Bump image-size and @11ty/eleventy-img

[dependabot]

Bumps image-size to 2.0.4 and updates ancestor dependency @11ty/eleventy-img. These dependencies need to be updated together.

Updates image-size from 2.0.2 to 2.0.4

Commits

• See full diff in compare view

Updates @11ty/eleventy-img from 3.1.8 to 7.0.0

Release notes

Sourced from @​11ty/eleventy-img's releases.

Image v7.0.0: The Memory Efficiency Release

TL;DR: ESM-only, Node 22+ minimum, and huge memory and performance wins over v6.

Thank you to @​sentience, @​valadaptive, @​kirthi-b, @​jens-struct, and @​jornmineur for their contributions to this release!

Issue Milestone: https://github.com/11ty/eleventy-img/milestone/25?closed=1 Full Changelog: v6.0.4...v7.0.0

Breaking changes

• Node 22 or newer is required. This matches Core v4. #351
• The package is now ESM. This is unlikely to require any changes as the Node minimum now supports require(esm). #300
  • ESM: import Image from "@11ty/eleventy-img"
  • CommonJS friendly: const Image = await import("@11ty/eleventy-img")
• Upgrades sharp from v0.33 to v0.35 #352, #289
  • You can review the upstream v0.34 and v0.35 changelogs.

And a few breaking changes that are unlikely to affect most projects:

• If you use the Transform method and set both width and eleventy:widths on the same element, note that eleventy:widths now takes priority. #314
• Image.statsSync and Image.statsByDimensionsSync have been removed after being deprecated in 2024. Use the statsOnly feature instead, like so: await Image(src, { statsOnly: true, /* …options */ }). Helpful error messaging is provided if your project uses these (so don’t worry about it until you run into it, they weren’t commonly used). #211 #295
• Removes the <eleventy-image> WebC component (use the transform method instead) #305

New Features

• New passthrough format (usage: formats: ["passthrough"]) copies and uses the source file directly, while still adding width and height attributes to the generated output. Useful when you've already optimized your source images and want to skip the optimization pipeline — about 20× faster in local benchmarks. [Example on #212](11ty/image#212). Also #133, #183, #309
• New eleventy:sizes attribute allows overriding any sizes attribute in markup #306
• New manualCacheKey option to improve the cropping API #271 #274 by @​jens-struct

Bug Fixes

• Huge memory usage improvements from @​sentience in #313 and @​jornmineur in #302 #319 (v6 had issues, but we’ve eclipsed v5 performance with this release 🏆)
• Removes the w descriptor when only one size is used in srcset, fixing valid HTML output when only one width is used and no sizes is present (#298).
• Fixes eleventy:ignore appearing in output on <img> tags inside <picture> elements — by @​valadaptive in #303.
• Decodes HTML entities on <img src> when read back from HTML, by @​kirthi-b #349 #307

Internals

• Swaps the debug dependency for obug (#356).
• Major version dependency upgrade: upgrades p-queue from v6.6 to v8.1. #120 This dependency became ESM-only in v7 and Node 18+ in v8.

Image v7.0.0-alpha.5

This is likely the last pre-release before v7 stable.

• Breaking change: Node minimum is now 22+ (matching core v4) #351
• Breaking change: removes deprecated (since 2024) synchronous functions Image.statsSync and Image.statsByDimensionsSync #211 #295
• Breaking change: ugprades to sharp v0.35 #352 see upstream sharp changes

... (truncated)

Commits

• f69b24b v7.0.0
• fcabc87 Remove removed sharp option
• f4c514a v7.0.0-alpha.5
• d2eb0ce Use npm staged publishing
• 5943d24 v7.0.0-alpha.5
• 84d9bf4 Fixes #356
• c20189a Fixes #212. Adds passthrough special format that skips sharp processing alt...
• ec011f6 Rename eleventyImage in a few places to more generic names
• ebbe22d Fixes #302 unbounded memory use from memory cache
• 5e79529 Merge branch 'pr/274'
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​11ty/eleventy-img since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[netlify]

👷 Deploy Preview for flowfuse-website processing.

Name	Link
🔨 Latest commit	490c178
🔍 Latest deploy log	https://app.netlify.com/projects/flowfuse-website/deploys/6ab6c9f7151619000889adcd

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.