Bump @11ty/eleventy-img from 5.0.0 to 6.0.2

[dependabot]

Bumps @11ty/eleventy-img from 5.0.0 to 6.0.2.

Release notes

Sourced from @​11ty/eleventy-img's releases.

Eleventy Image v6.0.2 (dependency bump for security audit)

• bump image-size minimum version for security by @​joshvickerson in 11ty/eleventy-img#290

Milestone: https://github.com/11ty/eleventy-img/milestone/24?closed=1 Full Changelog: 11ty/eleventy-img@v6.0.1...v6.0.2

Eleventy Image v6.0.1 (Tiny Bugfix Release)

• Bug fix when using animated images with transformOnRequest #273

Milestone: https://github.com/11ty/eleventy-img/milestone/23?closed=1 Full Changelog: 11ty/eleventy-img@v6.0.0...v6.0.1

Eleventy Image v6.0.0

Notably, for maximum compatibility this package is still CommonJS (not yet ESM). Node minimum is still 18+ (unchanged from Eleventy Image v4).

Breaking Changes

• useCacheValidityInHash option has been removed #146
• Transform method will reuse existing <img width> attribute (if single integer) as eleventy:widths value #234

The following changes likely require no action on your part (but are nonetheless breaking):

• Better color support (P3, AdobeRGB, et al): images retain ICC profiles by default #244
• Dependency major upgrade: @11ty/eleventy-fetch from v4 to v5
• Dependency major upgrade @11ty/eleventy-utils from v1 to v2
• Default metadata object returned will no longer include empty format arrays { jpeg: [] } #242

Features

• Uses native fetch() (no more node-fetch, via eleventy-fetch upgrade) and works better with caching on remote urls, consistency on file names with sync methods #252 #262 #146
• returnType: "html" option will return the generated HTML directly instead of the metadata object #267
  • htmlOptions: {} are options passed to the generateHTML function
• Output format filtering (opt-out with formatFiltering option). Filters out output formats that do not support animation or transparency automatically.
  • Animation friendly formats #260
  • Transparency friendly formats #105
• Adds failOnError: true option to avoid throwing an error when image processing fails (and failing your build) #225 See also the eleventy:optional attribute below.
• Adds new transform hook for running your own sharp customizations 11ty/eleventy-img#52 (can be used to add custom cropping!)
• Improved error messaging when incorrectly using the default export with eleventyConfig.addPlugin #263
• Concurrency auto-scales per machine resources (between 8 min and 16 max) #258
• Support full URLs in urlPath option #239
• generateHTML: Missing sizes error relaxed when using loading="lazy" HTML, swap to use sizes="auto" instead #207
• New generateHTML option (also available via htmlOptions) forfallback: "smallest" to choose smallest image for <img> fallback and width/height dimensions #265 #129

Transform Method

• Reuse existing <img width> attribute (if single integer) as eleventy:widths value #234
• Adds eleventy:optional HTML attribute so that errors in image processing will not fail the build (in different ways) #259
  1. Remove src attribute
  2. Leave as-is eleventy:optional="keep"
  3. Replace with a transparent Data URI eleventy:optional="placeholder"

... (truncated)

Commits

• 092ad7a v6.0.2
• 906d14e Deps
• 71c2d55 Merge branch 'main' of github.com:11ty/eleventy-img
• 028ea5f Merge pull request #290 from joshvickerson/main
• a88755a bump image-size dependency for security
• 1844d26 Update deps, sharp to v0.34
• 1bace07 v6.0.1
• 8bb0f5b Fixes #273
• d262378 v6.0.0
• 90cc896 v6.0.0-beta.5
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #181.