Skip to content

[Snyk] Upgrade sharp from 0.28.3 to 0.30.4#2

Open
snyk-bot wants to merge 1 commit intomainfrom
snyk-upgrade-687abebb2da6f86efd8d672596fb2947
Open

[Snyk] Upgrade sharp from 0.28.3 to 0.30.4#2
snyk-bot wants to merge 1 commit intomainfrom
snyk-upgrade-687abebb2da6f86efd8d672596fb2947

Conversation

@snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade sharp from 0.28.3 to 0.30.4.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 9 versions ahead of your current version.
  • The recommended version was released a month ago, on 2022-04-18.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Information Exposure
SNYK-JS-SIMPLEGET-2361683
547/1000
Why? Proof of Concept exploit, CVSS 8.8
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: sharp from sharp GitHub release notes
Commit messages
Package name: sharp
  • d396a4e Release v0.30.4
  • ae1dbcd Bump deps
  • 4c29368 Docs: EXIF metadata unsupported for TIFF output #3074
  • 36e5596 Docs: mention npm's foreground-scripts option to aid debugging
  • 985e881 Bump deps
  • 0b11671 Docs: changelog for #3178
  • 9deac83 Add missing file name to 'Input file is missing' error message (#3178)
  • 5d36f5f Improve error message for SVG render above limit #3167
  • 926572b Control sensitivity to invalid images via failOn
  • d0c8e95 Docs: expand info about use with worker threads
  • b0ca23c Docs: changelog and credit for #3146
  • c3a0d5f Add support for TypedArray input with byteOffset and length
  • 1d36936 Ensure create has correct bit depth and colourspace #3139
  • b609df4 Release v0.30.3
  • c567d3b Bump devDeps
  • 27d9fe2 Add additional debugging hint on symbol error (#3132)
  • ac883c5 Docs: composite image supports the animated property #3135
  • e8720c9 Docs: use SVG favicon with a PNG fallback
  • 42e45d8 Docs: add more examples (composite, greyscale, tint)
  • 72fd8ab Docs: add section on (preventing) bundling with esbuild
  • ac18bbb Ensure backwards-compatibility of JSDoc introduced in ea599ad
  • fcbe4e1 Tests: remove possible race condition
  • 9280742 CI: update FreeBSD environment
  • 7a1a1cf Docs: add/correct some operation examples

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant