Repository navigation
chore(deps): bump sharp from 0.34.5 to 0.35.5 - #71
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [sharp](https://github.com/lovell/sharp) from 0.34.5 to 0.35.5. - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.5...v0.35.5) --- updated-dependencies: - dependency-name: sharp dependency-version: 0.35.5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
![sigit-code-review[bot]](https://avatars.githubusercontent.com/in/3492899?s=60&v=4){kind=small}
There was a problem hiding this comment.
Dependabot bump of sharp from ^0.34.5 to ^0.35.5 in package.json, with the lockfile updated separately. Note this crosses a minor with breaking changes: sharp 0.35.0 (June 2026) dropped Node.js 18 (now requires >= 20.9.0), removed deprecated sharpen operation properties, and renamed the jp2k format id to jp2. The earlier dependabot label-config discussion is unrelated to this code change.
Automated review by siGit Code Review · commit c8a018e · see the review dashboard
| "remark-directive": "^4.0.0", | ||
| "remark-math": "^6.0.0", | ||
| "sharp": "^0.34.5", | ||
| "sharp": "^0.35.5", |
There was a problem hiding this comment.
warning — sharp 0.35.x requires Node.js >= 20.9.0 (Node 18 support was dropped in 0.35.0), and no engines/CI change accompanies this bump — deployments or local dev on Node 18 will now fail at install or runtime.
Bumps sharp from 0.34.5 to 0.35.5.
Release notes
Sourced from sharp's releases.
... (truncated)
Commits
51a990fRelease v0.35.596de105Upgrade to sharp-libvips v1.3.43a61390CI: Configure Dependabot with all package.json locations4940c50Improve gain map support for rotate/flip/flop ops20654aaPrerelease v0.35.5-rc.1ef4f934CI: Upgrade to Ubuntu 26.04358df95Upgrade to libvips v8.18.749f4903Improve gain map support for rotate-then-extract #46060e2e55eSilence a couple of compiler/static analysis warningscef3b8cImprove gain map support for extract operation #4606Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)