[Snyk] Upgrade canvas from 2.8.0 to 2.9.1

[TeslowMusic]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade canvas from 2.8.0 to 2.9.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 3 months ago, on 2022-03-19.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Information Exposure SNYK-JS-SIMPLEGET-2361683	547/1000 Why? Proof of Concept exploit, CVSS 8.8	Proof of Concept
	Information Exposure SNYK-JS-NODEFETCH-2342118	547/1000 Why? Proof of Concept exploit, CVSS 8.8	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: canvas

• 2.9.1 - 2022-03-19
  

  Fixed

  • Stringify CanvasGradient, CanvasPattern and ImageData like browsers do. (#1639, #1646)
  • Add missing include for toupper.
  • Throw an error instead of crashing the process if getImageData or putImageData is called on a PDF or SVG canvas (#1853)
  • Compatibility with Typescript 4.6
  • Near-perfect font matching on Linux (#1572)
  • Fix multi-byte font path support on Windows.
• 2.9.0 - 2022-01-17
  

  Changed

  • Refactor functions to classes.
  • Changed DOMPoint() constructor to check for parameter nullability.
  • Changed DOMMatrix.js to use string literals for non-special cases.
  • Remove semicolons from Dommatrix.js.
  • Update nan to v2.15.0 to ensure Node.js v14+ support.
  • Clean up inf/nan macros and slightly speed up argument checking.

  Added

  • Added deregisterAllFonts method to free up memory and reduce font conflicts.

  Fixed

  • Support Apple M1 Homebrew install that puts canvas install library files in /opt/homebrew/lib
• 2.8.0 - 2021-05-17
  

  Changed

  • Upgrade dtslint
  • Upgrade node-pre-gyp to 1.0.0. Note that if you are using special node-pre-gyp
    features like node_pre_gyp_accessKeyId, you may need to make changes to your
    installation procedure. See https://github.com/mapbox/node-pre-gyp/blob/master/CHANGELOG.md#100.
  • Add Node.js v16 to CI.
  • The C++ class method nBytes() now returns a size_t. (Because this is a C++
    method only, this is not considered a breaking change.)

  Added

  • Add support for inverse() and invertSelf() to DOMMatrix (#1648)
  • Add support for context.getTransform() (#1769)
  • Add support for context.setTransform(dommatrix) (#1769)

  Fixed

  • Fix actualBoundingBoxLeft and actualBoundingBoxRight returned by measureText to be the ink rect (#1776, fixes #1703).
  • Fix Pango logging "expect ugly output" on Windows (#1643)
  • Fix benchmark for createPNGStream (#1672)
  • Fix dangling reference in BackendOperationNotAvailable exception (#1740)
  • Fix always-false comparison warning in Canvas.cc.
  • Fix Node.js crash when throwing from an onload or onerror handler.

from canvas GitHub release notes

Commit messages

Package name: canvas

• 9d8da5b v2.9.1
• 4273771 Fix CI
• d7c4673 Add support for multi-byte font path on Windows
• ddce10f select fonts via postscript name on Linux
• 009d594 replace some remaining glib calls
• 6fd0fa5 make types compatible with typescript 4.6 (#1986)
• 0bccc05 bug: fix process crash in getImageData for PDF/SVG canvases
• 83a8df1 Add missing cctype include for toupper
• 5fc80e7 bug: stringify CanvasPattern, ImageData, CanvasGradient like browsers
• d603479 v2.9.0
• aed721d Update nan
• a721d51 Clean up isnan/isinf, use isfinite
• 604db27 Run standard --fix
• 324134b use classes/const/let etc
• 1980805 Fix building on M1 macOS
• a4b571b Point to troubleshooting guide in issue template
• 4a891ef Revert "export type NodeCanvasRenderingContext2D"
• e48cc30 Update has_lib.js to support Apple M1 with homebrew (#1872)
• d7ebfce Merge pull request #1623 from samizdatco/pattern-transform
• f27e10a src: remove semicolons from DOMMatrix.js
• e278660 lib: use strings for non-special cases (#1820)
• 8de64bd tests(): add failing test for direction rtl and textAlign START/END (#1824)
• 1e54481 Add `deregisterAllFonts` method. (#1811)
• 6bbc8cb changelog: update changelog

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs