Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 20, 2025

Bumps @canvas/image-data from 1.0.0 to 1.1.0.

Release notes

Sourced from @​canvas/image-data's releases.

🚢 1.1.0 / 2025-10-14

🎉 Enhancements

  • Add resolution to index.js for react-native environment (#4)

🌹 Internal Changes

  • Bump js-yaml in package lock
  • Bump dev-dependencies
  • Upgrade to Standard v14
  • Remove package lock file
Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Bumps devDependency @canvas/image-data from 1.0.0 to 1.1.0 in injected/package.json and updates package-lock.json accordingly.

Written by Cursor Bugbot for commit 0678117. This will update automatically on new commits. Configure here.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Update one or more dependencies version minor Increment the minor version when merged labels Oct 20, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 20, 2025 10:43
@dependabot dependabot bot added dependencies Update one or more dependencies version minor Increment the minor version when merged labels Oct 20, 2025
@netlify
Copy link

netlify bot commented Oct 20, 2025

Deploy Preview for content-scope-scripts canceled.

Name Link
🔨 Latest commit 0678117
🔍 Latest deploy log https://app.netlify.com/projects/content-scope-scripts/deploys/6908c4fb91d2de0008539108

@github-actions
Copy link

github-actions bot commented Oct 20, 2025

Temporary Branch Update

The temporary branch has been updated with the latest changes. Below are the details:

Please use the above install command to update to the latest version.

Bumps [@canvas/image-data](https://github.com/node-gfx/image-data) from 1.0.0 to 1.1.0.
- [Release notes](https://github.com/node-gfx/image-data/releases)
- [Commits](node-gfx/image-data@v1.0.0...v1.1.0)

---
updated-dependencies:
- dependency-name: "@canvas/image-data"
  dependency-version: 1.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/main/canvas/image-data-1.1.0 branch from 977f840 to 0678117 Compare November 3, 2025 15:06
@jonathanKingston
Copy link
Contributor

@cursoragent can you review against our current code and outline potential impacts based on the changelogs of the update?

@cursor
Copy link

cursor bot commented Dec 8, 2025

Review: @canvas/image-data 1.0.0 → 1.1.0

Usage in Codebase

The package is used in 2 locations, both in injected/:

  1. unit-test/canvas.js (lines 2, 25) - Imports ImageData to create mock image data for testing canvas fingerprinting protection:
import ImageData from '@canvas/image-data';
    return new ImageData(new Uint8ClampedArray(inVal), height, width);
  1. src/canvas.js (line 63) - Type annotation only (JSDoc):
 * @param {import("@canvas/image-data")} imageData

Changelog Analysis

Change Impact on Our Code
Add resolution for React Native environment None - We're not using React Native
Bump js-yaml in package lock None - Internal to package
Bump dev-dependencies None - Internal to package
Upgrade to Standard v14 None - Linting config internal to package
Remove package lock file None - Does not affect consumers

Risk Assessment

Low risk - Safe to merge:

  • DevDependency only - Not shipped to production, used only for unit tests
  • No API changes - The ImageData constructor signature (data, width, height) is unchanged
  • No breaking changes - Minor semver bump with additive feature only
  • Limited surface area - Only affects canvas fingerprinting unit tests

Recommendation

Approve - This is a straightforward minor version bump with no functional impact on the codebase. The only change (React Native support) is irrelevant to this project's Node.js/browser testing context.


Open in Cursor Open in Web

Learn more about Cursor Agents

@cursor
Copy link

cursor bot commented Dec 8, 2025

Cursor Agent can help with this pull request. Just @cursor in comments and I'll start working on changes in this branch.
Learn more about Cursor Agents

@jonathanKingston jonathanKingston added this pull request to the merge queue Dec 8, 2025
Merged via the queue into main with commit fe0650b Dec 8, 2025
19 checks passed
@jonathanKingston jonathanKingston deleted the dependabot/npm_and_yarn/main/canvas/image-data-1.1.0 branch December 8, 2025 11:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Update one or more dependencies version minor Increment the minor version when merged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant