chore(deps): bump sharp, next and @gitlawb/openclaude in /web - #318
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [sharp](https://github.com/lovell/sharp) to 0.35.4 and updates ancestor dependencies [sharp](https://github.com/lovell/sharp), [next](https://github.com/vercel/next.js) and [@gitlawb/openclaude](https://github.com/Gitlawb/openclaude). These dependencies need to be updated together. Updates `sharp` from 0.34.5 to 0.35.4 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.5...v0.35.4) Updates `next` from 16.2.9 to 16.3.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.9...v16.3.4) Updates `@gitlawb/openclaude` from 0.20.1 to 0.30.0 - [Release notes](https://github.com/Gitlawb/openclaude/releases) - [Changelog](https://github.com/Gitlawb/openclaude/blob/main/CHANGELOG.md) - [Commits](Gitlawb/openclaude@v0.20.1...v0.30.0) --- updated-dependencies: - dependency-name: sharp dependency-version: 0.35.4 dependency-type: indirect - dependency-name: next dependency-version: 16.3.4 dependency-type: direct:production - dependency-name: "@gitlawb/openclaude" dependency-version: 0.30.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
ECC Tools / Security EvidenceCommit: Security evidence gate passed (success) No security-sensitive scanner-evidence gap detected. Mode: enforce Scanned 2 changed file(s). No missing scanner-evidence signal was detected. Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
ECC Tools / PR Risk TaxonomyCommit: PR taxonomy review recommended (neutral) Detected 2 PR taxonomy bucket(s): Install Manifest Integrity, CI/CD Recommendation. Scanned 2 changed file(s). Roadmap taxonomy buckets: Install Manifest IntegrityInstall manifests, plugin metadata, and shipped skills should stay synchronized with user-facing setup guidance. Signals:
Paths:
CI/CD RecommendationCI, dependency, coverage, and contract signals should be routed into follow-up checks or verification work. Signals:
Paths:
Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
ECC Tools / Reference Set ReadinessCommit: Reference set readiness gaps detected (neutral) Reference evidence present for 0/7 areas (0%) across 2 changed file(s). This check is based on files changed in this PR. Repository-level readiness is still reported by
Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
ECC Tools / Hosted Promotion ReadinessCommit: Hosted promotion readiness passed (success) No hosted promotion evidence gaps detected across 2 changed file(s); 0 corpus scenarios had matching evidence. This check compares PR file changes against the evaluator/RAG promotion corpus in No evaluator corpus scenarios matched this PR. Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission. |
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Advanced Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Bumps sharp to 0.35.4 and updates ancestor dependencies sharp, next and @gitlawb/openclaude. These dependencies need to be updated together.
Updates
sharpfrom 0.34.5 to 0.35.4Release notes
Sourced from sharp's releases.
... (truncated)
Commits
7f1a0a2Release v0.35.4f927818Upgrade to sharp-libvips v1.3.3e802092Prerelease v0.35.4-rc.0e13eb2fCI: Fix wasm32 build (#4589)a82a0b3Upgrade to libvips v8.18.68044fe4Bound resize dimensions to coordinate limit147f859Docs: changelog entries for #4578 #4584ee5bfb8Tests: use yauzl directly rather than via extract-zip wrapper7a77889Bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0 (#4588)ea5bef2Improve support for input Streams finishing before output is requested (#4584)Updates
nextfrom 16.2.9 to 16.3.4Release notes
Sourced from next's releases.
... (truncated)
Commits
299180dv16.3.412e173d[16.3.x] Re-enable AVIF image optimization and require sharp 0.35.4 (#97949)5d9022e[backport] Fix unset crossOrigin in Turbopack manifests (#97930)d8f4560[16.3.x] Fix build error when aliasing typescript to@typescript/typescript6...656aebf[16.3] testmode: Fix infinite recursion in testmode passthrough fetch (#97691)f37c1d6[16.3.x] ci: remove pull_request_stats workflow (#97975)a9a1cb7v16.3.3968b9fc[16.3.x] Fix ISR misses with backslashes in segments when deployed on Windows3a15b4a[16.3.x] [next/image]: disable avif image optimization7378b51Backport/docs fixes 16.3 (#97649)Updates
@gitlawb/openclaudefrom 0.20.1 to 0.30.0Release notes
Sourced from @gitlawb/openclaude's releases.
... (truncated)
Changelog
Sourced from @gitlawb/openclaude's changelog.
... (truncated)
Commits
6c7efdechore(main): release 0.30.0 (#2165)b4af6f1test(settings): unit-test the multi-source merge customizer (#2176)aaccb57fix(integrations): keep managed AIMLAPI attribution over caller headers (#2179)5f1ab9bfix(plugins): anchor marketplace hostPattern against lookalike hosts (#2177)8db8830fix(settings): stop proto-named permission rules from aborting validation (#2...30090c7fix(api): scope Anthropic attribution to compatible request paths (#2147)ca7c3effix(bg): identify sessions with persisted process markers (#2163)e802626fix(tui): proper Unicode/IME input handling for composed sequences (#2018) (#...54f963dfix(openai-shim): drop synthetic tool-results marker and guard echoes (#2039)...39c3850docs: tighten PR review expectations in CONTRIBUTING and AGENTS guides (#2151)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.