[Snyk] Upgrade sharp from 0.29.3 to 0.32.6

[X-oss-byte]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade sharp from 0.29.3 to 0.32.6.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 19 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2023-09-18.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Remote Code Execution (RCE) SNYK-JS-SHARP-2848109	539/1000 Why? Has a fix available, CVSS 6.5	No Known Exploit
	Heap-based Buffer Overflow SNYK-JS-SHARP-5922108	539/1000 Why? Has a fix available, CVSS 6.5	Mature

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: sharp

• 0.32.6 - 2023-09-18
  No content.
• 0.32.5 - 2023-08-15
  No content.
• 0.32.4 - 2023-07-21
  No content.
• 0.32.3 - 2023-07-14
  No content.
• 0.32.2 - 2023-07-11
  No content.
• 0.32.1 - 2023-04-27
  No content.
• 0.32.0 - 2023-03-24
  No content.
• 0.31.3 - 2022-12-21
  No content.
• 0.31.2 - 2022-11-04
• 0.31.1 - 2022-09-29
• 0.31.0 - 2022-09-05
• 0.30.7 - 2022-06-22
• 0.30.6 - 2022-05-30
• 0.30.5 - 2022-05-23
• 0.30.4 - 2022-04-18
• 0.30.3 - 2022-03-14
• 0.30.2 - 2022-03-02
• 0.30.1 - 2022-02-09
• 0.30.0 - 2022-02-01
• 0.29.3 - 2021-11-14

from sharp GitHub release notes

Commit messages

Package name: sharp

• eefaa99 Release v0.32.6
• dbce6fa Upgrade to libvips v8.14.5
• af0fcb3 Docs: changelog for Allow className to be used on the Main element vercel/next.js#3799
• c6f54e5 Bump devDeps
• 846563e TypeScript: add definitions for block and unblock (Allow className to be used on the Main element vercel/next.js#3799)
• 9c217ab Ensure withMetadata can add RGB16 profiles Can't use materialize css with next js vercel/next.js#3773
• e7381e5 Alternative fix for 4340d60, uses existing StaySequential
• 4340d60 Ensure composite tile images fully decoded Slow page load in production vercel/next.js#3767
• 7f64d46 Docs: add missing returns property to raw
• 67e927b Docs: ensure all functions include method signature Dont send bundles when file system routing is disabled vercel/next.js#3777
• 9c7713e Docs: remove mention of EXIF from flip/flop ops
• 8be6da1 Docs: clarify when rotate op will remove EXIF Orientation
• 9563568 Ensure withMetadata skips default profile for RGB16 Can't use materialize css with next js vercel/next.js#3773
• 44a0ee3 Release v0.32.5
• ccd51c8 Upgrade to libvips v8.14.4
• bb7469b Ensure withMetadata adds default sRGB profile Not getting url.query in custom parametrised server route vercel/next.js#3761
• a2cac61 Simplify 90/270 orient-before-resize logic (Fix with-redux-saga server rendered clock, fixes #3760 vercel/next.js#3762)
• 5c19f6d Ensure resize fit=inside respects 90/270 rotate With redux example clock interval fix vercel/next.js#3756
• 3d01775 Docs: changelog entries for Error 404 SourceMap Next5 vercel/next.js#3748 IE 11 regression with v5 vercel/next.js#3755 Use indexOf instead of startsWith vercel/next.js#3758
• 87562a5 TypeScript: Ensure WebpOptions minSize is boolean (Use indexOf instead of startsWith vercel/next.js#3758)
• 2829e17 Fix build with musl 1.2.4 (IE 11 regression with v5 vercel/next.js#3755)
• ffefbd2 TypeScript: add missing WebpPresetEnum (Error 404 SourceMap Next5 vercel/next.js#3748)
• bc8f983 Tests: ensure Jimp benchmark uses bicubic as resizing kernel (Example request: Using with-apollo with apollo-cache-persist vercel/next.js#3745)
• 440936a Tests: update benchmark deps and container (Adding jest in .babelrc prevents next app from running vercel/next.js#3744)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
next-js-next-plugin-storybook	🔄 Building (Inspect)	Visit Preview	💬 Add feedback	Oct 9, 2023 9:02pm
next-js-next-plugin-storybook-g5dx	❌ Failed (Inspect)			Oct 9, 2023 9:02pm
next-js-next-plugin-storybook-y5ka	❌ Failed (Inspect)			Oct 9, 2023 9:02pm
next-x-storybook	❌ Failed (Inspect)			Oct 9, 2023 9:02pm

[stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[vercel]

Deployment failed with the following error:

Could not parse File as JSON: vercel.json

[changeset-bot]

⚠️ No Changeset found

Latest commit: 3fa929e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR