Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: lcf2212dev/image-size-next
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v2.0.2
Choose a base ref
...
head repository: lcf2212dev/image-size-next
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v2.1.1
Choose a head ref
  • 5 commits
  • 28 files changed
  • 1 contributor

Commits on Aug 13, 2026

  1. fix: prevent DoS infinite loops in box and JPEG parsers 

    Harden ISO-BMFF box walking (HEIF/JXL/JP2), ICNS entries, and JPEG
segment lengths against zero-size / non-advancing offsets.

Fixes CVE-2025-71329 and CVE-2025-71330.
    @lcf2212dev
    lcf2212dev committed Aug 13, 2026
    Configuration menu
    Copy the full SHA
    3b4976f View commit details
    Browse the repository at this point in the history

  2. chore: optional-chain type handlers and drop unused fs import 

    Avoid non-null assertions in detector/lookup and remove an unused
node:fs import from the TIFF handler (browser-safe).
    @lcf2212dev
    lcf2212dev committed Aug 13, 2026
    Configuration menu
    Copy the full SHA
    776eaa7 View commit details
    Browse the repository at this point in the history

  3. test: assert image fixture globs are non-empty 

    Guards against regressions like specs/images/valid*.* matching zero
files and silently dropping the fixture suite.
    @lcf2212dev
    lcf2212dev committed Aug 13, 2026
    Configuration menu
    Copy the full SHA
    8c1a28f View commit details
    Browse the repository at this point in the history

  4. chore: publish as image-size-next 2.1.1 

    Rename the package and CLI, keep MIT dual copyright, document the
compare URL against upstream v2.0.2, and restore fixture-glob
documentation in the changelog.
    @lcf2212dev
    lcf2212dev committed Aug 13, 2026
    Configuration menu
    Copy the full SHA
    d4f8ce4 View commit details
    Browse the repository at this point in the history

  5. chore: refresh package-lock.json for 2.1.1

    @lcf2212dev
    lcf2212dev committed Aug 13, 2026
    Configuration menu
    Copy the full SHA
    a55acb5 View commit details
    Browse the repository at this point in the history
Loading