Commit Graph
1135 Commits
Author SHA1 Message Date
David Cumps 4d3468c06f fix(seo): accept official blog canonicals under a custom SITE_URL (#933)
The blog is BentoPDF's own content, so generate-blog.mjs and the
hand-written blog pages keep their canonical on www.bentopdf.com in
self-hosted builds too. seo-audit.mjs now expects that official canonical
(and host) for blog/ pages instead of failing every custom-SITE_URL build.
2026-10-23 13:58:14 +00:00
David Cumps af92a591b9 Merge remote-tracking branch 'origin/main' into fix/933-site-url-blog-canonicals 2026-10-23 13:54:39 +00:00
David Cumps cd59d087d3 revert(seo): drop the dist/blog origin rebase
Per maintainer review: the blog is BentoPDF's own content, so self-hosted
builds keep its canonicals on www.bentopdf.com.
2026-10-23 13:54:39 +00:00
alam00000 dafb6f8e18 fix: update commercial license purchase link and invoicing details 2026-10-23 17:22:40 +05:30
alam00000 6f42d75b73 fix: update commercial license link in contributing guide 2026-10-23 17:22:33 +05:30
alam00000 6e8e012d3d fix: serve canonical, hreflang and sitemap URLs and restore Export in the PDF editor 2026-10-23 15:01:31 +05:30
alam00000 7eec9a0d64 feat: add favorites functionality to tools 2026-10-22 15:04:42 +05:30
alam00000 4d3e8b964f fix: fit wide tables when printing, keep editor panes from collapsing, rename Upload to Select in Markdown to PDF 2026-10-22 13:34:35 +05:30
Alam 5a5e155cc2 Merge pull request #813 from KourosZanbouri/add-farsi-translation
Add Farsi (Persian) translation
2026-10-22 12:51:02 +05:30
alam00000 5992cae40b Sync Farsi translation with main 2026-10-22 12:47:54 +05:30
alam00000 538e940525 Merge main into add-farsi-translation 2026-10-22 12:47:54 +05:30
Alam 853182d6a3 Merge pull request #916 from sergitost10/feat/catalan-translation
feat(i18n): add Catalan language support
2026-10-22 12:38:34 +05:30
David Cumps 2b56c45177 fix(seo): rebase only the exact default authority, insert SITE_URL literally
Review follow-up: the origin regex also matched a port
(https://www.bentopdf.com:8443) and userinfo
(https://[email protected]), which are different origins;
the lookahead now excludes ':' and '@'. The replacement is a callback,
so `$&`/`$1` in SITE_URL stay literal. Tests cover both.
2026-10-21 22:09:07 +00:00
David Cumps 3c605eef56 fix(seo): honour SITE_URL for blog canonicals (#933)
A build with a custom SITE_URL failed seo-audit on the blog pages:
generate-blog.mjs hard-coded https://www.bentopdf.com, and the
hand-written blog/author-alam.html carries that origin literally while
generate-i18n-pages.mjs only rewrites top-level pages.

generate-blog.mjs now reads SITE_URL like its sibling scripts, and
enhance-seo-pages.mjs rebases the default origin in dist/blog/*.html
to SITE_URL (dist only, no-op for the default URL) through a small
side-effect-free helper, scripts/site-origin.mjs, covered by
src/tests/site-origin.test.ts.
2026-10-21 19:02:45 +00:00
Alam 4a7dc7675b Merge pull request #913 from alam00000/dependabot/npm_and_yarn/i18next-http-backend-4.0.2
build(deps): bump i18next-http-backend from 3.0.6 to 4.0.2
2026-10-21 13:02:41 +05:30
Alam e9b34ec957 Merge pull request #911 from alam00000/dependabot/npm_and_yarn/brace-expansion-2.1.7
build(deps-dev): bump brace-expansion from 2.1.4 to 2.1.7
2026-10-21 13:01:56 +05:30
Alam c62187ee95 Merge pull request #910 from alam00000/dependabot/npm_and_yarn/dompurify-3.4.17
build(deps): bump dompurify from 3.4.12 to 3.4.17
2026-10-21 13:01:41 +05:30
Alam 594fa11677 Merge pull request #922 from alam00000/dependabot/npm_and_yarn/undici-7.30.1
build(deps-dev): bump undici from 7.29.0 to 7.30.1
2026-10-21 13:01:28 +05:30
Alam e26b5f6a28 Merge pull request #923 from alam00000/dependabot/npm_and_yarn/markdown-it-14.3.3
build(deps): bump markdown-it from 14.2.0 to 14.3.3
2026-10-21 13:01:12 +05:30
Alam 463750037c Merge pull request #939 from alam00000/dependabot/docker/library/node-26-alpine
build(deps): bump library/node from 20-alpine to 26-alpine
2026-10-21 13:00:53 +05:30
Alam fc43b112d8 Merge pull request #757 from ynlamy/main
(Feature) Add extraVolumes and extraVolumeMounts in chart Helm
2026-10-21 12:42:11 +05:30
Alam 33d15b9890 Merge pull request #886 from adrienboulle/fix-825-untranslated-notifications
fix(merge-pdf): route result notifications through i18n
2026-10-21 12:33:35 +05:30
Alam 8cfd91ccb3 Merge pull request #853 from nipunrajk/fix/navigation-base-url
fix(navigation): respect BASE_URL in tool pages and navbar brand (Fixes #850)
2026-10-21 12:28:21 +05:30
Alam 5222f6c0bf Merge pull request #902 from mvanhorn/fix/647-sign-pdf-flatten-text-position
fix: keep flattened Sign PDF text at its placed position
2026-10-21 12:24:30 +05:30
Alam 6314db7b88 Merge pull request #885 from adrienboulle/fix-831-validate-signature
fix(validate-signature): detect signature dictionaries without /Type
2026-10-21 12:18:10 +05:30
Alam 02113e2579 Merge pull request #894 from nipunrajk/fix/markdown-task-list-links
fix(markdown): prevent task lists with links from corrupting DOM
2026-10-21 12:00:48 +05:30
dependabot[bot] 7e2576e3df build(deps): bump library/node from 20-alpine to 26-alpine
Bumps library/node from 20-alpine to 26-alpine.

---
updated-dependencies:
- dependency-name: library/node
  dependency-version: 26-alpine
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-10-20 21:43:22 +00:00
dependabot[bot] c595c8f12a build(deps): bump i18next-http-backend from 3.0.6 to 4.0.2
Bumps [i18next-http-backend](https://github.com/i18next/i18next-http-backend) from 3.0.6 to 4.0.2.
- [Changelog](https://github.com/i18next/i18next-http-backend/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/i18next-http-backend/compare/v3.0.6...v4.0.2)

---
updated-dependencies:
- dependency-name: i18next-http-backend
  dependency-version: 4.0.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-10-20 16:39:18 +00:00
alam00000 0d430027df feat: replace compression with Hyper Compress, fix PDF to Word color pass and stale engine URLs 2026-10-20 22:06:30 +05:30
Alam d6537217e6 Merge pull request #934 from alam00000/chore/update-sponsors
docs: update sponsors
2026-10-19 18:17:09 +05:30
alam00000 2dd3dd2d4b docs: update sponsors 2026-10-19 12:46:23 +00:00
alam00000 2f96455896 chore: stop tracking generated build files, fix sponsors workflow and refresh README hero 2026-10-19 18:14:45 +05:30
Alam eb6813108a Merge pull request #925 from alam00000/dependabot/npm_and_yarn/qs-6.16.1
build(deps-dev): bump qs from 6.15.0 to 6.16.1
2026-10-19 17:33:55 +05:30
Adrien Boullé 448035b77b fix(merge-pdf): keep worker errors out of the alert, add missing fr key 2026-10-19 12:30:29 +02:00
Adrien Boullé ab8f4c20a8 fix(merge-pdf): route result notifications through i18n
Fixes #825
2026-10-19 12:30:29 +02:00
Adrien BoulléandClaude Opus 5.5 d86de593ca fix(validate-signature): detect signature dictionaries without /Type
/Type is optional in a signature dictionary (PDF 32000-1, 12.8.1) and some
signers leave it out, so those documents still reported "No Signatures
Found". A dictionary without /Type that carries both /ByteRange and
/Contents is now read as a signature; document timestamps
(/Type /DocTimeStamp, /SubFilter /ETSI.RFC3161) stay out because they hold
an RFC 3161 token, not a CMS signature over the document.

Also covers a /Contents placeholder of 74,506 hex characters, the largest
seen in real signed documents, which the former fixed scan window dropped.

Fixes #831

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-19 12:27:34 +02:00
alam00000 9aae81e73c Release v2.8.10 v2.8.10 2026-10-19 15:33:11 +05:30
dependabot[bot] 007095a6a6 build(deps-dev): bump qs from 6.15.0 to 6.16.1
Bumps [qs](https://github.com/ljharb/qs) from 6.15.0 to 6.16.1.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.15.0...v6.16.1)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.16.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-10-19 09:57:52 +00:00
Alam 2f868d4d0e Merge pull request #932 from alam00000/chore/update-pdf-engine
build(deps): bump PDF engine and viewer to 051abe5b72a9
2026-10-19 15:25:18 +05:30
alam00000 2be3d6858c build(deps): bump PDF engine and viewer to 051abe5b72a9 2026-10-19 09:46:51 +00:00
alam00000 edd959f345 fix(security): harden sanitize, flatten, redaction, signature validation, CSP, proxies and CI 2026-10-19 14:45:00 +05:30
alam00000 b0a186839a fix: change CLA signature storage branch to 'cla-signatures' 2026-10-19 13:20:31 +05:30
alam00000 70dc47d25c feat: update GitHub Actions workflow for PDF engine and viewer 2026-10-19 13:17:07 +05:30
alam00000 231c012e99 fix(ci): avoid rate limits 2026-10-19 02:07:51 +05:30
Alam 6a75673cbe Merge pull request #927 from alam00000/dependabot/npm_and_yarn/source-map-js-1.2.2
build(deps): bump source-map-js from 1.2.1 to 1.2.2
2026-10-19 02:03:10 +05:30
Alam 66f3628811 Merge pull request #926 from alam00000/dependabot/npm_and_yarn/handlebars-4.7.10
build(deps-dev): bump handlebars from 4.7.9 to 4.7.10
2026-10-19 02:02:59 +05:30
alam00000 4c314b8a13 Update service worker cache version 2026-10-19 01:07:55 +05:30
alam00000 0584def180 Release v2.8.9 v2.8.9 2026-10-19 00:52:15 +05:30
github-actions[bot] ccdb4dd8e5 @cosark has signed the CLA in alam00000/bentopdf#904 2026-10-18 05:25:07 +00:00
dependabot[bot] 733c4f0bf9 build(deps): bump source-map-js from 1.2.1 to 1.2.2
Bumps [source-map-js](https://github.com/7rulnik/source-map-js) from 1.2.1 to 1.2.2.
- [Release notes](https://github.com/7rulnik/source-map-js/releases)
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/7rulnik/source-map-js/compare/v1.2.1...v1.2.2)

---
updated-dependencies:
- dependency-name: source-map-js
  dependency-version: 1.2.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-10-17 21:02:32 +00:00