From efa91e7a729bd472dc01b73e3725d00931828127 Mon Sep 17 00:00:00 2001
From: Diogo Correia <me@diogotc.com>
Date: Sat, 21 Feb 2026 01:16:16 +0100
Subject: [PATCH] chore: pin xlsx version

This ensures reproducibility when building this project.
---
 package-lock.json | 4 ++--
 package.json      | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 0fa0d203..24c1c2c7 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -72,7 +72,7 @@
         "tiff": "^7.1.2",
         "utif": "^3.1.0",
         "vite-plugin-static-copy": "^3.1.4",
-        "xlsx": "https://cdn.sheetjs.com/xlsx-latest/xlsx-latest.tgz",
+        "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz",
         "zgapdfsigner": "^2.7.5"
       },
       "devDependencies": {
@@ -13852,7 +13852,7 @@
     },
     "node_modules/xlsx": {
       "version": "0.20.3",
-      "resolved": "https://cdn.sheetjs.com/xlsx-latest/xlsx-latest.tgz",
+      "resolved": "https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz",
       "integrity": "sha512-oLDq3jw7AcLqKWH2AhCpVTZl8mf6X2YReP+Neh0SJUzV/BdZYjth94tG5toiMB1PPrYtxOCfaoUCkvtuH+3AJA==",
       "license": "Apache-2.0",
       "bin": {
diff --git a/package.json b/package.json
index 68be90c9..10ed0519 100644
--- a/package.json
+++ b/package.json
@@ -128,7 +128,7 @@
     "tiff": "^7.1.2",
     "utif": "^3.1.0",
     "vite-plugin-static-copy": "^3.1.4",
-    "xlsx": "https://cdn.sheetjs.com/xlsx-latest/xlsx-latest.tgz",
+    "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz",
     "zgapdfsigner": "^2.7.5"
   },
   "lint-staged": {