Skip to content

Bump image-size from 0.9.7 to 2.0.2 in the root-npm-security group across 1 directory - #1058

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/root-npm-security-8b95e5dabd
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/root-npm-security-8b95e5dabd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the root-npm-security group with 1 update in the / directory: image-size.

Updates image-size from 0.9.7 to 2.0.2

Release notes

Sourced from image-size's releases.

v2.0.2

Fixes

Full Changelog: image-size/image-size@v2.0.1...v2.0.2

v2.0.1

Full Changelog: image-size/image-size@v2.0.0...v2.0.1

v2.0.0

The release

  • Adds dual support for CJS and ESM, switches from Buffer to UInt8Array, uses DataView for reads, and can therefore now also be used in browsers
  • Removes all dependencies
  • Introduces some performance improvements
  • Drops synchronous API.

Please see the Readme for the usage examples.

Full Changelog: image-size/image-size@v1.2.0...v2.0.0

v1.2.1

Fixes

Full Changelog: image-size/image-size@v1.2.0...v1.2.1

v1.2.0

This release adds support for JPEG-XL ( #409 )

v1.1.0

This release adds support for KTX2.0, and AVIF/HEIC/HEIF images.

Changes

v1.0.0

No release notes provided.

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 2, 2026
Bumps the root-npm-security group with 1 update in the / directory: [image-size](https://github.com/image-size/image-size).


Updates `image-size` from 0.9.7 to 2.0.2
- [Release notes](https://github.com/image-size/image-size/releases)
- [Commits](image-size/image-size@v0.9.7...v2.0.2)

---
updated-dependencies:
- dependency-name: image-size
  dependency-version: 2.0.2
  dependency-type: direct:production
  dependency-group: root-npm-security
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/root-npm-security-8b95e5dabd branch from dc72bd7 to 7faa76d Compare September 10, 2026 21:54
@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@dependabot @github

dependabot Bot commented on behalf of github Sep 15, 2026

Copy link
Copy Markdown
Contributor Author

Looks like image-size is no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 15, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/root-npm-security-8b95e5dabd branch September 15, 2026 11:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant