chore(deps): bump pdfmake from 0.3.5 to 0.3.6 in /components

[dependabot]

Bumps pdfmake from 0.3.5 to 0.3.6.

Release notes

Sourced from pdfmake's releases.

0.3.6

• Added setUrlAccessPolicy() for defining a custom access policy for external URLs before download (addresses a potential server vulnerability CVE-2026-26801)

  Example:

  pdfmake.setUrlAccessPolicy((url) => {
  	// check allowed domain
  	return url.startsWith("https://example.com/");
  });

  For details see documentation

• Added validation for image height and width values

Changelog

Sourced from pdfmake's changelog.

0.3.6 - 2026-03-10

• Added setUrlAccessPolicy() for defining a custom access policy for external URLs before download (addresses a potential server vulnerability CVE-2026-26801)

  Example:

  pdfmake.setUrlAccessPolicy((url) => {
  	// check allowed domain
  	return url.startsWith("https://example.com/");
  });

  For details see documentation

• Added validation for image height and width values

Commits

• 7737f23 0.3.6
• f8d69ed Update CHANGELOG.md
• c443710 refresh pdf examples
• d20ac0b new method setUrlAccessPolicy() (#2920)
• f3c202a fix lint issues
• de26d0b added validation for image height and width values #2814
• 5f82ae5 code cleanup
• 8621289 fix getBuffer test
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)