ci: update backup workflow

.github/workflows/any-pr.yml

@@ -0,0 +1,35 @@
+name: any-pr
+on: [pull_request]
+
+concurrency:
+  group: ${{ github.head_ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      pull-requests: write
+
+    strategy:
+      matrix:
+        node-version: [22.x]
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # pin@v5.0.0
+
+      - name: Set up Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # pin@v5.0.0
+        with:
+          node-version: ${{ matrix.node-version }}
+          cache: 'yarn'
+
+      - name: Install dependencies
+        run: yarn install --frozen-lockfile
+
+      - name: Run tests
+        run: yarn test

.github/workflows/github_backup.yaml

@@ -0,0 +1,33 @@
+name: Mirror repository to S3
+on:
+  push:
+    branches:
+      - master
+jobs:
+  BackupRepoToS3:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # pin@v6.0.3
+
+      - name: Configure aws credentials
+        uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # pin@v6.2.0
+        with:
+          aws-region: ap-southeast-2
+          role-to-assume: ${{ secrets.gh_backup_role }}
+          role-duration-seconds: 900
+          role-session-name: GithubActions
+
+      - name: Backing up this repo to AWS S3
+        uses: peter-evans/s3-backup@4f39c7dab63c7666d6ba6722d7966e7d0655583c # pin @v1.1.0
+        env:
+          AWS_REGION: ${{ env.AWS_REGION }}
+          ACCESS_KEY_ID: ${{ env.AWS_ACCESS_KEY_ID }}
+          MIRROR_TARGET: ${{ secrets.gh_backup_location }}/pdf-lib
+          SECRET_ACCESS_KEY: ${{ env.AWS_SECRET_ACCESS_KEY }}
+          AWS_SESSION_TOKEN: ${{ env.AWS_SESSION_TOKEN }}
+        with:
+          args: --overwrite --remove

.github/workflows/github_clone_assurance.yaml

@@ -0,0 +1,29 @@
+name: Mirror repository to mattrassurance org
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - master
+      - main
+
+jobs:
+  MirrorRepoToMATTRAssurance:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: mirror repo
+        run: |
+          rm -r .git
+          rm -r .github
+          git init --initial-branch=${{ github.ref_name }}
+          git config --local user.name ${{ secrets.MATTRASSURANCE_GIT_USER_NAME }}
+          git config --local user.email ${{ secrets.MATTRASSURANCE_GIT_USER_EMAIL }}
+          git add .
+          git commit -m "Backing up ${{ github.repository }} to mattrassurance org"
+          git remote add origin https://${{ secrets.MATTRASSURANCE_GIT_USER_NAME }}:${{ secrets.MATTRASSURANCE_GIT_USER_PAT }}@github.com/mattrassurance/${{ github.event.repository.name }}.git
+          git push origin ${{ github.ref_name }} --force

.github/workflows/pr-labeler.yml

@@ -6,6 +6,7 @@ on:
 
 jobs:
   triage:
+    if: false
     runs-on: ubuntu-latest
     steps:
     - uses: actions/labeler@v3

.github/workflows/sponsors.yml

@@ -8,6 +8,7 @@ on:
     types: [opened]
 jobs:
   build:
+    if: false
     name: is-sponsor-label
     runs-on: ubuntu-latest
     steps:

.gitignore

@@ -7,6 +7,7 @@ build/
 dist/
 cjs/
 es/
+.idea/
 
 tsBuildInfo.json
 flamegraph.html
@@ -16,4 +17,4 @@ isolate*.log
 out.pdf
 *.tgz
 
-.vscode/settings.json
+.vscode/settings.json

README.md

@@ -1502,3 +1502,8 @@ See this [StackOverflow answer](https://stackoverflow.com/a/48268766) for a grea
 ## License
 
 [MIT](LICENSE.md)
+
+## Forks
+
+https://github.com/Hopding/pdf-lib -> original fork
+https://github.com/ParadoxAi/pdf-lib -> sync with this fork with latest deps patch 2025-10-07