Skip to content

Bump uuid and probe-image-size in /amp-story/gae#12

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/amp-story/gae/multi-2f59bc5f5f
Open

Bump uuid and probe-image-size in /amp-story/gae#12
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/amp-story/gae/multi-2f59bc5f5f

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 24, 2026

Removes uuid. It's no longer used after updating ancestor dependency probe-image-size. These dependencies need to be updated together.

Removes uuid

Updates probe-image-size from 4.0.0 to 7.3.0

Changelog

Sourced from probe-image-size's changelog.

[7.3.0] - 2026-05-03

Fixed

  • Fixed .readXXX() helpers in sync parsers.
  • Improved BMP format handling, #77.
  • Ensure width/height are positive.
  • Fixed max redirects handling, #81.
  • Fixed webp sync parser (adjust to streamed version).
  • Add bounds check to sync ICO parser.

[7.2.3] - 2022-01-27

Fixed

  • Fix Error extend in FF, #71.

[7.2.2] - 2021-10-12

Fixed

  • Skip invalid chunks in JPEG parser instead of stopping, so some broken images can still be parsed, #68.
  • Better error handling when server redirects to utf8-encoded internationalized domain name.

[7.2.1] - 2021-06-07

Fixed

  • Fix hanging of HTTP request when server returns JSON or XML, #62.

[7.2.0] - 2021-06-03

Changed

  • SVG embedded in HTML is no longer recognized as SVG image, #60.

Fixed

  • Allow XML namespaces in SVG images, #61.

[7.1.1] - 2021-05-27

Fixed

  • Allow byte order mark at the start of SVG, #57.

[7.1.0] - 2021-04-15

Fixed

  • Fix options merge, when property value is class (switched from deepmerge to lodash.merge), #53.

[7.0.1] - 2021-03-18

Fixed

  • Fix crash in async SVG parser, #52.

... (truncated)

Commits
  • 906ef01 7.3.0 released
  • 39fd6e8 Add bounds check to sync ICO parser.
  • 0298ba2 Fixed webp sync parser (adjust to streamed version)
  • 7471ab7 lint fix: semi
  • 0d30ba5 lint fix: yoda, operator-linebreak, spaced-comment
  • 3977e76 lint fix: prefer-const, no-multi-spaces, no-multiple-empty-lines off, key-sp...
  • b1de432 lint fix: array-bracket-spacing, no-var off, camelcase off
  • 505a5b8 Update eslint config to neostandard
  • 981245c nyc bump
  • b995676 mocha => native
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [uuid](https://github.com/uuidjs/uuid). It's no longer used after updating ancestor dependency [probe-image-size](https://github.com/nodeca/probe-image-size). These dependencies need to be updated together.


Removes `uuid`

Updates `probe-image-size` from 4.0.0 to 7.3.0
- [Changelog](https://github.com/nodeca/probe-image-size/blob/master/CHANGELOG.md)
- [Commits](nodeca/probe-image-size@4.0.0...7.3.0)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version:
  dependency-type: indirect
- dependency-name: probe-image-size
  dependency-version: 7.3.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants