search

tooolbox / node-potrace

JavaScript port of Potrace, for NodeJS
GNU General Public License v2.0
391 stars 33 forks source link

Bump jimp 0.10.2 -> 0.14.0 #9

Closed wendorf closed 4 years ago

wendorf commented 4 years ago

jimp -> @jimp/types -> @jimp/jpeg depends on jpeg-js, and bumping jimp bumps jpeg-js 0.3.7 -> 0.4.1

jpeg-js 0.4.0 fixes CVE-2020-8175 (https://github.com/advisories/GHSA-w7q9-p3jq-fmhm)

tooolbox commented 4 years ago

Looks good. 4 major versions in Jimp seems like a lot to jump through but doesn't seem like all that much changed.

tooolbox commented 4 years ago

Published as v2.1.8

karlhorky commented 4 years ago

Thanks!

Upgraded the Gatsby plugins and transformers here: https://github.com/gatsbyjs/gatsby/pull/26122