From df55864a6cbb598699634eb5be20057d48783e51 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 5 Feb 2026 09:31:09 +0100
Subject: [PATCH] Bump canvg in /web (#773)

Bumps [canvg](https://github.com/canvg/canvg) to 4.0.3 and updates ancestor dependency . These dependencies need to be updated together.


Updates `canvg` from 4.0.2 to 4.0.3
- [Release notes](https://github.com/canvg/canvg/releases)
- [Changelog](https://github.com/canvg/canvg/blob/master/CHANGELOG.md)
- [Commits](https://github.com/canvg/canvg/compare/v4.0.2...v4.0.3)

Updates `canvg` from 3.0.10 to 3.0.11
- [Release notes](https://github.com/canvg/canvg/releases)
- [Changelog](https://github.com/canvg/canvg/blob/master/CHANGELOG.md)
- [Commits](https://github.com/canvg/canvg/compare/v4.0.2...v4.0.3)

---
updated-dependencies:
- dependency-name: canvg
  dependency-version: 4.0.3
  dependency-type: direct:production
- dependency-name: canvg
  dependency-version: 3.0.11
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 web/package-lock.json | 14 +++++++-------
 web/package.json      |  2 +-
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/web/package-lock.json b/web/package-lock.json
index a5f1e160..01c09970 100644
--- a/web/package-lock.json
+++ b/web/package-lock.json
@@ -32,7 +32,7 @@
         "activitypub-types": "^1.1.0",
         "autoprefixer": "^10.4.17",
         "canvas-confetti": "^1.9.3",
-        "canvg": "^4.0.1",
+        "canvg": "^4.0.3",
         "chart.js": "^4.4.6",
         "chartjs-plugin-crosshair": "^2.0.0",
         "chartjs-plugin-zoom": "^2.1.0",
@@ -2720,9 +2720,9 @@
       }
     },
     "node_modules/canvg": {
-      "version": "4.0.2",
-      "resolved": "https://registry.npmjs.org/canvg/-/canvg-4.0.2.tgz",
-      "integrity": "sha512-/7kIZger/mdFci4KXdtMr+NQB4GU1InkJ4RwSyDBRcvy4BUlg1hD+ZUWo550sWPyWaKZ8purqby6kjf09qVriw==",
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/canvg/-/canvg-4.0.3.tgz",
+      "integrity": "sha512-fKzMoMBwus3CWo1Uy8XJc4tqqn98RoRrGV6CsIkaNiQT5lOeHuMh4fOt+LXLzn2Wqtr4p/c2TOLz4xtu4oBlFA==",
       "license": "MIT",
       "dependencies": {
         "@types/raf": "^3.4.0",
@@ -4335,9 +4335,9 @@
       }
     },
     "node_modules/jspdf/node_modules/canvg": {
-      "version": "3.0.10",
-      "resolved": "https://registry.npmjs.org/canvg/-/canvg-3.0.10.tgz",
-      "integrity": "sha512-qwR2FRNO9NlzTeKIPIKpnTY6fqwuYSequ8Ru8c0YkYU7U0oW+hLUvWadLvAu1Rl72OMNiFhoLu4f8eUjQ7l/+Q==",
+      "version": "3.0.11",
+      "resolved": "https://registry.npmjs.org/canvg/-/canvg-3.0.11.tgz",
+      "integrity": "sha512-5ON+q7jCTgMp9cjpu4Jo6XbvfYwSB2Ow3kzHKfIyJfaCAOHLbdKPQqGKgfED/R5B+3TFFfe8pegYA+b423SRyA==",
       "license": "MIT",
       "optional": true,
       "dependencies": {
diff --git a/web/package.json b/web/package.json
index 76822516..56b4b637 100644
--- a/web/package.json
+++ b/web/package.json
@@ -53,7 +53,7 @@
     "activitypub-types": "^1.1.0",
     "autoprefixer": "^10.4.17",
     "canvas-confetti": "^1.9.3",
-    "canvg": "^4.0.1",
+    "canvg": "^4.0.3",
     "chart.js": "^4.4.6",
     "chartjs-plugin-crosshair": "^2.0.0",
     "chartjs-plugin-zoom": "^2.1.0",