search

evolus / pencil

The Pencil Project's unique mission is to build a free and opensource tool for making diagrams and GUI prototyping that everyone can use.
http://pencil.evolus.vn
GNU General Public License v2.0
9.03k stars 715 forks source link

Bump jpeg-js and jimp in /app #751

Open dependabot[bot] opened 1 year ago

dependabot[bot] commented 1 year ago

Bumps jpeg-js to 0.4.4 and updates ancestor dependency jimp. These dependencies need to be updated together.

Updates jpeg-js from 0.3.6 to 0.4.4

Release notes

Sourced from jpeg-js's releases.

v0.4.4

v0.4.4 (2022-06-07)

  • feat: add comment tag encoding (#87) (13e1ffa), closes #87
  • fix: validate sampling factors (#106) (9ccd35f), closes #106
  • fix(decoder): rethrow a more helpful error if Buffer is undefined (#93) (b58cc11), closes #93
  • chore(ci): migrate to github actions (#86) (417e8e2), closes #86
  • chore(deps): bump y18n from 4.0.0 to 4.0.3 (#98) (2c90858), closes #98
  • chore(deps): bump ws from 7.2.3 to 7.4.6 (#91) (fd73289), closes #91
  • chore(deps): bump hosted-git-info from 2.8.8 to 2.8.9 (#90) (9449a8b), closes #90
  • chore(deps): bump lodash from 4.17.15 to 4.17.21 (#89) (ffdc4a4), closes #89

v0.4.3

v0.4.3 (2021-01-11)

  • fix: handle 0x00E1 / 0x00E0 segments from Pixel phones (#84) (a2d7ed9), closes #84

v0.4.2

v0.4.2 (2020-08-24)

  • feat(decoder): add FFDC marker support (#79) (5e8ec27), closes #79
  • fix: avoid new Buffer usage (#73) (49be0e4), closes #73
  • fix(types): add comments property to decode output (#72) (ca27601), closes #72

v0.4.1

v0.4.1 (2020-06-27)

v0.4.0

v0.4.0 (2020-04-23)

  • feat: add memory and resolution limits (135705b)
  • feat: expose exif buffers (#47) (d3e272a), closes #47
  • feat: support browser usage (#55) (7e7e2dc), closes #55
  • feat(decode): add tolerantDecoding option (#57) (69f6415), closes #57
  • fix: enable tolerantDecoding by default (5d3277f)
  • fix: don’t fail if scan contains trailing bytes (#66) (cfeb1c7), closes #66
  • docs: update README for breaking changes (78408c6)
  • refactor: use spread for decode options (a2c93e0)
  • chore: update typedefs for 0.4.0 (a2f7080)
  • chore: add vscode to ignores (238a7fe)
  • chore: track version in tags only (cbc1244)
  • chore: drop support for node versions <8 (21ef116)
  • chore: switch to jest (1731741)

... (truncated)

Commits


Updates jimp from 0.6.4 to 0.16.2

Release notes

Sourced from jimp's releases.

v0.16.2

🐛 Bug Fix

📝 Documentation

Authors: 4

v0.16.1

🐛 Bug Fix

  • @jimp/jpeg
    • upgrade jpeg-js dependency #933 (vincentdufrasnes@vincent-dufrasnes @​Chupsy)

Authors: 2

  • Vincent Dufrasnes (@​Chupsy)
  • vincent dufrasnes (vincentdufrasnes@vincent-dufrasnes)

v0.16.0

🚀 Enhancement

  • @jimp/plugin-crop

Authors: 1

v0.15.0

🚀 Enhancement

Authors: 1

... (truncated)

Changelog

Sourced from jimp's changelog.

v0.16.2 (Thu Sep 15 2022)

🐛 Bug Fix

📝 Documentation

Authors: 4

v0.16.1 (Fri Aug 28 2020)

🐛 Bug Fix

  • @jimp/jpeg
    • upgrade jpeg-js dependency #933 (vincentdufrasnes@vincent-dufrasnes @​Chupsy)

Authors: 2

  • Vincent Dufrasnes (@​Chupsy)
  • vincent dufrasnes (vincentdufrasnes@vincent-dufrasnes)

v0.16.0 (Sat Aug 08 2020)

🚀 Enhancement

  • @jimp/plugin-crop

Authors: 1

... (truncated)

Commits
  • e4d6af0 Bump version to: v0.16.2 [skip ci]
  • 29ac957 Update CHANGELOG.md [skip ci]
  • dad05fa Bump jpeg-js over 0.4.4 to avoid cve-2022-25851 (#1093)
  • 53ff9d1 docs: toc added for easier reading (#984)
  • 7d3fc67 added the "e" back to @​jimp/plugin-fisheye (#947)
  • 802918b feat: add handwritten.js project (#946)
  • 909f06e Bump version to: v0.16.1 [skip ci]
  • 27394a8 Update CHANGELOG.md [skip ci]
  • 9274a88 upgrade jpeg-js dependency (#933)
  • 6b01322 Bump version to: v0.16.0 [skip ci]
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/evolus/pencil/network/alerts).