Update tools/package.json dependencies, remove imagemin-zopfli (#35406)

imagemin-zopfli brings a lot of [vulnerable
dependencies](https://github.com/go-gitea/gitea/security/dependabot) and
it is unmaintained. The removal brings a size increase to these images,
but I think ultimately this size does not matter enough. I verified this
passes `pnpm audit` now.
This commit is contained in:
silverwind
2025-09-04 15:17:33 +02:00
committed by GitHub
parent 879b896656
commit e9655df082
7 changed files with 263 additions and 1683 deletions
+5 -6
View File
@@ -5,18 +5,17 @@
"type": "module",
"private": true,
"dependencies": {
"fabric": "^6.0.0",
"imagemin-zopfli": "^7.0.0",
"svgo": "^3.0.0",
"fast-glob": "^3.0.0"
"fabric": "^6.7.1",
"svgo": "^4.0.0",
"fast-glob": "^3.3.3"
},
"optionalDependencies": {
"canvas": "^3.2.0"
},
"pnpm": {
"onlyBuiltDependencies": ["canvas", "zopflipng-bin"],
"onlyBuiltDependencies": ["canvas"],
"overrides": {
"canvas": "3.2.0"
}
}
}
}