Skip to content

⬆️ bump probe-image-size from 7.3.0 to 7.4.0 - #2455

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/probe-image-size-7.4.0
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/probe-image-size-7.4.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 6, 2026 •

Copy link
Copy Markdown
Contributor

Bumps probe-image-size from 7.3.0 to 7.4.0.

Changelog

Sourced from probe-image-size's changelog.

[7.4.0] - 2026-08-14

Security

  • Fixed possible DoS in SVG parser.

Changed

  • Improved SVG header parsing.
  • SVG header is now searched in the first 10K only.
Commits
  • 64565c3 7.4.0 released
  • 9b74656 Restrict IDENTIFY_RE scan length, for sure
  • 9ad4352 Changelog update
  • 6c3b179 Align sync and stream SVG parsing paths.
  • bdb61f5 Add tests for SVG header parser edge cases.
  • 60cc96a Rewrite SVG header parsing as a shared module.
  • e495425 Split common.js content
  • c032aef Limit SVG parser input to 10K in both sync and stream
  • 04db5b5 CI config update
  • 338fb60 nyc => c8
  • See full diff in compare view

@dependabot
dependabot Bot requested a review from a team as a code owner October 6, 2026 13:50
@dependabot dependabot Bot added the ⬆️⬇️ dependencies Pull requests that update a dependency file label Oct 6, 2026
@dependabot
dependabot Bot requested review from Shivanshu-07 and Sriram567 October 6, 2026 13:50
@dependabot dependabot Bot added the ⬆️⬇️ dependencies Pull requests that update a dependency file label Oct 6, 2026
@coderabbitai

coderabbitai Bot commented Oct 6, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository YAML (base), Central YAML (inherited), Organization UI (inherited), Workspace UI (inherited)
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 6a7307f7-aab0-412e-8600-03ff83074465

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/probe-image-size-7.4.0 branch from a3b4e2f to 104b4db Compare October 9, 2026 10:12
Bumps [probe-image-size](https://github.com/nodeca/probe-image-size) from 7.3.0 to 7.4.0.
- [Changelog](https://github.com/nodeca/probe-image-size/blob/master/CHANGELOG.md)
- [Commits](nodeca/probe-image-size@7.3.0...7.4.0)

---
updated-dependencies:
- dependency-name: probe-image-size
  dependency-version: 7.4.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/probe-image-size-7.4.0 branch from 104b4db to f4c1a82 Compare October 16, 2026 11:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

⬆️⬇️ dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants