Release digest
Fixed
- FRONTEND-PDF-DEPENDENCY-REMOVAL (Dependency Security) — Removed the unreachable browser-side jsPDF generator and its vulnerable dependency family while retaining the active server-backed corporate PDF download.
Internal
- Updated the canonical dashboard dependency policy and added internal reachability and security evidence. No knowledge-base update is required because the visible export action, API contract, and download behavior are unchanged.
- Verified dependency and source contracts, dashboard actions, lint and
production build, the production-only npm audit boundary, and a real Chromium
corporate PDF download through the visible
AI reportcontrol.