Bump sharp and looks-same

[dependabot]

Removes sharp. It's no longer used after updating ancestor dependency looks-same. These dependencies need to be updated together.

Removes sharp

Updates looks-same from 9.0.1 to 10.0.1

Release notes

Sourced from looks-same's releases.

v10.0.0

What's new

• In this release, we got rid of sharp. Now "looks-same" package has no compiled dependencies, so there should be no errors trying to install looks-same version on old/new version of node.js.
• Increased performance when comparing images with lots of different pixels (up to 3x)
• Improved result difference images compression
• Reduced total "node_modules" size (41M -> 660K)

💣 Breaking changes

• formats, other than png, are not supported

Dependencies size change:

Before:

❯ pnpm add looks-same@9
Packages: +65
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Progress: resolved 65, reused 50, downloaded 15, added 65, done
node_modules/.pnpm/sharp@0.32.6/node_modules/sharp: Running install script, done in 2.7s
dependencies:

looks-same 9.0.1

Done in 5s

❯ du -cksh *(D) | sort -hr
 41M	total
 41M	node_modules
 16K	pnpm-lock.yaml
4.0K	package.json

After:

❯ pnpm add looks-same@10
Packages: +7
+++++++
Progress: resolved 7, reused 5, downloaded 2, added 7, done
dependencies:

looks-same 10.0.0

Done in 1.3s

❯ du -cksh *(D) | sort -hr
668K	total
660K	node_modules
</tr></table> 

... (truncated)

Changelog

Sourced from looks-same's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

10.0.0 (2025-08-18)

⚠ BREAKING CHANGES

• migrate sharp -> jsquash/png
• node versions less than 18.0.0 are no longer supported

Features

• drop node versions less than 18 (1f0097c)

Bug Fixes

• remove async from index.d.ts (59a6a1c)

• run linters (9d839dd)

• update sharp to fix CVE-2023-4863 (9b3a0a1)

• migrate sharp -> jsquash/png (89cf122)

Commits

• aa0be37 10.0.1
• be61eec Merge pull request #115 from gemini-testing/TESTPLANE-653.refactor
• fb640e9 refactor: use buffer subarrays
• 7e12fe8 chore(release): 10.0.0
• 07665fc Merge pull request #114 from gemini-testing/TRIVIAL.remove_extra_deps
• 28533c1 chore: remove extra deps
• fbd86df Merge pull request #113 from gemini-testing/TESTPLANE-653.bin
• 982b367 docs(benchmark): update benchmarks
• 89cf122 chore!: migrate sharp -> jsquash/png
• ea3dc47 chore: reduce deps size
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.