deps(deps): bump the major group across 1 directory with 2 updates

[dependabot]

Bumps the major group with 2 updates in the / directory: imapflow and react-pdf.

Updates imapflow from 1.7.8 to 2.0.2

Changelog

Sourced from imapflow's changelog.

2.0.2 (2026-09-10)

Bug Fixes

• skip LSUB once a server has rejected ENABLE over the IMAP4rev2 it advertises (1c4bca2)

2.0.1 (2026-09-10)

Bug Fixes

• stop acting on an IMAP4rev2 advertisement once the server rejects ENABLE over it (227355f)

2.0.0 (2026-09-07)

⚠ BREAKING CHANGES

• Node.js 20 or newer is required. The lib/ directory is no longer published; use the package root or the imapflow/lib/* export map.

Features

• migrate to TypeScript with ES module and CommonJS builds (a2cde07)
• support Bun and Cloudflare Workers (70fff15)

Bug Fixes

• re-arm auto-IDLE after an IDLE or poll session ends on its own (e6e5d27)
• types: strip the internal members of ImapFlow from the declarations (68b7258)
• types: type AuthenticationFailure.response as the string it always is (5c3b3af)
• types: type the events without the generic EventEmitter of @​types/node (a4285b2)

Commits

• 58ef92c chore(master): release 2.0.2 [skip-ci] (#395)
• 1c4bca2 fix: skip LSUB once a server has rejected ENABLE over the IMAP4rev2 it advert...
• 1eb08f6 chore(master): release 2.0.1 [skip-ci] (#394)
• 227355f fix: stop acting on an IMAP4rev2 advertisement once the server rejects ENABLE...
• fad663d chore(master): release 2.0.0 [skip-ci] (#393)
• 7ef1b7d chore(deps): update dependencies
• 68b7258 fix(types): strip the internal members of ImapFlow from the declarations
• 5c3b3af fix(types): type AuthenticationFailure.response as the string it always is
• a4285b2 fix(types): type the events without the generic EventEmitter of @​types/node
• e6e5d27 fix: re-arm auto-IDLE after an IDLE or poll session ends on its own
• Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates react-pdf from 10.5.0 to 11.0.0

Release notes

Sourced from react-pdf's releases.

v11.0.0

See Upgrade guide from version 10.x to 11.x.

React-PDF 11 brings PDF loading into React's Suspense flow. Use the same loading fallbacks and Error Boundaries as the rest of your application, or keep your existing viewer behavior with suspense={false}.

This release also upgrades PDF.js to version 6, with improvements to rendering, accessibility, and performance, along with some important compatibility changes.

👀 Want to see exciting features more often? Consider sponsoring React-PDF.

❗️ = breaking change

What's new?

• ❗️ Added Suspense and Error Boundary support, enabled by default (#2144).
  • Document, Page, Thumbnail, and Outline now use your boundary fallbacks for loading and failures.
  • Set suspense={false} on Document to keep the previous loading and error behavior.
  • Use startTransition to keep previously revealed content visible while loading another file or page.
• Updated PDF.js from 5.4.296 to 6.3.289 (#2142), bringing improvements to annotation rendering, image decoding, font conversion, text selection, accessibility, and performance.

What's changed?

• ❗️ React 19 is now required (#2143). Support for React 16.8, 17, and 18 has been dropped.
• ❗️ Dropped support for older browsers and Node.js versions. See the upgrade guide for details.
• ❗️ Several PDF.js APIs have changed. If you use pdfjs directly, document/page proxies, or custom data factories, check the upgrade guide.
• onRenderAnnotationLayerSuccess now runs after asynchronous annotation rendering finishes, and rendering failures are reported through onRenderAnnotationLayerError.
• In Suspense mode, plain file and options objects are compared by value.

Commits

• ca2330b v11.0.0
• 9d55def Update docs on previous versions
• 3630564 Update docs on browser support
• 31c34a0 Add docs on Node.js support
• 45b026d Fix typo in README
• 81d030c [breaking] Use Suspense and Error Boundaries by default (#2144)
• d783a53 [breaking] Require React 19 (#2143)
• 2674f1d [breaking] Update pdfjs-dist to 6.3.289 (#2142)
• 4f2d429 Update Vitest to 5.0.0
• 2cdbf3c Bump vitest-browser-react from 2.2.0 to 2.3.0
• See full diff in compare view

[dependabot]

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	react-pdf@​10.5.0 ⏵ 11.0.0			+1	+3
	imapflow@​1.7.8 ⏵ 2.0.2			+2	+1

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report