Skip to content

build(deps): bump image-meta from 0.2.2 to 0.3.1 - #4074

Merged
ala-n merged 1 commit into
mainfrom
dependabot/npm_and_yarn/main/image-meta-0.3.0
Nov 6, 2026
Merged

ala-n merged 1 commit into
mainfrom
dependabot/npm_and_yarn/main/image-meta-0.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 29, 2026 •

Copy link
Copy Markdown
Contributor

Bumps image-meta from 0.2.2 to 0.3.1.

Release notes

Sourced from image-meta's releases.

v0.3.1

🚀 Enhancements

  • Detect animated images and page/frame count (#90)

🩹 Fixes

  • svg: Detect SVGs whose prolog or root tag ends past the first kilo-byte (#92)

v0.3.0

🚀 Enhancements

  • tiff: Support BigTIFF (4e754b0)
  • ktx: Support KTX 2.0 (7a766b9)
  • Support JPEG XL (c9e5e6b)
  • ⚠️ Report the largest image of multi-image files (ccd03d3)
  • jpg: Support lossless and arithmetic-coded frames (94c7ec7)

🔥 Performance

  • Compare box types and segment markers as numbers instead of decoded strings (5e2eea3)

🩹 Fixes

  • svg: Ignore an <svg> tag inside an XML comment (#78)
  • icns: Reject truncated and zero-length entries (8a1da94)
  • ico: Validate image count against input length (d5806a3)
  • tiff: Read big-endian LONG tag values correctly (ec7ab13)
  • heic, avif: Apply clean aperture crop and validate boxes (3a69171)
  • jpg: Skip extraneous bytes between segments (cda47ea)
  • icns: Skip non-icon entries (cde19af)
  • Throw on truncated input instead of returning NaN sizes (92fc71e)
  • j2c: Subtract the image offset from the reference grid size (db4da5e)
  • svg: Parse viewBox values separated by commas or extra whitespace (871ded8)
  • Propagate NaN from signed readers on truncated input (6f1ecc3)
  • Reject zero width and negative sizes (4a6da3d)
  • tiff: Harden IFD parsing (c136a90)
  • jpg: Stop at start of scan and skip stuffed bytes when resyncing (31fe1f0)
  • jxl: Read container codestream boxes without copying or requiring the whole box (a79283b)
  • icns: Add missing icon types and correct ic12 size (bfd5919)
  • svg: Only match root at first tag to avoid quadratic backtracking (198a89d)
  • pnm: Read header lines lazily to avoid quadratic shift() and whole-input decode (2c6374a)
  • svg: Correct pica (pc) unit conversion to 16px (fc522ba)
  • svg: Keep viewBox precision and round derived size to nearest pixel (d7b8fe9)
  • pnm: Parse header tokens separated by any whitespace and comments (777135e)
  • jpg: Inspect the first segment marker after SOI (d0a2ea1)
  • jpg: Read EXIF IFD0 offset from the TIFF header (61ff67d)
  • bmp: Read OS/2 v1 core header size as 16-bit and reject negative width (4f8b659)
  • ktx: Honor the KTX 1.1 endianness field for big-endian files (d581fc9)
  • avif: Detect AVIF from ftyp compatible brands and avis sequences (3c56c47)

... (truncated)

Changelog

Sourced from image-meta's changelog.

v0.3.1

compare changes

🚀 Enhancements

  • Detect animated images and page/frame count (#90)

🩹 Fixes

  • svg: Detect SVGs whose prolog or root tag ends past the first kilo-byte (#92)

❤️ Contributors

v0.3.0

compare changes

🚀 Enhancements

  • tiff: Support BigTIFF (4e754b0)
  • ktx: Support KTX 2.0 (7a766b9)
  • Support JPEG XL (c9e5e6b)
  • ⚠️ Report the largest image of multi-image files (ccd03d3)
  • jpg: Support lossless and arithmetic-coded frames (94c7ec7)

🔥 Performance

  • Compare box types and segment markers as numbers instead of decoded strings (5e2eea3)

🩹 Fixes

  • svg: Ignore an <svg> tag inside an XML comment (#78)
  • icns: Reject truncated and zero-length entries (8a1da94)
  • ico: Validate image count against input length (d5806a3)
  • tiff: Read big-endian LONG tag values correctly (ec7ab13)
  • heic, avif: Apply clean aperture crop and validate boxes (3a69171)
  • jpg: Skip extraneous bytes between segments (cda47ea)
  • icns: Skip non-icon entries (cde19af)
  • Throw on truncated input instead of returning NaN sizes (92fc71e)
  • j2c: Subtract the image offset from the reference grid size (db4da5e)
  • svg: Parse viewBox values separated by commas or extra whitespace (871ded8)
  • Propagate NaN from signed readers on truncated input (6f1ecc3)
  • Reject zero width and negative sizes (4a6da3d)
  • tiff: Harden IFD parsing (c136a90)
  • jpg: Stop at start of scan and skip stuffed bytes when resyncing (31fe1f0)
  • jxl: Read container codestream boxes without copying or requiring the whole box (a79283b)
  • icns: Add missing icon types and correct ic12 size (bfd5919)

... (truncated)

Commits
  • 7f4386e chore(release): v0.3.1
  • 0893bf0 chore(deps): update pnpm to v11.28.9 (#91)
  • df62a74 fix(svg): detect SVGs whose prolog or root tag ends past the first kilo-byte ...
  • c85fe7e chore(deps): update all non-major dependencies
  • 4b06903 chore(deps): update actions/setup-node digest to 949feb2 (#86)
  • 1292ab1 feat: detect animated images and page/frame count (#90)
  • b3cfbe5 chore(deps): update all non-major dependencies (#82)
  • cd5bbcd chore(release): v0.3.0
  • 0e17c8b chore(deps): update all non-major dependencies (#81)
  • b605abf fix: reject image sizes that are not safe integers
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot
dependabot Bot requested a review from a team as a code owner September 29, 2026 10:04
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 29, 2026
@ala-n

ala-n commented Nov 6, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

Bumps [image-meta](https://github.com/unjs/image-meta) from 0.2.2 to 0.3.1.
- [Release notes](https://github.com/unjs/image-meta/releases)
- [Changelog](https://github.com/unjs/image-meta/blob/main/CHANGELOG.md)
- [Commits](unjs/image-meta@v0.2.2...v0.3.1)

---
updated-dependencies:
- dependency-name: image-meta
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump image-meta from 0.2.2 to 0.3.0 build(deps): bump image-meta from 0.2.2 to 0.3.1 Nov 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/image-meta-0.3.0 branch from 4bc3cf0 to dcd9b57 Compare November 6, 2026 17:51
@ala-n
ala-n merged commit d6c5f87 into main Nov 6, 2026
7 checks passed
@ala-n
ala-n deleted the dependabot/npm_and_yarn/main/image-meta-0.3.0 branch November 6, 2026 17:55
@ci-github-action-bot ci-github-action-bot Bot locked and limited conversation to collaborators Nov 6, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants