v9.0.0

See Upgrade guide from version 8.x to 9.x.

This version updates PDF.js to 4.3.136, fixing GHSA-wgrm-67xf-hhpq for good. React-PDF v8.0.2 and v7.7.3 have already included a mitigation of the issue and thus were not affected by this vulnerability, but caused automatic security alerts due to the outdated PDF.js version.

❗️ = breaking change

What's new?

• Updated PDF.js to 4.3.136.
  • Optimizations for CPU and memory usage
  • Performance improvements
  • Image rendering improvements
  • Text selection improvements
  • Accessibility improvements
  • Font conversion improvements
  • Handling of corrupted documents
• Improved Turbopack compatibility.

What's changed?

• ❗️ PDF.js worker extension has been changed from .js to .mjs.
• ❗ PDF.js is now an ESM module. In particular, you may encounter issues running unit tests using Jest. Consider migrating to Vitest.
• ❗️ Removed deprecated svg renderMode.
• ❗️ Dropped support for older browsers and Node.js versions. In particular, you may need Promise.withResolvers polyfill when running Node.js versions older than 22.0.0.

v8.0.2

Bug fixes

• Force isEvalSupported to false. Fixes GHSA-87hq-q4gp-9wr4 (caused by GHSA-wgrm-67xf-hhpq).

v8.0.1

This version shipped an incorrect fix for a security vulnerability and thus has been deprecated.

Bug fixes

• Force isEvalSupported to true. Fixes GHSA-87hq-q4gp-9wr4 (caused by GHSA-wgrm-67xf-hhpq).

v7.7.3

Bug fixes

• Force isEvalSupported to false. Fixes GHSA-87hq-q4gp-9wr4 (caused by GHSA-wgrm-67xf-hhpq).

v7.7.2

This version shipped an incorrect fix for a security vulnerability and thus has been deprecated.

Bug fixes

• Force isEvalSupported to true. Fixes GHSA-87hq-q4gp-9wr4 (caused by GHSA-wgrm-67xf-hhpq).

v8.0.0

See Upgrade guide from version 7.x to 8.x.

❗️ = breaking change

What's new?

• Added support for React 19.

What's changed?

• ❗️ New JSX transform is now required. Most likely, you’re already using it, but if you’re not, you’ll need to enable it by following the instructions in the linked blog post.
• ❗️ propTypes were removed. If you’re using propTypes, we recommend migrating to TypeScript or another type-checking solution.

v7.7.1

Bug fixes

• Fixed Outline, Page and Thumbnail components crashing when placed outside Document, but provided with pdf prop (#1709).
• Fixed documentation for using vite-plugin-static-copy suggesting a solution that doesn't work on Windows.

v7.7.0

What's new?

• Detect not memoized file and options props.

What's changed?

• Updated documentation to make it clear SVG renderMode is deprecated and will be removed in the future.
• Replaced tiny-warning with more popular (and equally tiny!) warning.

v7.6.0

What's new?

• Improved developer experience by moving prop documentation to JSDoc. This means that you can now see descriptions, default values, and examples for all props in your IDE.
• Improved documentation.

v7.5.1

What's new?

• Package is now published with npm provenance statements.