build(deps): bump QuestPDF from 2023.12.4 to 2025.4.0

[dependabot]

Bumps QuestPDF from 2023.12.4 to 2025.4.0.

Release notes

Sourced from QuestPDF's releases.

2025.4.0

• Introduced a new Z-Index feature that allows you to alter the rendering order of content, ensuring elements are displayed in the correct sequence regardless of their definition order,
• Added automated caching mechanism for Shared Image API to improve performance of static assets,
• Fixed text measuring issues where Skia doesn't properly respect maxWidth when planning layouts, particularly with small maxWidth values,
• Fixed rendering artifacts occurring at container edges when text spans multiple pages,
• Optimized rendering performance for lengthy text elements,
• Enhanced the EnsureSpace and PreventPageBreak elements to provide more consistent page layout management,
• Improved XPS generation to throw exceptions when encountering non-Windows operating systems,
• Added argument validation for Fluent API to prevent unpredictable behavior,
• Redesigned Column implementation for improved stability and layout consistency,
• Fixed incorrect URL in obsolete message for Skia Canvas API (contributed by user-named-void).

2025.1.7

• Enhanced Layout Issue Debugging Algorithm,
• Fixed a memory leak related to rendering text elements with page numbers,
• Added finalizer warnings to various classes to help prevent memory leaks in the future,
• Optimized memory management for native objects across multiple areas,
• Adjusted the QPDF implementation to reliably handle non-ASCII content using a UTF-8 marshaler,
• Improved cross-platform compatibility by including required dependencies for macOS,
• Fixed: the Line element was rendered in an incorrect position.

2025.1.6

• Likely fixed a memory leak related to layout calculation caching by adjusting how Skia objects are used,
• Optimized memory usage by disposing native objects as early as possible in many rare scenarios, such as when an exception is thrown during generation,
• Improved caching algorithm accuracy,
• Updated skia native dependency to version 134,
• Updated qpdf native dependency to version 11.10.1,
• Updated OpenSSL native dependency to version 3.4.1.

2025.1.5

• Fixed: EnsureSpace did not render its content in some cases.

2025.1.4

• Added support for creating empty containers that can be injected into the document, significantly enhancing component extensibility.
• Added new element: PreventPageBreak.
• Updated in-code links to documentation to reflect recent changes.
• Fixed: AspectRatio element rarely positioned its content incorrectly.
• Fixed: The Row element incorrectly calculated the size of AutoItem when it contained text representing page numbers
• Fixed: Paragraph spacing was not applied when a span contained only a newline.

2025.1.3

• Fixed a rare layout rendering bug in the Table element.
• Improved memory management for Shared Image API by adjusting GC Memory Pressure.
• Fixed a bug in the DocumentOperation.AddAttachment method that incorrectly detected the file's MIME type when it was not explicitly provided.
• Added a new Placeholders.WebpageUrl() method.

2025.1.2

• Adjusted the behavior of Row.AutoItem to preserve its size when a Row element spans multiple pages.
• Improved Linux compatibility by including the necessary native dependencies (OpenSSL and libjpeg-turbo).

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #41.