[Snyk] Upgrade jimp from 0.16.1 to 0.22.4 #13

snyk-bot · 2023-03-01T16:38:24Z

Snyk has created this PR to upgrade jimp from 0.16.1 to 0.22.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 101 versions ahead of your current version.
The recommended version was released 23 days ago, on 2023-02-07.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	430/1000 Why? CVSS 8.6	No Known Exploit
Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	430/1000 Why? CVSS 8.6	Proof of Concept
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	430/1000 Why? CVSS 8.6	No Known Exploit
Information Exposure SNYK-JS-SIMPLEGET-2361683	430/1000 Why? CVSS 8.6	Proof of Concept
Denial of Service (DoS) SNYK-JS-TRIMNEWLINES-1298042	430/1000 Why? CVSS 8.6	No Known Exploit
Denial of Service (DoS) SNYK-JS-JPEGJS-2859218	430/1000 Why? CVSS 8.6	Proof of Concept
Denial of Service (DoS) SNYK-JS-JPEGJS-2859218	430/1000 Why? CVSS 8.6	Proof of Concept
Prototype Poisoning SNYK-JS-QS-3153490	430/1000 Why? CVSS 8.6	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ISSVG-1085627	430/1000 Why? CVSS 8.6	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ISSVG-1243891	430/1000 Why? CVSS 8.6	Proof of Concept
Denial of Service (DoS) SNYK-JS-JPEGJS-570039	430/1000 Why? CVSS 8.6	No Known Exploit
Information Exposure SNYK-JS-NODEFETCH-2342118	430/1000 Why? CVSS 8.6	No Known Exploit
Prototype Pollution SNYK-JS-MINIMIST-2429795	430/1000 Why? CVSS 8.6	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: jimp

0.22.4 - 2023-02-07
🚀 Enhancement
- @ jimp/core, @ jimp/plugin-color
  - update tinycolor2 #1187 (@ hipstersmoothie)
Authors: 1
- Andrew Lisowski (@ hipstersmoothie)
0.22.4--canary.1187.30d10f964404705d383d7163b7d3f85baa2201b7.0 - 2023-02-07
0.22.3 - 2023-02-06
🚀 Enhancement
- jimp
  - Fix browser build #1184 (@ hipstersmoothie)
Authors: 1
- Andrew Lisowski (@ hipstersmoothie)
0.22.3--canary.1184.ff6583af74ba85d9555c36db2844886e269feb16.0 - 2023-02-06
0.22.2 - 2023-02-06
🎉 This release contains work from new contributors! 🎉

Thanks for all your work!

❤️ Ollie Chick (@ olliechick)

❤️ Andrey Kutejko (@ andy128k)

🚀 Enhancement
- @ jimp/core
  - Change type of mime from string to string|number to fix #990 #1182 (@ olliechick)
📝 Documentation
- Remove mentioning of favicons #1176 (@ andy128k)
Authors: 2
- Andrey Kutejko (@ andy128k)
- Ollie Chick (@ olliechick)
0.22.1 - 2023-02-06
🚀 Enhancement
- @ jimp/core
  - upgrade mkdrip #1173 (@ hipstersmoothie)
🏠 Internal
- Windows scripts #1172 (@ hipstersmoothie)
- @ jimp/core, @ jimp/custom, jimp, @ jimp/plugin-blit, @ jimp/plugin-blur, @ jimp/plugin-circle, @ jimp/plugin-color, @ jimp/plugin-contain, @ jimp/plugin-cover, @ jimp/plugin-crop, @ jimp/plugin-displace, @ jimp/plugin-dither, @ jimp/plugin-fisheye, @ jimp/plugin-flip, @ jimp/plugin-gaussian, @ jimp/plugin-invert, @ jimp/plugin-mask, @ jimp/plugin-normalize, @ jimp/plugin-print, @ jimp/plugin-resize, @ jimp/plugin-rotate, @ jimp/plugin-scale, @ jimp/plugin-shadow, @ jimp/plugin-threshold, @ jimp/plugins, @ jimp/test-utils, @ jimp/bmp, @ jimp/gif, @ jimp/jpeg, @ jimp/png, @ jimp/tiff, @ jimp/types, @ jimp/utils
  - rename master to main #1169 (@ hipstersmoothie)
Authors: 1
- Andrew Lisowski (@ hipstersmoothie)
0.22.1--canary.1173.30a931db5f6552c59e4c99f41fdb9e2b9ccf8291.0 - 2023-02-06
0.22.1--canary.1169.6db477d088d28aea43b31d9ca8b0eaf74dc511d1.0 - 2023-02-06
0.22.0 - 2023-02-06
Release Notes

Switch to fetch for url requests (#1165)

The underlying library for fetching images has been changed.

loadFromURL can take a set of options. When in the node environment all those options are passed to phin. Any options used to pass to phin that are not supported by the fetch API will stop working.

💥 Breaking Change
- @ jimp/core
  - Switch to fetch for url requests #1165 (@ danielholmes)
🏠 Internal
- @ jimp/core, @ jimp/custom, jimp, @ jimp/plugin-blit, @ jimp/plugin-circle, @ jimp/plugin-color, @ jimp/plugin-contain, @ jimp/plugin-cover, @ jimp/plugin-crop, @ jimp/plugin-fisheye, @ jimp/plugin-flip, @ jimp/plugin-mask, @ jimp/plugin-normalize, @ jimp/plugin-print, @ jimp/plugin-resize, @ jimp/plugin-rotate, @ jimp/plugin-shadow, @ jimp/plugin-threshold, @ jimp/test-utils, @ jimp/bmp, @ jimp/gif, @ jimp/jpeg, @ jimp/png, @ jimp/tiff
  - switch from should to expect #1163 (@ hipstersmoothie)
- @ jimp/core, @ jimp/plugin-resize
  - delete CLI package #1162 (@ hipstersmoothie)
- @ jimp/core, jimp, @ jimp/plugin-blit, @ jimp/plugin-circle, @ jimp/plugin-color, @ jimp/plugin-contain, @ jimp/plugin-cover, @ jimp/plugin-crop, @ jimp/plugin-fisheye, @ jimp/plugin-flip, @ jimp/plugin-mask, @ jimp/plugin-normalize, @ jimp/plugin-print, @ jimp/plugin-resize, @ jimp/plugin-rotate, @ jimp/plugin-shadow, @ jimp/plugin-threshold, @ jimp/test-utils, @ jimp/bmp, @ jimp/gif, @ jimp/jpeg, @ jimp/png, @ jimp/tiff
  - Change test matching strategy to include all test files #1161 (@ danielholmes)
Authors: 2
- Andrew Lisowski (@ hipstersmoothie)
- Daniel Holmes (@ danielholmes)
0.21.4--canary.1163.d07ed6254d130e2995d24101e93427ec091016e6.0 - 2023-02-06
0.21.4--canary.1163.a26f5b300ee88c2fadb9909dd390cb4380b32a42.0 - 2023-02-06
0.21.4--canary.1163.7b9287fff1036ae67190d5ea3a8dec9926373a63.0 - 2023-02-06
0.21.4--canary.1163.6a6ae39e83bd731ccd25120a160a75b32273f9bd.0 - 2023-02-06
0.21.3 - 2023-02-05
🎉 This release contains work from a new contributor! 🎉

Thank you, Daniel Holmes (@ danielholmes), for all your work!

🚀 Enhancement
- run workflow for PRs #1156 (@ hipstersmoothie)
🐛 Bug Fix
- @ jimp/core, @ jimp/plugin-resize
  - Change some exports to move towards more ESM compatibility #1154 (@ danielholmes)
🏠 Internal
- Workflow fix #1159 (@ hipstersmoothie)
Authors: 2
- Andrew Lisowski (@ hipstersmoothie)
- Daniel Holmes (@ danielholmes)
0.21.2 - 2023-02-05
v0.21.2
0.21.2--canary.1156.ba9fec9d0c9109924b4a5acab31bcaef8159a610.0 - 2023-02-05
0.21.2--canary.1156.8b2cc45.0 - 2023-02-05
0.21.2--canary.1156.1f8a92bfc1cbc6b5f3ad2490d0ec86710c81f635.0 - 2023-02-05
0.21.1 - 2023-02-05
🚀 Enhancement
- @ jimp/core
  - remove export hack #1153 (@ hipstersmoothie)
Authors: 1
- Andrew Lisowski (@ hipstersmoothie)
0.21.1--canary.1153.3cc6d7b.0 - 2023-02-05
0.21.0 - 2023-02-05
Release Notes

Babel Refactor (#1149)

Marking this as a "breaking release" because it might change what deps need to be installed.

All modules should be exported as valid cjs and esm

💥 Breaking Change
- @ jimp/core, @ jimp/custom, jimp, @ jimp/plugin-blit, @ jimp/plugin-blur, @ jimp/plugin-circle, @ jimp/plugin-color, @ jimp/plugin-contain, @ jimp/plugin-cover, @ jimp/plugin-crop, @ jimp/plugin-displace, @ jimp/plugin-dither, @ jimp/plugin-fisheye, @ jimp/plugin-flip, @ jimp/plugin-gaussian, @ jimp/plugin-invert, @ jimp/plugin-mask, @ jimp/plugin-normalize, @ jimp/plugin-print, @ jimp/plugin-resize, @ jimp/plugin-rotate, @ jimp/plugin-scale, @ jimp/plugin-shadow, @ jimp/plugin-threshold, @ jimp/plugins, @ jimp/test-utils, @ jimp/bmp, @ jimp/gif, @ jimp/jpeg, @ jimp/png, @ jimp/tiff, @ jimp/types, @ jimp/utils
  - Babel Refactor #1149 (@ hipstersmoothie)
Authors: 1
- Andrew Lisowski (@ hipstersmoothie)
0.21.0--canary.1149.a81f653.0 - 2023-02-05
0.21.0--canary.1149.3239903.0 - 2023-02-05
0.20.2 - 2023-02-05
🚀 Enhancement
- @ jimp/core
  - add phash to types #1144 (@ hipstersmoothie)
Authors: 1
- Andrew Lisowski (@ hipstersmoothie)
0.20.1 - 2023-02-05
0.20.0 - 2023-02-05
0.19.0 - 2023-02-05
0.18.0 - 2023-02-05
0.18.0--canary.1135.911ed04.0 - 2023-02-04
0.18.0--canary.1133.54bf269.0 - 2023-02-04
0.17.10 - 2023-02-04
0.17.9 - 2023-02-04
0.17.9--canary.fc042e5.0 - 2023-02-05
0.17.9--canary.1144.3455afd.0 - 2023-02-05
0.17.9--canary.1143.90575e6.0 - 2023-02-05
0.17.9--canary.1141.cd4d455.0 - 2023-02-05
0.17.9--canary.1140.e3ff49d.0 - 2023-02-04
0.17.9--canary.1140.831bc3c.0 - 2023-02-04
0.17.9--canary.1140.4042b43.0 - 2023-02-04
0.17.8 - 2023-02-04
0.17.8--canary.1137.476d7bd.0 - 2023-02-04
0.17.7 - 2023-02-04
0.17.6 - 2023-02-04
0.17.6--canary.cd893f3.0 - 2023-02-04
0.17.6--canary.1cb89cf.0 - 2023-02-04
0.17.6--canary.1137.5e459dc.0 - 2023-02-04
0.17.5 - 2023-02-04
0.17.4 - 2023-02-04
0.17.3 - 2023-02-04
0.17.3--canary.1136.7f5f5d8.0 - 2023-02-04
0.17.2 - 2023-02-04
0.17.1 - 2023-02-04
0.17.1--canary.e22c14a.0 - 2023-02-04
0.17.1--canary.1134.e007a48.0 - 2023-02-04
0.17.0 - 2023-02-04
0.17.0--canary.1131.af3cb94.0 - 2023-02-04
0.16.13 - 2023-02-04
0.16.12 - 2023-02-04
0.16.11 - 2023-02-04
0.16.10 - 2023-02-04
0.16.9 - 2023-02-04
0.16.8 - 2023-02-04
0.16.7 - 2023-02-04
0.16.6 - 2023-02-04
0.16.5 - 2023-02-04
0.16.4 - 2023-02-04
0.16.3 - 2023-02-04
0.16.3-canary.1125.1580.0 - 2023-02-03
0.16.3-canary.1113.1404.0 - 2022-12-10
0.16.3-canary.1109.1388.0 - 2022-11-21
0.16.3-canary.1108.1382.0 - 2022-11-16
0.16.3-canary.1100.1371.0 - 2022-10-09
0.16.3-canary.1085.1581.0 - 2023-02-03
0.16.3-canary.1082.1591.0 - 2023-02-03
0.16.3-canary.1045.1590.0 - 2023-02-03
0.16.3-canary.1040.1589.0 - 2023-02-03
0.16.3-canary.1014.1579.0 - 2023-02-03
0.16.3-canary.999.1588.0 - 2023-02-03
0.16.3-canary.993.1592.0 - 2023-02-03
0.16.2 - 2022-09-15
0.16.2-canary.1094.1345.0 - 2022-08-02
0.16.2-canary.1093.1332.0 - 2022-07-25
0.16.2-canary.1086.1311.0 - 2022-05-21
0.16.2-canary.1084.1305.0 - 2022-05-16
0.16.2-canary.1082.1294.0 - 2022-04-28
0.16.2-canary.1080.1288.0 - 2022-04-04
0.16.2-canary.1073.1276.0 - 2022-02-21
0.16.2-canary.1070.1265.0 - 2022-02-11
0.16.2-canary.1052.1235.0 - 2021-10-27
0.16.2-canary.1051.1228.0 - 2021-10-22
0.16.2-canary.1045.1221.0 - 2021-09-01
0.16.2-canary.1016.1185.0 - 2021-05-25
0.16.2-canary.1008.1164.0 - 2021-04-29
0.16.2-canary.984.1126.0 - 2021-01-25
0.16.2-canary.969.1115.0 - 2020-12-11
0.16.2-canary.964.1101.0 - 2020-11-24
0.16.2-canary.956.1095.0 - 2020-10-23
0.16.2-canary.947.1077.0 - 2020-10-03
0.16.2-canary.938.1059.0 - 2020-09-07
0.16.2-canary.934.1053.0 - 2020-08-28
0.16.2-canary.919.1052.0 - 2020-08-28
0.16.1 - 2020-08-28

from jimp GitHub release notes

Commit messages

Package name: jimp

81bddef "Bump version to: v0.22.4 [skip ci]"
398deef Update CHANGELOG.md [skip ci]
14e754f update tinycolor2 (add CyberX electron/apps#1187)
cd8ef22 "Bump version to: v0.22.3 [skip ci]"
71d4a4d Update CHANGELOG.md [skip ci]
1a4f22e Fix browser build (*ignore* created a new repo electron/apps#1184)
4f906c0 "Bump version to: v0.22.2 [skip ci]"
5d8c317 Update contributors [skip ci]
9ade048 Update CHANGELOG.md [skip ci]
fc9bebb Change type of mime from string to string|number to fix feat: Adding TriCo app electron/apps#990 (chore: Update Cloudtag icon and description electron/apps#1182)
21c3524 Remove mentioning of `favicons` (build: update sharp to get node 12 support electron/apps#1176)
67cef20 "Bump version to: v0.22.1 [skip ci]"
ee589f0 Update CHANGELOG.md [skip ci]
54a63e8 upgrade mkdrip (Crash in application in Linux (Mint) electron/apps#1173)
bbd6e04 fix usage of rimraf for windows dev (feat: Account Surfer electron/apps#1172)
d9dace2 rename master to main (fix: Update Aedron Shrine electron/apps#1169)
c10d8ca create funding.yml [skip ci]
d4ed418 "Bump version to: v0.22.0 [skip ci]"
3bdd30a Update contributors [skip ci]
f6fa67c Update CHANGELOG.md [skip ci]
b3b6438 Switch to fetch for url requests (fix: allow any node version higher than 8 electron/apps#1165)
22f2535 switch from should to expect (feat: add mikropausen app electron/apps#1163)
a2dbeb5 delete CLI package (feat: Add MBoD electron/apps#1162)
c5784fe Change test matching strategy to include all test files (Nertivia chat client electron/apps#1161)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade jimp from 0.16.1 to 0.22.4. See this package in npm: https://www.npmjs.com/package/jimp See this project in Snyk: https://app.snyk.io/org/rizkihorangi/project/65cb260a-f2de-4e5d-abef-5ffd83ca0c9d?utm_source=github&utm_medium=referral&page=upgrade-pr

[Snyk] Upgrade jimp from 0.16.1 to 0.22.4 #13

Are you sure you want to change the base?

[Snyk] Upgrade jimp from 0.16.1 to 0.22.4 #13

Uh oh!

Conversation

snyk-bot commented Mar 1, 2023

Snyk has created this PR to upgrade jimp from 0.16.1 to 0.22.4.

🚀 Enhancement

Authors: 1

🚀 Enhancement

Authors: 1

🚀 Enhancement

📝 Documentation

Authors: 2

🚀 Enhancement

🏠 Internal

Authors: 1

Release Notes

Switch to fetch for url requests (#1165)

💥 Breaking Change

🏠 Internal

Authors: 2

🚀 Enhancement

🐛 Bug Fix

🏠 Internal

Authors: 2

🚀 Enhancement

Authors: 1

Release Notes

Babel Refactor (#1149)

💥 Breaking Change

Authors: 1

🚀 Enhancement

Authors: 1

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants