build(deps): bump QuestPDF from 2023.12.4 to 2025.4.3

[dependabot]

Bumps QuestPDF from 2023.12.4 to 2025.4.3.

Release notes

Sourced from QuestPDF's releases.

2025.4.2

• Updated the Skia library to version m136,
• Updated the NuGet package README,
• Added DocumentOperation.Decrypt featre to remove encryption from PDF documents,
• Added DocumentOperation.RemoveRestrictions feature,
• Improved availability of native resources on the legacy .NET Framework,
• Fixed compatibility with Unity3D on Linux and macOS builds,
• Fixed encryption of PDF files with 40-bit keys,
• Fixed encryption of PDF files with 128-bit keys.

2025.4.0

• Introduced a new Z-Index feature that allows you to alter the rendering order of content, ensuring elements are displayed in the correct sequence regardless of their definition order,
• Added automated caching mechanism for Shared Image API to improve performance of static assets,
• Fixed text measuring issues where Skia doesn't properly respect maxWidth when planning layouts, particularly with small maxWidth values,
• Fixed rendering artifacts occurring at container edges when text spans multiple pages,
• Optimized rendering performance for lengthy text elements,
• Enhanced the EnsureSpace and PreventPageBreak elements to provide more consistent page layout management,
• Improved XPS generation to throw exceptions when encountering non-Windows operating systems,
• Added argument validation for Fluent API to prevent unpredictable behavior,
• Redesigned Column implementation for improved stability and layout consistency,
• Fixed incorrect URL in obsolete message for Skia Canvas API (contributed by user-named-void).

2025.1.7

• Enhanced Layout Issue Debugging Algorithm,
• Fixed a memory leak related to rendering text elements with page numbers,
• Added finalizer warnings to various classes to help prevent memory leaks in the future,
• Optimized memory management for native objects across multiple areas,
• Adjusted the QPDF implementation to reliably handle non-ASCII content using a UTF-8 marshaler,
• Improved cross-platform compatibility by including required dependencies for macOS,
• Fixed: the Line element was rendered in an incorrect position.

2025.1.6

• Likely fixed a memory leak related to layout calculation caching by adjusting how Skia objects are used,
• Optimized memory usage by disposing native objects as early as possible in many rare scenarios, such as when an exception is thrown during generation,
• Improved caching algorithm accuracy,
• Updated skia native dependency to version 134,
• Updated qpdf native dependency to version 11.10.1,
• Updated OpenSSL native dependency to version 3.4.1.

2025.1.5

• Fixed: EnsureSpace did not render its content in some cases.

2025.1.4

• Added support for creating empty containers that can be injected into the document, significantly enhancing component extensibility.
• Added new element: PreventPageBreak.
• Updated in-code links to documentation to reflect recent changes.
• Fixed: AspectRatio element rarely positioned its content incorrectly.
• Fixed: The Row element incorrectly calculated the size of AutoItem when it contained text representing page numbers
• Fixed: Paragraph spacing was not applied when a span contained only a newline.

... (truncated)

Commits

• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.