Skip to content

Bump sharp from 0.32.6 to 0.34.2#567

Merged
Mrtenz merged 1 commit into
mainfrom
mrtenz/sharp@0.34.2
Jun 27, 2025
Merged

Bump sharp from 0.32.6 to 0.34.2#567
Mrtenz merged 1 commit into
mainfrom
mrtenz/sharp@0.34.2

Conversation

@Mrtenz

@Mrtenz Mrtenz commented Jun 27, 2025

Copy link
Copy Markdown
Member

This bumps sharp from 0.32.6 to 0.34.2 to remove tar-fs, resolving this Dependabot alert. Unfortunately Gatsby is pinned to an old version of Sharp, so I had to add a resolution.

@Mrtenz
Mrtenz requested a review from a team as a code owner June 27, 2025 08:38
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedsemver@​7.5.4 ⏵ 7.7.2100 +1100100 +187100

View full report

@Mrtenz
Mrtenz enabled auto-merge (squash) June 27, 2025 08:41
@Mrtenz
Mrtenz merged commit 20c1642 into main Jun 27, 2025
19 of 20 checks passed
@Mrtenz
Mrtenz deleted the mrtenz/sharp@0.34.2 branch June 27, 2025 08:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants