Merge remote-tracking branch 'upstream/master'

foliojs-fork · Jul 2, 2021 · b860a83 · b860a83
2 parents 162e4fe + a4c5756
commit b860a83
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 4 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,11 @@
 - Allow applying 'underline' and 'strike' text styling together on a text
 - Allow to specify the AcroForm text fontSize
 
+### [v0.12.1] - 2021-04-10
+
+- Update crypto-js to v3.3 (fix security issue)
+- Update fontkit to 1.8.1
+
 ### [v0.12.0] - 2021-04-04
 
 - Add support for Embedded Files and File Attachment Annotations

diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -9,7 +9,7 @@
     "document",
     "vector"
   ],
-  "version": "0.12.0",
+  "version": "0.12.1",
   "homepage": "http://pdfkit.org/",
   "author": {
     "name": "Devon Govett",
@@ -47,7 +47,7 @@
     "rollup-plugin-cpy": "^2.0.1"
   },
   "dependencies": {
-    "crypto-js": "^3.1.9-1",
+    "crypto-js": "^3.3.0",
     "@foliojs-fork/fontkit": "^1.9.0",
     "@foliojs-fork/linebreak": "^1.1.0",
     "png-js": "^1.0.0"

diff --git a/yarn.lock b/yarn.lock
@@ -2542,7 +2542,7 @@ crypto-browserify@^3.0.0:
     randombytes "^2.0.0"
     randomfill "^1.0.3"
 
-crypto-js@^3.1.9-1:
+crypto-js@^3.3.0:
   version "3.3.0"
   resolved "https://registry.yarnpkg.com/crypto-js/-/crypto-js-3.3.0.tgz#846dd1cce2f68aacfa156c8578f926a609b7976b"
   integrity sha512-DIT51nX0dCfKltpRiXV+/TVZq+Qq2NgF4644+K7Ttnla7zEzqc+kjJyiB96BHNyUTBxyjzRcZYpUdZa+QAqi6Q==