Skip to content

build(deps): bump sharp from 0.34.5 to 0.35.4 in /apps/web in the npm_and_yarn group across 1 directory - #7

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/web/npm_and_yarn-484b35d1ea
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/web/npm_and_yarn-484b35d1ea

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 1 update in the /apps/web directory: sharp.

Updates sharp from 0.34.5 to 0.35.4

Release notes

Sourced from sharp's releases.

v0.35.4

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.3

v0.35.4-rc.0

... (truncated)

Commits
  • 7f1a0a2 Release v0.35.4
  • f927818 Upgrade to sharp-libvips v1.3.3
  • e802092 Prerelease v0.35.4-rc.0
  • e13eb2f CI: Fix wasm32 build (#4589)
  • a82a0b3 Upgrade to libvips v8.18.6
  • 8044fe4 Bound resize dimensions to coordinate limit
  • 147f859 Docs: changelog entries for #4578 #4584
  • ee5bfb8 Tests: use yauzl directly rather than via extract-zip wrapper
  • 7a77889 Bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0 (#4588)
  • ea5bef2 Improve support for input Streams finishing before output is requested (#4584)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 26, 2026

dporkka commented Sep 18, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps the npm_and_yarn group with 1 update in the /apps/web directory: [sharp](https://github.com/lovell/sharp).


Updates `sharp` from 0.34.5 to 0.35.4
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.34.5...v0.35.4)

---
updated-dependencies:
- dependency-name: sharp
  dependency-version: 0.35.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump sharp from 0.34.5 to 0.35.3 in /apps/web in the npm_and_yarn group across 1 directory build(deps): bump sharp from 0.34.5 to 0.35.4 in /apps/web in the npm_and_yarn group across 1 directory Sep 18, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/apps/web/npm_and_yarn-484b35d1ea branch from 59ad167 to bc04461 Compare September 18, 2026 20:10

dporkka commented Sep 18, 2026

Copy link
Copy Markdown
Owner

Closing as superseded. This PR upgrades Next.js from 16.3.0-preview.3 to the now-obsolete 16.3.0-preview.9 in order to pick up sharp 0.35.3. Next.js 16.3 is now stable, so a fresh dependency update should target the current stable 16.3.x line rather than land an intermediate preview.

@dporkka dporkka closed this Sep 18, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 18, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/apps/web/npm_and_yarn-484b35d1ea branch September 18, 2026 20:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant