Skip to content

chore(deps): bump the minor-updates group across 1 directory with 2 updates - #130

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-npm_and_yarn-minor-updates-65aa53e3c9
Open

chore(deps): bump the minor-updates group across 1 directory with 2 updates#130
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-npm_and_yarn-minor-updates-65aa53e3c9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-updates group with 2 updates in the / directory: katex and sharp.

Updates katex from 0.16.47 to 0.18.4

Release notes

Sourced from katex's releases.

v0.18.4

0.18.4 (2026-08-10)

Bug Fixes

v0.18.3

0.18.3 (2026-08-09)

Bug Fixes

v0.18.2

0.18.2 (2026-08-08)

Bug Fixes

v0.18.1

0.18.1 (2026-07-19)

Bug Fixes

v0.18.0

0.18.0 (2026-07-17)

Features

BREAKING CHANGES

  • users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.

v0.17.0

0.17.0 (2026-05-22)

Performance Improvements

... (truncated)

Changelog

Sourced from katex's changelog.

0.18.4 (2026-08-10)

Bug Fixes

0.18.3 (2026-08-09)

Bug Fixes

0.18.2 (2026-08-08)

Bug Fixes

0.18.1 (2026-07-19)

Bug Fixes

0.18.0 (2026-07-17)

Features

BREAKING CHANGES

  • users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.

0.17.0 (2026-05-22)

Performance Improvements

  • simplify defineFunction to avoid destructuring, improve typing (#4222) (fb604e6)

BREAKING CHANGES

... (truncated)

Commits
  • 49dc3d9 chore(release): 0.18.4 [ci skip]
  • e507f75 fix(environment): report invalid environment names as ParseError (#4256)
  • f0f46a8 chore(release): 0.18.3 [ci skip]
  • 1c973ae fix: allow braced arguments for delimsizing (#4255)
  • a11ce72 docs: update migration guide (#4248)
  • 95322e1 docs: add Deno section (#4254)
  • dd88e46 chore(deps): update dependency js-yaml to v4.3.1 [security] (#4263)
  • 93c362b chore(release): 0.18.2 [ci skip]
  • 0adf7e7 fix: prevent prototype pollution in settings (#4260)
  • 5a5bf20 chore(deps): update dependency postcss to v8.5.23 [security] (#4259)
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates sharp from 0.34.5 to 0.35.3

Release notes

Sourced from sharp's releases.

v0.35.3

  • Tighten verification of text dimensions, TIFF tile dimensions and extend values.

  • Improve code bundler support by resolving path to libvips binary.

  • Increase default concurrency when use of MALLOC_ARENA_MAX is detected.

  • Emit warning about binaries provided by Electron for use on Linux.

  • Add hasAlpha property to output info. #4500

  • TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520 @​Andarist

  • Bound clahe width and height to avoid signed overflow. #4551 @​metsw24-max

  • Bound trim margin to avoid signed overflow. #4552 @​metsw24-max

  • Reject infinite values when validating numbers. #4553 @​metsw24-max

  • Bound extract region to libvips coordinate limit. #4555 @​metsw24-max

  • Verify background colour values are numbers. #4556 @​metsw24-max

  • Bound create and raw input dimensions to coordinate limit. #4558 @​metsw24-max

  • Tighten recomb and affine matrix verification. #4560 @​chatman-media

  • Verify cache memory limit to avoid overflow. #4561 @​metsw24-max

v0.35.3-rc.2

  • Tighten verification of text dimensions, TIFF tile dimensions and extend values.

... (truncated)

Commits
  • 1018449 Release v0.35.3
  • ba303a7 Prerelease v0.35.3-rc.2
  • 4f94fc5 Upgrade to sharp-libvips v1.3.2
  • c5e7a3f Bump devDeps, fix Deno/Windows smoke tests
  • 9a8d002 Docs: Add changelog entry and note about transferable #4520
  • 8694db0 TypeScript: Return more precise Buffer\<ArrayBuffer> from toBuffer (#4520)
  • e000d0b Prerelease v0.35.3-rc.1
  • 9554ca9 Prerelease v0.35.3-rc.0
  • 6a29fd5 Emit warning about native binaries on Linux Electron
  • 540d2ea Increase default concurrency when use of MALLOC_ARENA_MAX detected
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 21, 2026
@dependabot dependabot Bot changed the title chore(deps): bump the minor-updates group with 2 updates chore(deps): bump the minor-updates group across 1 directory with 2 updates Aug 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot-npm_and_yarn-minor-updates-65aa53e3c9 branch 2 times, most recently from a501d14 to 895de05 Compare August 25, 2026 13:34
…pdates

Bumps the minor-updates group with 2 updates in the / directory: [katex](https://github.com/KaTeX/KaTeX) and [sharp](https://github.com/lovell/sharp).


Updates `katex` from 0.16.47 to 0.18.4
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.47...v0.18.4)

Updates `sharp` from 0.34.5 to 0.35.3
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.34.5...v0.35.3)

---
updated-dependencies:
- dependency-name: katex
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: sharp
  dependency-version: 0.35.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot-npm_and_yarn-minor-updates-65aa53e3c9 branch from 895de05 to 370b01e Compare August 26, 2026 13:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants