deps: bump pdfkit from 0.20.1 to 0.20.2

[dependabot]

Bumps pdfkit from 0.20.1 to 0.20.2.

Release notes

Sourced from pdfkit's releases.

v0.20.2

• Fix bundlers and file tracers packing the ESM copies of the standard font metrics instead of the CommonJS ones the Node build actually loads, which left Cannot find module errors for every standard font at runtime, by resolving the internal #standard-fonts/* mapping to a single file under all conditions
• Fix doc.file() throwing when the same in-memory attachment is embedded twice under one name, because the creation and modified dates the deduplication check compares are absent for sources that are not read from disk
• Fix doc.text() throwing unsupported number: NaN when lineBreak: false is combined with underline, strike, link or goTo, because the rendered width was computed from the line wrapper's measurements, which are never produced when wrapping is disabled

Changelog

Sourced from pdfkit's changelog.

[v0.20.2] - 2026-08-29

• Fix bundlers and file tracers packing the ESM copies of the standard font metrics instead of the CommonJS ones the Node build actually loads, which left Cannot find module errors for every standard font at runtime, by resolving the internal #standard-fonts/* mapping to a single file under all conditions
• Fix doc.file() throwing when the same in-memory attachment is embedded twice under one name, because the creation and modified dates the deduplication check compares are absent for sources that are not read from disk
• Fix doc.text() throwing unsupported number: NaN when lineBreak: false is combined with underline, strike, link or goTo, because the rendered width was computed from the line wrapper's measurements, which are never produced when wrapping is disabled

Commits

• 8d72a71 v0.20.2
• 70c9ad5 Document the parameter list each destination type takes (#1785)
• e04b677 Fix doc.text() throwing NaN with lineBreak false and underline/strike/link/go...
• c6f57c6 fix: resolve #standard-fonts/* to one file under every condition (#1782)
• b87b5ac Fix case-insensitive lookup for named CSS colors (#1780)
• 69671d9 Fix doc.file() throwing when the same in-memory attachment is added twice (#1...
• 1f1abb8 Bump ip-address from 10.2.0 to 10.4.0 (#1761)
• f58c4c7 Bump postcss from 8.5.15 to 8.5.25 (#1762)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)