[Snyk] Upgrade sharp from 0.28.3 to 0.30.4

[snyk-bot]

Snyk has created this PR to upgrade sharp from 0.28.3 to 0.30.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 9 versions ahead of your current version.
• The recommended version was released a month ago, on 2022-04-18.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-TRIMNEWLINES-1298042	375/1000 Why? CVSS 7.5	No Known Exploit
	Information Exposure SNYK-JS-SIMPLEGET-2361683	375/1000 Why? CVSS 7.5	Proof of Concept
	Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	375/1000 Why? CVSS 7.5	No Known Exploit
	Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	375/1000 Why? CVSS 7.5	No Known Exploit
	Information Exposure SNYK-JS-NODEFETCH-2342118	375/1000 Why? CVSS 7.5	No Known Exploit
	Denial of Service (DoS) SNYK-JS-JPEGJS-570039	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ISSVG-1243891	375/1000 Why? CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ISSVG-1085627	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-2429795	375/1000 Why? CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: sharp

• 0.30.4 - 2022-04-18
  No content.
• 0.30.3 - 2022-03-14
  No content.
• 0.30.2 - 2022-03-02
  No content.
• 0.30.1 - 2022-02-09
  No content.
• 0.30.0 - 2022-02-01
  No content.
• 0.29.3 - 2021-11-14
  No content.
• 0.29.2 - 2021-10-21
  No content.
• 0.29.1 - 2021-09-07
  No content.
• 0.29.0 - 2021-08-17
  No content.
• 0.28.3 - 2021-05-24
  No content.

from sharp GitHub release notes

Commit messages

Package name: sharp

• d396a4e Release v0.30.4
• ae1dbcd Bump deps
• 4c29368 Docs: EXIF metadata unsupported for TIFF output #3074
• 36e5596 Docs: mention npm's foreground-scripts option to aid debugging
• 985e881 Bump deps
• 0b11671 Docs: changelog for #3178
• 9deac83 Add missing file name to 'Input file is missing' error message (#3178)
• 5d36f5f Improve error message for SVG render above limit #3167
• 926572b Control sensitivity to invalid images via failOn
• d0c8e95 Docs: expand info about use with worker threads
• b0ca23c Docs: changelog and credit for #3146
• c3a0d5f Add support for TypedArray input with byteOffset and length
• 1d36936 Ensure create has correct bit depth and colourspace #3139
• b609df4 Release v0.30.3
• c567d3b Bump devDeps
• 27d9fe2 Add additional debugging hint on symbol error (#3132)
• ac883c5 Docs: composite image supports the animated property #3135
• e8720c9 Docs: use SVG favicon with a PNG fallback
• 42e45d8 Docs: add more examples (composite, greyscale, tint)
• 72fd8ab Docs: add section on (preventing) bundling with esbuild
• ac18bbb Ensure backwards-compatibility of JSDoc introduced in ea599ad
• fcbe4e1 Tests: remove possible race condition
• 9280742 CI: update FreeBSD environment
• 7a1a1cf Docs: add/correct some operation examples

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs