Repository navigation
build(deps): bump sharp from 0.34.5 to 0.35.5 in /website - #1468
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
requested a review
from Wassim Chegham (manekinekko)
as a code owner
October 7, 2026 17:48
dependabot
Bot
added
language: javascript
Bumps [sharp](https://github.com/lovell/sharp) from 0.34.5 to 0.35.5. - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.34.5...v0.35.5) --- updated-dependencies: - dependency-name: sharp dependency-version: 0.35.5 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/website/sharp-0.35.5
branch
from
October 7, 2026 19:41
2fbf85a to
d6a10df
Compare
Copilot started reviewing on behalf of
Wassim Chegham (manekinekko)
October 9, 2026 07:51
View session
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
Astro still resolves Sharp 0.34.5, so the website image pipeline is not actually upgraded.
1 open finding
What changed in this PR
Updates the website’s direct Sharp dependency from 0.34.5 to 0.35.5.
Changes:
- Bumps the declared Sharp version.
- Refreshes Sharp’s platform-specific lockfile dependencies.
| File | Description |
|---|---|
website/package.json |
Updates the direct Sharp dependency. |
website/pnpm-lock.yaml |
Records Sharp 0.35.5 and its transitive packages. |
Files not reviewed (1)
- website/pnpm-lock.yaml: Generated file
🧠 Review effort: Balanced
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
| "@astrojs/starlight": "^0.39.2", | ||
| "astro": "^6.4.6", | ||
| "sharp": "^0.34.5" | ||
| "sharp": "^0.35.5" |
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps sharp from 0.34.5 to 0.35.5.
Release notes
Sourced from sharp's releases.
... (truncated)
Commits
51a990fRelease v0.35.596de105Upgrade to sharp-libvips v1.3.43a61390CI: Configure Dependabot with all package.json locations4940c50Improve gain map support for rotate/flip/flop ops20654aaPrerelease v0.35.5-rc.1ef4f934CI: Upgrade to Ubuntu 26.04358df95Upgrade to libvips v8.18.749f4903Improve gain map support for rotate-then-extract #46060e2e55eSilence a couple of compiler/static analysis warningscef3b8cImprove gain map support for extract operation #4606