Release v0.0.11

Changes in this Release:

Bump sharp from 0.34.2 to 0.34.3
Bumps sharp from 0.34.2 to 0.34.3.

Commits

• 276ac2d Release v0.34.3
• 2dedcf3 Prerelease v0.34.3-rc.1
• 92f2145 Upgrade to sharp-libvips v1.2.0
• 2cd2f84 Upgrade to libvips v8.17.1
• 8ee8d27 Provide XMP as a string, as well as a Buffer, where possible
• 4e3f379 Add keepXmp and withXmp for control over output XMP metadata #4416
• df5454e Add support for RAW digicam input, requires custom libvips+libraw
• 32cf6be Docs: update benchmark results ahead of v0.34.3
• 96dfd40 Tests: update benchmark environment
• 1422798 Upgrade to sharp-libvips v1.2.0-rc.3
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Release v0.0.10

Changes in this Release:

Bump gulp from 4.0.2 to 5.0.1
Bumps gulp from 4.0.2 to 5.0.1.

Release notes

Sourced from gulp's releases.

gulp v5.0.1

Bug Fixes

• Avoid globbing before read stream is opened (#2839) (19122f3)
• Avoid Node.js deprecation warning for fs.Stats (#2838) (69a5d0e)
• Support top-level await on Node 22.12+ (#2836) (04b4a74)

gulp v5.0.0

We've tried to provide a high-level changelog for gulp v5 below, but it doesn't contain all changes from the 60+ dependencies that we maintain.

Please see individual changelogs to drill down into all changes that were made.

⚠ BREAKING CHANGES

• Drop support for Node.js <10.13
• Default stream encoding to UTF-8
• Standardized on anymatch library for globbing paths. All globs should work the same between src and watch now!
• Removed support for ordered globs. This aligns with the chokidar globbing implementation. If you need your globs to be ordered, you can use ordered-read-stream
• All globs and paths are normalized to unix-like filepaths
• Only allow JS variants for .gulp.* config files
• Removed support for alpha releases of v4 from gulp-cli
• Removed the --verify flag
• Renamed the --require flag to --preload to avoid conflicting with Node.js flags
• Removed many legacy and deprecated loaders
• Upgrade to chokidar v3
• Clone Vinyl objects with stream contents using teex, but no longer wait for all streams to flow before cloned streams will receive data
• Stop using process.umask() to make directories, instead falling back to Node's default mode
• Throw on non-function, non-string option coercers
• Drop support of Node.js snake_case flags
• Use a Symbol for attaching the gulplog namespace to the store
• Use a Symbol for attaching the gulplog store to the global
• Use sha256 to hash the v8flags cache into a filename

Features

• Streamlined the dependency tree
• Switch all streams implementation to Streamx
• Rewrote glob-stream to use a custom directory walk that relies on newer Node.js features and is more performant than old implementation
• Implement translation support for all CLI messages and all messages passing through gulplog
• Allow users to customize or remove the timestamp from their logs
• Upgraded gulplog to v2. Messages logged via v1 will also display a deprecated warning. Plugins should update to v2 as the community upgrades to gulp 5
• Added support for gulpile.cjs and gulpfile.mjs
• Add support for swc, esbuild, sucrase, and mdx loaders
• Provide an ESM export (#2760) (b00de68)
• Support sourcemap handling on streaming Vinyl contents

... (truncated)

Changelog

Sourced from gulp's changelog.

5.0.1 (2025-06-01)

Bug Fixes

• Avoid globbing before read stream is opened (#2839) (19122f3)
• Avoid Node.js deprecation warning for fs.Stats (#2838) (69a5d0e)
• Support top-level await on Node 22.12+ (#2836) (04b4a74)

5.0.0 (2024-03-29)

We've tried to provide a high-level changelog for gulp v5 below, but it doesn't contain all changes from the 60+ dependencies that we maintain.

Please see individual changelogs to drill down into all changes that were made.

⚠ BREAKING CHANGES

• Drop support for Node.js <10.13
• Default stream encoding to UTF-8
• Standardized on anymatch library for globbing paths. All globs should work the same between src and watch now!
• Removed support for ordered globs. This aligns with the chokidar globbing implementation. If you need your globs to be ordered, you can use ordered-read-stream
• All globs and paths are normalized to unix-like filepaths
• Only allow JS variants for .gulp.* config files
• Removed support for alpha releases of v4 from gulp-cli
• Removed the --verify flag
• Renamed the --require flag to --preload to avoid conflicting with Node.js flags
• Removed many legacy and deprecated loaders
• Upgrade to chokidar v3
• Clone Vinyl objects with stream contents using teex, but no longer wait for all streams to flow before cloned streams will receive data
• Stop using process.umask() to make directories, instead falling back to Node's default mode
• Throw on non-function, non-string option coercers
• Drop support of Node.js snake_case flags
• Use a Symbol for attaching the gulplog namespace to the store
• Use a Symbol for attaching the gulplog store to the global
• Use sha256 to hash the v8flags cache into a filename

Features

• Streamlined the dependency tree
• Switch all streams implementation to Streamx
• Rewrote glob-stream to use a custom directory walk that relies on newer Node.js features and is more performant than old implementation
• Implement translation support for all CLI messages and all messages passing through gulplog
• Allow users to customize or remove the timestamp from their logs
• Upgraded gulplog to v2. Messages logged via v1 will also display a deprecated warning. Plugins should update to v2 as the community upgrades to gulp 5
• Added support for gulpile.cjs and gulpfile.mjs
• Add support for swc, esbuild, sucrase, and mdx loaders
• Provide an ESM export (#2760) (b00de68)
• Support sourcemap handling on streaming Vinyl contents

... (truncated)

Commits

• 0003e9f chore: release 5.0.1 (#2837)
• 19122f3 fix: Avoid globbing before read stream is opened (#2839)
• 69a5d0e fix: Avoid Node.js deprecation warning for fs.Stats (#2838)
• 04b4a74 fix: Support top-level await on Node 22.12+ (#2836)
• c90e79e chore: Fix CI (#2835)
• 5412605 chore(docs): Update async completion document for newer RxJS (#2831)
• 2fa4981 chore: Update glob docs with replacement to ordered globs (

Release v0.0.9

Changes in this Release:

Bump anothrNick/github-tag-action from 1.71.0 to 1.73.0
Bumps anothrNick/github-tag-action from 1.71.0 to 1.73.0.

Release notes

Sourced from anothrNick/github-tag-action's releases.

1.73.0

What's Changed

• Add git-lfs to installed packages in Dockerfile by @​mikaellindemann in anothrNick/github-tag-action#329

New Contributors

• @​mikaellindemann made their first contribution in anothrNick/github-tag-action#329

Full Changelog: anothrNick/github-tag-action@1...1.73.0

1.72.0

What's Changed

• Added TAG_PREFIX so more descriptive tags can be used by @​timothyclarke in anothrNick/github-tag-action#326

New Contributors

• @​timothyclarke made their first contribution in anothrNick/github-tag-action#326

Full Changelog: anothrNick/github-tag-action@1...1.72.0

Commits

• e528bc2 Merge pull request #329 from mikaellindemann/feature/support-lfs
• da70c4e Merge pull request #326 from timothyclarke/Issue_320/prefix
• ed6507f PR fix - Typo
• 22dbe23 Add git-lfs to installed packages in Dockerfile
• 675479a Handle sed for semver when no prefixes are provided
• a970082 TAG_PREFIX takes priority from WITH_V
• 3acdde7 Added TAG_PREFIX
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Release v0.0.8

Changes in this Release:

Bump dependabot/fetch-metadata from 2.3.0 to 2.4.0
Bumps dependabot/fetch-metadata from 2.3.0 to 2.4.0.

Release notes

Sourced from dependabot/fetch-metadata's releases.

v2.4.0

What's Changed

• Bump actions/create-github-app-token from 1.11.0 to 1.11.3 by @​dependabot in dependabot/fetch-metadata#598
• Bump @​vercel/ncc from 0.38.1 to 0.38.3 by @​dependabot in dependabot/fetch-metadata#578
• Add missing @octokit/request-error to package.json by @​jeffwidman in dependabot/fetch-metadata#605
• Bump to ESLint 9 by @​jeffwidman in dependabot/fetch-metadata#606
• Stop using a node16 devcontainer image by @​jeffwidman in dependabot/fetch-metadata#608
• Make typescript compile to "es2022" by @​jeffwidman in dependabot/fetch-metadata#609
• Bump the dev-dependencies group across 1 directory with 8 updates by @​dependabot in dependabot/fetch-metadata#607
• Tidy up examples slightly by @​jeffwidman in dependabot/fetch-metadata#611
• Fixup some anchor tags that weren't deeplinking by @​jeffwidman in dependabot/fetch-metadata#614
• Remove unnecessary hardcoding of ref by @​jeffwidman in dependabot/fetch-metadata#617
• Bump actions/create-github-app-token from 1.11.3 to 2.0.2 by @​dependabot in dependabot/fetch-metadata#616
• Enable caching of npm install/npm ci for setup-node action by @​jeffwidman in dependabot/fetch-metadata#618
• Add workflow to publish new version of immutable action on every release by @​jeffwidman in dependabot/fetch-metadata#623
• Bump actions/create-github-app-token from 2.0.2 to 2.0.6 by @​dependabot in dependabot/fetch-metadata#621
• v2.4.0 by @​fetch-metadata-action-automation in dependabot/fetch-metadata#594

Full Changelog: dependabot/fetch-metadata@v2...v2.4.0

Commits

• 08eff52 v2.4.0 (#594)
• 821b654 Merge pull request #621 from dependabot/dependabot/github_actions/actions/cre...
• 2c22a37 Bump actions/create-github-app-token from 2.0.2 to 2.0.6
• 6ad01a0 Add workflow to publish new version of immutable action on every release (#623)
• 8ca800c Enable caching of npm install/npm ci for setup-node action (#618)
• 6787635 Merge pull request #616 from dependabot/dependabot/github_actions/actions/cre...
• a09d4af Bump actions/create-github-app-token from 1.11.3 to 2.0.2
• 3a5ce46 Remove unnecessary hardcoding of ref (#617)
• 798f45c Fixup some anchor tags that weren't deeplinking (#614)
• 6c031ac Tidy up examples slightly (#611)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Release v0.0.7

Changes in this Release:

Bump sharp from 0.33.5 to 0.34.2
Bumps sharp from 0.33.5 to 0.34.2.

Commits

• 6d04b7c Release v0.34.2
• d4b30b7 Docs: Update pnpm settings documentation URLs
• 7f03502 Docs: upgrade to latest Astro Starlight
• 63b0a11 Tests: remove a possible race condition
• c4d6aec Docs: Highlight that Windows ARM64 support is experimental
• e75ae97 Ensure PDF scale-on-load optimisation uses background #4398
• 956d72d Prerelease v0.34.2-rc.0
• 00e66ef Bump deps
• db3a452 Simplify 94481a9
• d36fd50 Prefer use of bandjoin_const() and list-initialization
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Release v0.0.6

Changes in this Release:

Bump dependabot/fetch-metadata from 2.2.0 to 2.3.0
Bumps dependabot/fetch-metadata from 2.2.0 to 2.3.0.

Release notes

Sourced from dependabot/fetch-metadata's releases.

v2.3.0

What's Changed

• Bump actions/create-github-app-token from 1.10.2 to 1.10.3 by @​dependabot in dependabot/fetch-metadata#537
• Update readme to include an if conditional by @​Nishnha in dependabot/fetch-metadata#548
• Silence audit and funding messages from npm by @​jeffwidman in dependabot/fetch-metadata#550
• Bump actions/create-github-app-token from 1.10.3 to 1.11.0 by @​dependabot in dependabot/fetch-metadata#554
• fix readme action example by @​CloudNStoyan in dependabot/fetch-metadata#563
• Fixed missing outputs in action.yml by @​CatChen in dependabot/fetch-metadata#564
• Handle branch names containing dependency group by @​CloudNStoyan in dependabot/fetch-metadata#565
• v2.3.0 by @​fetch-metadata-action-automation in dependabot/fetch-metadata#543

New Contributors

• @​CloudNStoyan made their first contribution in dependabot/fetch-metadata#563
• @​CatChen made their first contribution in dependabot/fetch-metadata#564

Full Changelog: dependabot/fetch-metadata@v2...v2.3.0

Commits

• d7267f6 Merge pull request #543 from dependabot/bump-to-v2.3.0
• e3dd295 v2.3.0
• 3da9521 Merge pull request #565 from CloudNStoyan/main
• de52f60 update build
• 59d2b1f fix incorrect parsing of directory when using dependency-group
• 0d27069 Merge pull request #564 from CatChen/fixed-missing-outputs-in-action-yml
• 5a7546a Fixed missing outputs in action.yml
• 06ea45a Merge pull request #563 from CloudNStoyan/main
• bbfca7e fix readme action example
• b0d0393 Merge pull request #554 from dependabot/dependabot/github_actions/actions/cre...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Release v0.0.5

Changes in this Release:

Bump anothrNick/github-tag-action from 1.67.0 to 1.71.0
Bumps anothrNick/github-tag-action from 1.67.0 to 1.71.0.

Release notes

Sourced from anothrNick/github-tag-action's releases.

1.71.0

What's Changed

• Add tag message override by @​omerap12 in anothrNick/github-tag-action#323

New Contributors

• @​omerap12 made their first contribution in anothrNick/github-tag-action#323

Full Changelog: anothrNick/github-tag-action@1...1.71.0

1.70.0

What's Changed

• Add old_tag Output to the README by @​gabriel-stackhouse in anothrNick/github-tag-action#314
• Fix Auto Releases by @​gabriel-stackhouse in anothrNick/github-tag-action#317

New Contributors

• @​gabriel-stackhouse made their first contribution in anothrNick/github-tag-action#314

Full Changelog: anothrNick/github-tag-action@1...1.70.0

Commits

• f278d49 Merge pull request #323 from omerap12/add-tag-message
• 7a5eb51 Add tag message override
• 777684d Merge pull request #317 from gabriel-stackhouse/auto-releases
• 5a9c832 Simple comment tweak to trigger the workflow on merge
• cf38bfd Remove commented-out lines in the release workflow
• c092e52 Use the correct ID
• ebf2cb9 Add a working automated release action to the main workflow
• 5b0f9e4 Add old_tag Output to the README (#314)
• afe4b67 Merge pull request #315 from druskus20/revert-revert-pr
• e5fc474 fix: fix a spelling error
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Release v0.0.4

Changes in this Release:

Bump dependabot/fetch-metadata from 1.1.1 to 2.2.0
Bumps dependabot/fetch-metadata from 1.1.1 to 2.2.0.

Release notes

Sourced from dependabot/fetch-metadata's releases.

v2.2.0

What's Changed

• Bump actions/create-github-app-token from 1.9.0 to 1.10.0 by @​dependabot in dependabot/fetch-metadata#523
• Bump actions/create-github-app-token from 1.10.0 to 1.10.2 by @​dependabot in dependabot/fetch-metadata#534
• Bump braces from 3.0.2 to 3.0.3 by @​dependabot in dependabot/fetch-metadata#532
• v2.2.0 by @​fetch-metadata-action-automation in dependabot/fetch-metadata#520

Full Changelog: dependabot/fetch-metadata@v2...v2.2.0

v2.1.0

What's Changed

• Relax engine-strict=true by @​jeffwidman in dependabot/fetch-metadata#510
• Handle branch names containing hyphen separators by @​tspencer244 in dependabot/fetch-metadata#450
• Switch to monthly release cadence by @​jeffwidman in dependabot/fetch-metadata#509
• v2.1.0 by @​fetch-metadata-action-automation in dependabot/fetch-metadata#518

New Contributors

• @​tspencer244 made their first contribution in dependabot/fetch-metadata#450

Full Changelog: dependabot/fetch-metadata@v2.0.0...v2.1.0

v2.0.0 - Switch to node20

What's Changed

• Upgrade from node16 to node20 by @​Nishnha in dependabot/fetch-metadata#443 👈 this is a potentially breaking change for some workflows
• v2 is the new tracking tag by @​jeffwidman in dependabot/fetch-metadata#506
• v2.0.0 by @​fetch-metadata-action-automation in dependabot/fetch-metadata#508

Full Changelog: dependabot/fetch-metadata@v1.7.0...v2.0.0

v1.7.0

What's Changed

• Bump dotenv from 16.0.3 to 16.3.1 by @​dependabot in dependabot/fetch-metadata#404
• Bump @​types/node from 20.2.3 to 20.3.3 by @​dependabot in dependabot/fetch-metadata#407
• Bump the eslint-dependencies group with 4 updates by @​dependabot in dependabot/fetch-metadata#409
• Update dependabot.yml by @​bdragon in dependabot/fetch-metadata#410
• Bump @​types/node from 20.3.3 to 20.4.0 by @​dependabot in dependabot/fetch-metadata#411
• Bump yaml from 2.2.1 to 2.3.1 by @​dependabot in dependabot/fetch-metadata#390
• Bump tough-cookie from 4.0.0 to 4.1.3 by @​dependabot in dependabot/fetch-metadata#412
• Bump @​types/node from 20.4.0 to 20.4.1 by @​dependabot in dependabot/fetch-metadata#413
• Generate Dependabot PRs on Sundays weekly by @​abdulapopoola in dependabot/fetch-metadata#417
• Aggressively group prod and dev dependencies for NPM by @​abdulapopoola in dependabot/fetch-metadata#420
• Update .nvmrc to latest node 16 LTS version by @​abdulapopoola in dependabot/fetch-metadata#422
• Bump the dev-dependencies group with 9 updates by @​dependabot in dependabot/fetch-metadata#421
• Bump the dev-dependencies group with 1 update by @​dependabot in dependabot/fetch-metadata#423
• Check for uncommitted files beyond the diff directory by @​jeffwidman in dependabot/fetch-metadata#278
• Bump the dev-dependencies group with 6 updates by @​dependabot in dependabot/fetch-metadata#424
• Bump the dev-dependencies group with 3 updates by @​dependabot in dependabot/fetch-metadata#425
• Bump the dev-dependencies group with 6 updates by @​dependabot in dependabot/fetch-metadata#428

... (truncated)

Commits

• dbb049a v2.2.0 (#520)
• 36bf1f9 Merge pull request #532 from dependabot/dependabot/npm_and_yarn/braces-3.0.3
• a3420b5 Bump braces from 3.0.2 to 3.0.3
• 006e43f Merge pull request #534 from dependabot/dependabot/github_actions/actions/cre...
• 9c55ebe Bump actions/create-github-app-token from 1.10.0 to 1.10.2
• 325b863 Merge pull request #523 from dependabot/dependabot/github_actions/actions/cre...
• aec2f3e Bump actions/create-github-app-token from 1.9.0 to 1.10.0

Release v0.0.3

Changes in this Release:

Bump sharp from 0.32.6 to 0.33.5
Bumps sharp from 0.32.6 to 0.33.5.

Changelog

Sourced from sharp's changelog.

v0.33.5 - 16th August 2024

• Upgrade to libvips v8.15.3 for upstream bug fixes.

• Add pageHeight and pages to response of multi-page output. #3411

• Ensure option to force use of a globally-installed libvips works correctly. #4111 @​project0

• Minimise use of engines property to improve yarn v1 support. #4130

• Ensure sharp.format.heif includes only AVIF when using prebuilt binaries. #4132

• Add support to recomb operation for 4x4 matrices. #4147 @​ton11797

• Expose PNG text chunks as comments metadata. #4157 @​nkeynes

• Expose optional precision and minAmplitude parameters of blur operation. #4168 #4172 @​marcosc90

• Ensure keepIccProfile avoids colour transformation where possible. #4186

• TypeScript: chromaSubsampling metadata is optional. #4191 @​DavidVaness

v0.33.4 - 16th May 2024

• Remove experimental status from pipelineColourspace.

• Reduce default concurrency when musl thread over-subscription detected.

• TypeScript: add missing definitions for OverlayOptions. #4048 @​ike-gg

• Install: add advanced option to force use of a globally-installed libvips. #4060

... (truncated)

Commits

• fc32e0b Release v0.33.5
• 0546e48 Docs: changelog entry for #4191
• ab65b7a TypeScript: chromaSubsampling can be undefined (#4191)
• 2474bd4 Prerelease v0.33.5-rc.1
• ff2e689 Remove yarn v1 specifics from help text
• 6327f13 CI: Add yarn v1 to packaging tests
• f1e69a2 Prerelease v0.33.5-rc.0
• 3c14dbb Minimise use of engines property to improve yarn v1 support
• 82cebc3 Upgrade to libvips v8.15.3 for Linux ARMv6
• ad36fa0 Ensure emnapiInit function is exported
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Release v0.0.2

Changes in this Release:

Bump sharp from 0.32.6 to 0.33.2
Bumps sharp from 0.32.6 to 0.33.2.

Changelog

Sourced from sharp's changelog.

v0.33.2 - 12th January 2024

• Upgrade to libvips v8.15.1 for upstream bug fixes.

• TypeScript: add definition for keepMetadata. #3914 @​abhi0498

• Ensure extend operation stays sequential when copying (regression in 0.32.0). #3928

• Improve error handling for unsupported multi-page rotation. #3940

v0.33.1 - 17th December 2023

• Add support for Yarn Plug'n'Play filesystem layout. #3888

• Emit warning when attempting to use invalid ICC profiles. #3895

• Ensure VIPS_NOVECTOR environment variable is respected. #3897 @​icetee

v0.33.0 - 29th November 2023

• Drop support for Node.js 14 and 16, now requires Node.js ^18.17.0 or >= 20.3.0

• Prebuilt binaries distributed via npm registry and installed via package manager.

• Building from source requires dependency on node-addon-api.

• Remove sharp.vendor.

• Partially deprecate withMetadata(), use withExif() and withIccProfile().

• Add experimental support for WebAssembly-based runtimes. @​RReverser

• Options for trim operation must be an Object, add new lineArt option. #2363

• Improve luminance of tint operation with weighting function. #3338 @​jcupitt

• Ensure all Error objects contain a stack property. #3653

... (truncated)

Commits

• bcb22af Release v0.33.2
• d04dc62 Prerelease v0.33.2-rc.1
• c30d355 CI: Fix npm smoke test expectation
• 49cb148 Prerelease v0.33.2-rc.0
• 3bc31a8 CI: Verify emscripten versions match
• c28523e CI: Update Emscripten Docker image to 3.1.51 (#3907)
• 278f393 Upgrade to libvips v8.15.1
• cbf68c1 Improve error for unsupported multi-page rotation #3940
• 45e8071 Add runtime check for outdated Node.js version
• b96389d Docs: refresh index
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)