Bump dompdf/dompdf from 3.0.2 to 3.1.0

[dependabot]

Bumps dompdf/dompdf from 3.0.2 to 3.1.0.

Release notes

Sourced from dompdf/dompdf's releases.

Dompdf 3.1.0

What's Changed

• Adds initial PDF/A compliance mode (dompdf/dompdf#3269)
• Adds data-URIs to the resource reference validation logic and handles the same as other resource reference protocols (dompdf/dompdf#3492)
  • Note: this change requires that users of data URIs include the "data://" scheme in the list of allowed protocols.
  • Allows data-URIs to be used for @font-face declarations
• Adds support for data-URI JPEG images in Cpdf (dompdf/dompdf#2783)
• Seeks local resources with a leading slash from the specified chroot directories if they are not found from the filesystem root (dompdf/dompdf#3444)
• Addresses an issue preventing class-based Font Awesome usage (dompdf/dompdf#3571)

Breaking Change

This release adds the "data://" scheme to the protocol validation rules. Installations that explicitly define the allowed protocols but do not include the "data://" protocol will no longer render data-URIs. This is a change from previous versions, where data-URIs were not processed through the validated rules. Installations that use the default validation rules included with Dompdf should see no impact.

Full Changelog: dompdf/dompdf@v3.0.2...v3.1.0

We would like to extend our gratitude to the community members who helped make this release possible.

Commits

• a51bd7a Bump version to 3.1.0
• 4a45555 Retry data-URI parsing failure after removing whitespace
• c32d9ba Support custom property references in psuedo-element content
• 6adab3e Support escaped characters in CSS selectors
• 6eb4cd1 Return early from CSS calc when a value is missing
• ba379af Specify class directory for Cpdf default font
• 39dd29f Retrieve parent body for fixed position elements
• c8aef1f Throw Cpdf exceptions in PDF/A mode for non-compliant content
• dbaec91 Update Cpdf font metrics handling
• 4962521 Enable PDF/A compliance in PDFLib
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)