 3.3.0 by @​dependabot[bot] in #​22269
• Bump github/codeql-action/init from 4.38.2 to 4.38.3 by @​dependabot[bot] in #​22268
• Bump github/codeql-action/autobuild from 4.38.2 to 4.38.3 by @​dependabot[bot] in #​22267
• Bump github/codeql-action/analyze from 4.38.2 to 4.38.3 by @​dependabot[bot] in #​22266
• Fall back to the Identity crypt filter without a /CF dictionary by @​calixteman in #​22249
• Use Canvas for toggled controls on LinkText in forced-colors mode (bug 2083002) by @​calixteman in #​22281
• Avoid loops when initializing data in the calculateMD5, calculateSHA256, and calculateSHA512 functions by @​Snuffleupagus in #​22301
• Include the final NFKC range when searching by @​calixteman in #​22297
• l10n: Update locale files by @​sync-l10n-for-pdf-js[bot] in #​22305
• Set walltime mode in codspeed by @​calixteman in #​22311
• Bound CFF and Type1 charstring work by @​calixteman in #​22303
• Limit whitespace backtracking in find by @​calixteman in #​22314
• Ignore the search terms reduced to nothing in a multiple term search by @​calixteman in #​22316
• Keep fullscreen inside the browser window in the Firefox integration tests by @​calixteman in #​22318
• Avoid quadratic autolinking on pages with many links by @​calixteman in #​22319
• Rewrite comment in autolinker by @​calixteman in #​22322
• Use Array.prototype.fill more in the src/core/bidi.js code by @​Snuffleupagus in #​22312
• Use fixed V8 hash and random seeds in the benchmarks by @​calixteman in #​22323
• Render glyph 0 in full CFF fonts by @​calixteman in #​22326
• Reuse shared CFF Private DICTs and Subrs by @​calixteman in #​22324
• Skip unnecessary parsing in Autolinker.processLinks by @​Snuffleupagus in #​22327
• Apply annotation changes when extracting pages by @​calixteman in #​22252
• Improve the find bar integration tests by @​timvandermeij in #​22069
• Upgrade Vitest to version 5 by @​timvandermeij in #​22242
• Update getTextContent to use getReader instead by @​Snuffleupagus in #​22329
• Remove extra operands from CFF stack-clearing operators by @​calixteman in #​22328
• Update dependencies to the most recent versions by @​timvandermeij in #​22330
• [Editor] Smooth ink strokes with a sliding time window by @​calixteman in #​22304
• Use Python 3.15 in the GitHub workflows by @​timvandermeij in #​22331
• [JS] Hide implementation details in the scripting sandbox by @​calixteman in #​21081
• Add a PDFDocument helper method for creating a Page instance by @​Snuffleupagus in #​22332
• Rotate fallback glyphs in non-embedded vertical fonts by @​calixteman in #​22334
• Avoid more unused code in the built pdf.renderer.mjs file (PR 22101 follow-up) by @​Snuffleupagus in #​22337
• Skip more unnecessary parsing when parsing inferred links (PR 22327 follow-up) by @​Snuffleupagus in #​22336
• Wait for the link annotations to be injected in the autolinker integration tests by @​calixteman in #​22340
• Use the Util.pointBoundingBox helper in the meshUpdateBounds function by @​Snuffleupagus in #​22299
• Keep tiling patterns aligned on scaled fallback glyphs by @​calixteman in #​22333
• [GeckoView] Style the signature editor and keep existing annotations non-editable (bug 2068989) by @​calixteman in #​22247
• Shorten the calculationOrderIds getter a little bit by @​Snuffleupagus in #​22344
• Only set the Glyph.prototype.originalCharCode property when debugging by @​Snuffleupagus in #​22350
• Avoid an infinite loop when parsing a truncated format 1 CFF charset by @​calixteman in #​22357
• Hide Nova toolbar items at wider breakpoints (bug 2084084) by @​calixteman in #​22356
• Bump github/codeql-action/autobuild from 4.38.3 to 4.39.0 by @​dependabot[bot] in #​22353
• Bump github/codeql-action/analyze from 4.38.3 to 4.39.0 by @​dependabot[bot] in #​22352
• Bump github/codeql-action/init from 4.38.3 to 4.39.0 by @​dependabot[bot] in #​22351
• Align tiling patterns on rotated fallback glyphs by @​calixteman in #​22343
• Only wait for WebGPU after receiving mesh patterns (bug 2086057) by @​calixteman in #​22358
• Don't wait for WebGPU during document loading (bug 2086057) by @​calixteman in #​22361
• Advance the position in the PostScript Lexer on invalid operators/numbers (bug 2086012) by @​Snuffleupagus in #​22365
• Reduce duplication in the PostScript Lexer.prototype.next method by @​Snuffleupagus in #​22377
• Fix the vertical offset of text selections in Firefox by @​calixteman in #​22360
• Pause translation when changing scroll/spread modes in the viewer by @​Snuffleupagus in #​22382
• Prevent errors when extracting textContent with zero initial font size (issue 22381) by @​Snuffleupagus in #​22384
• Decode small Flate streams through asyncGetBytes (bug 2086217) by @​calixteman in #​22385
• l10n: Update locale files by @​sync-l10n-for-pdf-js[bot] in #​22395
• Add PDFs for the Talos rendering corpus by @​calixteman in #​22363
• Lazily create a single DOMSVGFactory for all annotationLayers by @​Snuffleupagus in #​22408
• Regenerate button appearances for NeedAppearances (bug 2084610) by @​calixteman in #​22386
• Handle truncated RGB data in convertRGBToRGBA by @​calixteman in #​22402
• Inline the AnnotationLayerBuilder.prototype.#initAnnotationLayer method by @​Snuffleupagus in #​22409
• Discard the state of a corrupt XRef table/stream before parsing the next one by @​andrewfader in #​22375
• Prevent unhandled rejections when cancelling an errored stream reader by @​andrewfader in #​22371

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • "after 1am and before 8am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.77%. Comparing base (59cc4d9) to head (80d0ab6).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##           master     #354      +/-   ##
==========================================
- Coverage   74.78%   74.77%   -0.01%     
==========================================
  Files          88       88              
  Lines       21970    21970              
==========================================
- Hits        16431    16429       -2     
- Misses       5539     5541       +2     

Flag	Coverage Δ
aarch64-apple-darwin	73.77% <ø> (ø)
aarch64-unknown-linux-gnu	73.37% <ø> (-0.42%)	⬇️
aarch64-unknown-linux-musl	74.18% <ø> (-0.02%)	⬇️
x86_64-apple-darwin	73.37% <ø> (-0.42%)	⬇️
x86_64-pc-windows-msvc	74.79% <ø> (-0.01%)	⬇️
x86_64-unknown-linux-gnu	73.37% <ø> (ø)
x86_64-unknown-linux-musl	73.77% <ø> (-0.42%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 1 file with indirect coverage changes

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 59cc4d9...80d0ab6. Read the comment docs.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud