lucasw89/bentopdf
1
0
Fork 0
mirror of https://github.com/alam00000/bentopdf.git synced 2026-11-05 20:02:47 +01:00
Code Issues Packages Projects Releases Wiki Activity
1,116 Commits 25 Branches 70 Tags
4a7dc7675b7234933eb30c5a3fdfe4c8414cf66b
Commit Graph
1116 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Alam 4a7dc7675b Merge pull request #913 from alam00000/dependabot/npm_and_yarn/i18next-http-backend-4.0.2 
build(deps): bump i18next-http-backend from 3.0.6 to 4.0.2
 2026-10-21 13:02:41 +05:30
Alam e9b34ec957 Merge pull request #911 from alam00000/dependabot/npm_and_yarn/brace-expansion-2.1.7 
build(deps-dev): bump brace-expansion from 2.1.4 to 2.1.7
 2026-10-21 13:01:56 +05:30
Alam c62187ee95 Merge pull request #910 from alam00000/dependabot/npm_and_yarn/dompurify-3.4.17 
build(deps): bump dompurify from 3.4.12 to 3.4.17
 2026-10-21 13:01:41 +05:30
Alam 594fa11677 Merge pull request #922 from alam00000/dependabot/npm_and_yarn/undici-7.30.1 
build(deps-dev): bump undici from 7.29.0 to 7.30.1
 2026-10-21 13:01:28 +05:30
Alam e26b5f6a28 Merge pull request #923 from alam00000/dependabot/npm_and_yarn/markdown-it-14.3.3 
build(deps): bump markdown-it from 14.2.0 to 14.3.3
 2026-10-21 13:01:12 +05:30
Alam 463750037c Merge pull request #939 from alam00000/dependabot/docker/library/node-26-alpine 
build(deps): bump library/node from 20-alpine to 26-alpine
 2026-10-21 13:00:53 +05:30
Alam fc43b112d8 Merge pull request #757 from ynlamy/main 
(Feature) Add extraVolumes and extraVolumeMounts in chart Helm
 2026-10-21 12:42:11 +05:30
Alam 33d15b9890 Merge pull request #886 from adrienboulle/fix-825-untranslated-notifications 
fix(merge-pdf): route result notifications through i18n
 2026-10-21 12:33:35 +05:30
Alam 8cfd91ccb3 Merge pull request #853 from nipunrajk/fix/navigation-base-url 
fix(navigation): respect BASE_URL in tool pages and navbar brand (Fixes #850)
 2026-10-21 12:28:21 +05:30
Alam 5222f6c0bf Merge pull request #902 from mvanhorn/fix/647-sign-pdf-flatten-text-position 
fix: keep flattened Sign PDF text at its placed position
 2026-10-21 12:24:30 +05:30
Alam 6314db7b88 Merge pull request #885 from adrienboulle/fix-831-validate-signature 
fix(validate-signature): detect signature dictionaries without /Type
 2026-10-21 12:18:10 +05:30
Alam 02113e2579 Merge pull request #894 from nipunrajk/fix/markdown-task-list-links 
fix(markdown): prevent task lists with links from corrupting DOM
 2026-10-21 12:00:48 +05:30
dependabot[bot] 7e2576e3df build(deps): bump library/node from 20-alpine to 26-alpine 
Bumps library/node from 20-alpine to 26-alpine.

---
updated-dependencies:
- dependency-name: library/node
  dependency-version: 26-alpine
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-10-20 21:43:22 +00:00
dependabot[bot] c595c8f12a build(deps): bump i18next-http-backend from 3.0.6 to 4.0.2 
Bumps [i18next-http-backend](https://github.com/i18next/i18next-http-backend) from 3.0.6 to 4.0.2.
- [Changelog](https://github.com/i18next/i18next-http-backend/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/i18next-http-backend/compare/v3.0.6...v4.0.2)

---
updated-dependencies:
- dependency-name: i18next-http-backend
  dependency-version: 4.0.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-10-20 16:39:18 +00:00
alam00000 0d430027df feat: replace compression with Hyper Compress, fix PDF to Word color pass and stale engine URLs 2026-10-20 22:06:30 +05:30
Alam d6537217e6 Merge pull request #934 from alam00000/chore/update-sponsors 
docs: update sponsors
 2026-10-19 18:17:09 +05:30
alam00000 2dd3dd2d4b docs: update sponsors 2026-10-19 12:46:23 +00:00
alam00000 2f96455896 chore: stop tracking generated build files, fix sponsors workflow and refresh README hero 2026-10-19 18:14:45 +05:30
Alam eb6813108a Merge pull request #925 from alam00000/dependabot/npm_and_yarn/qs-6.16.1 
build(deps-dev): bump qs from 6.15.0 to 6.16.1
 2026-10-19 17:33:55 +05:30
Adrien Boullé 448035b77b fix(merge-pdf): keep worker errors out of the alert, add missing fr key 2026-10-19 12:30:29 +02:00
Adrien Boullé ab8f4c20a8 fix(merge-pdf): route result notifications through i18n 
Fixes #825
 2026-10-19 12:30:29 +02:00
Adrien BoulléandClaude Opus 5.5 d86de593ca fix(validate-signature): detect signature dictionaries without /Type 
/Type is optional in a signature dictionary (PDF 32000-1, 12.8.1) and some
signers leave it out, so those documents still reported "No Signatures
Found". A dictionary without /Type that carries both /ByteRange and
/Contents is now read as a signature; document timestamps
(/Type /DocTimeStamp, /SubFilter /ETSI.RFC3161) stay out because they hold
an RFC 3161 token, not a CMS signature over the document.

Also covers a /Contents placeholder of 74,506 hex characters, the largest
seen in real signed documents, which the former fixed scan window dropped.

Fixes #831

Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-10-19 12:27:34 +02:00
alam00000 9aae81e73c Release v2.8.10 v2.8.10 2026-10-19 15:33:11 +05:30
dependabot[bot] 007095a6a6 build(deps-dev): bump qs from 6.15.0 to 6.16.1 
Bumps [qs](https://github.com/ljharb/qs) from 6.15.0 to 6.16.1.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.15.0...v6.16.1)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.16.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-10-19 09:57:52 +00:00
Alam 2f868d4d0e Merge pull request #932 from alam00000/chore/update-pdf-engine 
build(deps): bump PDF engine and viewer to 051abe5b72a9
 2026-10-19 15:25:18 +05:30
alam00000 2be3d6858c build(deps): bump PDF engine and viewer to 051abe5b72a9 2026-10-19 09:46:51 +00:00
alam00000 edd959f345 fix(security): harden sanitize, flatten, redaction, signature validation, CSP, proxies and CI 2026-10-19 14:45:00 +05:30
alam00000 b0a186839a fix: change CLA signature storage branch to 'cla-signatures' 2026-10-19 13:20:31 +05:30
alam00000 70dc47d25c feat: update GitHub Actions workflow for PDF engine and viewer 2026-10-19 13:17:07 +05:30
alam00000 231c012e99 fix(ci): avoid rate limits 2026-10-19 02:07:51 +05:30
Alam 6a75673cbe Merge pull request #927 from alam00000/dependabot/npm_and_yarn/source-map-js-1.2.2 
build(deps): bump source-map-js from 1.2.1 to 1.2.2
 2026-10-19 02:03:10 +05:30
Alam 66f3628811 Merge pull request #926 from alam00000/dependabot/npm_and_yarn/handlebars-4.7.10 
build(deps-dev): bump handlebars from 4.7.9 to 4.7.10
 2026-10-19 02:02:59 +05:30
alam00000 4c314b8a13 Update service worker cache version 2026-10-19 01:07:55 +05:30
alam00000 0584def180 Release v2.8.9 v2.8.9 2026-10-19 00:52:15 +05:30
github-actions[bot] ccdb4dd8e5 @cosark has signed the CLA in alam00000/bentopdf#904 2026-10-18 05:25:07 +00:00
dependabot[bot] 733c4f0bf9 build(deps): bump source-map-js from 1.2.1 to 1.2.2 
Bumps [source-map-js](https://github.com/7rulnik/source-map-js) from 1.2.1 to 1.2.2.
- [Release notes](https://github.com/7rulnik/source-map-js/releases)
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2)

---
updated-dependencies:
- dependency-name: source-map-js
  dependency-version: 1.2.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-10-17 21:02:32 +00:00
dependabot[bot] dde07a28bd build(deps-dev): bump handlebars from 4.7.9 to 4.7.10 
Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js) from 4.7.9 to 4.7.10.
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.10/release-notes.md)
- [Commits](https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10)

---
updated-dependencies:
- dependency-name: handlebars
  dependency-version: 4.7.10
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-10-17 12:24:15 +00:00
dependabot[bot] 4bd4ef9a7b build(deps): bump markdown-it from 14.2.0 to 14.3.3 
Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.2.0 to 14.3.3.
- [Changelog](https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md)
- [Commits](https://github.com/markdown-it/markdown-it/compare/14.2.0...14.3.3)

---
updated-dependencies:
- dependency-name: markdown-it
  dependency-version: 14.3.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-10-17 12:11:07 +00:00
dependabot[bot] 12885ed914 build(deps-dev): bump undici from 7.29.0 to 7.30.1 
Bumps [undici](https://github.com/nodejs/undici) from 7.29.0 to 7.30.1.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v7.29.0...v7.30.1)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 7.30.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-10-17 12:10:59 +00:00
github-actions[bot] 6ce0d69ba5 @oa-cmu has signed the CLA in alam00000/bentopdf#921 2026-10-17 02:57:30 +00:00
github-actions[bot] 167b7e8f90 @kelseyjmw has signed the CLA in alam00000/bentopdf#919 2026-10-16 16:22:48 +00:00
github-actions[bot] b5a69f9191 @sadfun has signed the CLA in alam00000/bentopdf#917 2026-10-15 12:08:26 +00:00
github-actions[bot] 2651471a84 @sergitost10 has signed the CLA in alam00000/bentopdf#916 2026-10-15 08:06:09 +00:00
github-actions[bot] 872a32929e @anishgowda21 has signed the CLA in alam00000/bentopdf#914 2026-10-14 06:42:53 +00:00
alam00000 46bf0fbb57 Enforce file origin check in annotation PDF viewer 2026-10-13 14:12:12 +05:30
dependabot[bot] 94351926ba build(deps-dev): bump brace-expansion from 2.1.4 to 2.1.7 
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 2.1.4 to 2.1.7.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v2.1.4...v2.1.7)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 2.1.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-10-13 02:04:17 +00:00
dependabot[bot] b90d074820 build(deps): bump dompurify from 3.4.12 to 3.4.17 
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.12 to 3.4.17.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.12...3.4.17)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.17
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
 2026-10-13 00:58:34 +00:00
alam00000 3a5f146d1b fix(vercel): docs CSP 2026-10-03 14:17:55 +05:30
alam00000 1a41545fff fixed routing 2026-10-03 14:10:46 +05:30
Matt Van Horn 4fd0b1d3e6 fix: keep flattened Sign PDF text at its placed position 
readFormMatrix loads the appearance Matrix and uses the identity when
that entry is missing or is not six numbers. alignAppearanceToRect maps
the four BBox corners through that matrix and returns the scale and
translation that fit the transformed box to the annotation rectangle.
Those values are the cm concatenated before Do, and the original Matrix
stays on the form XObject so Do applies it once. A transformed box whose
width or height is under 0.001 is left unpainted, and that annotation is
still removed.

Fixes #647
 2026-10-02 22:16:51 -07:00