[dependabot]

Bumps the rest group with 3 updates in the / directory: sharp, glob and mdast-util-from-markdown.

Updates sharp from 0.35.4 to 0.35.5

Release notes

Sourced from sharp's releases.

v0.35.5

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4

• Add upper bounds check on length of linear and GIF delay arrays.

• Improve error handing when WebAssembly fallback also fails. #4593 @​lazerg

• TypeScript: Allow multi-frame options for JXL output. #4602 @​ramin-010

• TypeScript: Remove non-existent named export. #4604

• Increase accepted dimensions when extending an image. #4605

• Improve gain map support for extract and rotate operations. #4606

• Tests: Ensure composite tests pass on big endian platforms. #4609

v0.35.5-rc.1

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1

• Add upper bounds check on length of linear and GIF delay arrays.

• Improve error handing when WebAssembly fallback also fails. #4593 @​lazerg

• TypeScript: Allow multi-frame options for JXL output. #4602 @​ramin-010

• TypeScript: Remove non-existent named export. #4604

• Increase accepted dimensions when extending an image. #4605

• Improve gain map support for extract operation. #4606

... (truncated)

Commits

• 51a990f Release v0.35.5
• 96de105 Upgrade to sharp-libvips v1.3.4
• 3a61390 CI: Configure Dependabot with all package.json locations
• 4940c50 Improve gain map support for rotate/flip/flop ops
• 20654aa Prerelease v0.35.5-rc.1
• ef4f934 CI: Upgrade to Ubuntu 26.04
• 358df95 Upgrade to libvips v8.18.7
• 49f4903 Improve gain map support for rotate-then-extract #4606
• 0e2e55e Silence a couple of compiler/static analysis warnings
• cef3b8c Improve gain map support for extract operation #4606
• Additional commits viewable in compare view

Updates glob from 13.0.6 to 14.0.3

Changelog

Sourced from glob's changelog.

changeglob

14

• Use minimatch 11. Each portion of a pattern with magic is now matched with a Matcher from @isaacs/nonrecursive-glob-match in place of a RegExp, so patterns can no longer cause ReDoS. Matching follows the minimatch 11 changes, which are closer to Bash in some edge cases.
• Pattern#pattern() returns a Matcher for a portion with magic. The MMPattern type is now minimatch's ParseReturnFiltered, and the new MMMatcher type is the Matcher part of it.
• Rename Pattern#isRegExp() to isMatcher(), and Processor#testRegExp() to testMatcher().
• Remove the debug option, which minimatch no longer has.
• Add the normalize option, to normalize unicode in the pattern and in the file names that it is matched against.
• GlobWalker#walk() and walkSync() return arrays in place of sets, and MatchRecord#entries() is removed.
• ignore patterns that start with / now start at the same place as other patterns that start with /: the root option if set, or else the root of the cwd, such as C:\ on Windows.
• ignore patterns follow the windowsPathsNoEscape option, the same as other patterns.
• On Windows, patterns that start with a long UNC root like //?/UNC/host/share/ walk that share, the same as //host/share/.
• Faster ignore patterns (about 1.2 to 3 times faster), and less work for each entry in a walk (about 10% faster sync, and 15% to 30% faster async, for large trees).
• Allow const string[] or readonly string[] as ignore option or pattern argument.
• When the signal aborts an async walk, the walk stops. Before, it rejected, but continued to read directories.

13

• Move the CLI program out to a separate package, glob-bin. Install that if you'd like to continue using glob from the command line.

12

• Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

... (truncated)

Commits

• fc93fd5 14.0.3
• cfdf76a update deps
• 54bbe8b fix windows test
• 18a539f ci: update node versions
• 93957bf 14.0.2
• 4682e8c fix: do not continue walking after signal abort
• 668a669 14.0.1
• 6ff2314 allow const/readonly string[] for ignore, patterns
• bbe1e5d 14.0.0
• d9586ad use actual published deps, not symlinks
• Additional commits viewable in compare view

Updates mdast-util-from-markdown from 2.0.3 to 2.1.0

Release notes

Sourced from mdast-util-from-markdown's releases.

2.1.0

Features

• 2ff38d8 Add support for afterExit, beforeEnter listeners

Performance

• 867dd1f 53875a7 Refactor to improve performance around list items by @​ChristianMurphy in syntax-tree/mdast-util-from-markdown#51, syntax-tree/mdast-util-from-markdown#57
• f941437 Refactor to improve performance w/ pre-declare positions by @​ChristianMurphy in syntax-tree/mdast-util-from-markdown#53
• 5a1a40f Refactor to improve performance of handler context

Full Changelog: syntax-tree/mdast-util-from-markdown@2.0.3...2.1.0

Commits

• afe9516 2.1.0
• 8042888 Refactor comment style
• 867dd1f Refactor to improve performance around list items
• 2ff38d8 Add support for afterExit, beforeEnter listeners
• 5a1a40f Refactor to improve performance of handler context
• 13dc9ee Update actions
• 5378edb Update dev-dependencies
• 9db8c40 Add types to tsconfig.json (#55)
• f941437 Refactor to improve performance w/ pre-declare positions
• b2c833b Replace c8 with Node native test coverage
• Additional commits viewable in compare view