Skip to content

chore(deps): bump sharp from 0.35.0 to 0.35.2 in the production group across 1 directory - #2422

Merged
bjohansebas merged 1 commit into
mainfrom
dependabot/npm_and_yarn/production-ba72ceed86
Jul 1, 2026
Merged

chore(deps): bump sharp from 0.35.0 to 0.35.2 in the production group across 1 directory#2422
bjohansebas merged 1 commit into
mainfrom
dependabot/npm_and_yarn/production-ba72ceed86

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the production group with 1 update in the / directory: sharp.

Updates sharp from 0.35.0 to 0.35.2

Release notes

Sourced from sharp's releases.

v0.35.2

v0.35.2-rc.2

  • TypeScript: Add mediaType to metadata response. #4492

  • Improve WebAssembly fallback detection. #4513

  • Improve code bundler support with stub binaries. #4543

  • Verify GIF effort option is an integer. #4544 @​metsw24-max

  • Verify recomb matrix entries are numbers. #4545 @​metsw24-max

  • TypeScript: Replace namespace with named exports for ESM. #4546

... (truncated)

Commits
  • c9622a3 Release v0.35.2
  • cd4568f Upgrade to sharp-libvips v1.3.1
  • 78390cf Tests: Add font file to prevent font discovery flakiness (#4550)
  • 61210b4 Verify convolve kernel values are numbers (#4549)
  • 1cb27dc Prerelease v0.35.2-rc.2
  • c7606c3 Upgrade to sharp-libvips v1.3.1-rc.0
  • 29d1e9e Prerelease v0.35.2-rc.1
  • bbba0a1 Improve code bundler support with stub binaries
  • ab52866 Bound dilate and erode width to avoid mask-size overflow (#4548)
  • 0f594dd Prerelease v0.35.2-rc.0
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 1, 2026 03:07
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 1, 2026
@netlify

netlify Bot commented Jul 1, 2026

Copy link
Copy Markdown

Deploy Preview for expressjscom-preview ready!

Name Link
🔨 Latest commit af6180d
🔍 Latest deploy log https://app.netlify.com/projects/expressjscom-preview/deploys/6a448a5f4fa8d30008f8f2ff
😎 Deploy Preview https://deploy-preview-2422--expressjscom-preview.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
Lighthouse
Lighthouse
1 paths audited
Performance: 99 (🟢 up 2 from production)
Accessibility: 100 (no change from production)
Best Practices: 100 (no change from production)
SEO: 100 (no change from production)
PWA: 80 (no change from production)
View the detailed breakdown and full score reports
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

@socket-security

socket-security Bot commented Jul 1, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedsharp@​0.35.0 ⏵ 0.35.297100100 +195 +1100

View full report

@dependabot dependabot Bot changed the title chore(deps): bump sharp from 0.35.0 to 0.35.2 in the production group chore(deps): bump sharp from 0.35.0 to 0.35.2 in the production group across 1 directory Jul 1, 2026
Bumps the production group with 1 update in the / directory: [sharp](https://github.com/lovell/sharp).


Updates `sharp` from 0.35.0 to 0.35.2
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.0...v0.35.2)

---
updated-dependencies:
- dependency-name: sharp
  dependency-version: 0.35.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-ba72ceed86 branch from 36aee12 to af6180d Compare July 1, 2026 03:32
@bjohansebas
bjohansebas merged commit bd1d290 into main Jul 1, 2026
14 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-ba72ceed86 branch July 1, 2026 03:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant