Sourced from pdfmake's releases.

0.3.8

• Added server-side method setLocalAccessPolicy() for defining a custom access policy for local file

  Example:

  pdfmake.setLocalAccessPolicy((path) => {
  	// check allowed local file path
  	return path.startsWith("fonts/");
  });

• Improved URL Access Policy (setUrlAccessPolicy method); URLs are now validated even before each redirection in Node.js and after final redirection in browser (browsers do not support validation before redirection)

• Fixed extra blank page when using headerRows, dontBreakRows and cell pageBreak together

• Fixed rendering of an invalid color name - previously it used the last valid color; now it defaults to black

• Fixed dontBreakRows rowSpan ending offset across pages

Sourced from pdfmake's changelog.

0.3.8 - 2026-05-06

• Added server-side method setLocalAccessPolicy() for defining a custom access policy for local file

  Example:

  pdfmake.setLocalAccessPolicy((path) => {
  	// check allowed local file path
  	return path.startsWith("fonts/");
  });

• Improved URL Access Policy (setUrlAccessPolicy method); URLs are now validated even before each redirection in Node.js and after final redirection in browser (browsers do not support validation before redirection)

• Fixed extra blank page when using headerRows, dontBreakRows and cell pageBreak together

• Fixed rendering of an invalid color name - previously it used the last valid color; now it defaults to black

• Fixed dontBreakRows rowSpan ending offset across pages

• 700b4fa 0.3.8
• 244ac8b 0.3.8
• 2927f32 refresh pdf examples
• 03c627d update dependencies
• ed44141 improved URL access policy; URLs are now validated even before redirection in...
• 8fc1fc4 improved URL Access Policy; URLs are now validated even after redirection
• db68a45 Fix dontBreakRows rowSpan ending offset across pages (#2932)
• 4301e73 validate only string colors #2872
• b2cc389 fixed rendering invalid color name for text decorator #2872
• 3805f72 fixed rendering invalid color name #2872
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)