deps(deps): bump sharp and astro

[dependabot]

Bumps sharp to 0.35.5 and updates ancestor dependency astro. These dependencies need to be updated together.

Updates sharp from 0.34.5 to 0.35.5

Release notes

Sourced from sharp's releases.

v0.35.5

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4

• Add upper bounds check on length of linear and GIF delay arrays.

• Improve error handing when WebAssembly fallback also fails. #4593 @​lazerg

• TypeScript: Allow multi-frame options for JXL output. #4602 @​ramin-010

• TypeScript: Remove non-existent named export. #4604

• Increase accepted dimensions when extending an image. #4605

• Improve gain map support for extract and rotate operations. #4606

• Tests: Ensure composite tests pass on big endian platforms. #4609

v0.35.5-rc.1

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.4-rc.1

• Add upper bounds check on length of linear and GIF delay arrays.

• Improve error handing when WebAssembly fallback also fails. #4593 @​lazerg

• TypeScript: Allow multi-frame options for JXL output. #4602 @​ramin-010

• TypeScript: Remove non-existent named export. #4604

• Increase accepted dimensions when extending an image. #4605

• Improve gain map support for extract operation. #4606

... (truncated)

Commits

• 51a990f Release v0.35.5
• 96de105 Upgrade to sharp-libvips v1.3.4
• 3a61390 CI: Configure Dependabot with all package.json locations
• 4940c50 Improve gain map support for rotate/flip/flop ops
• 20654aa Prerelease v0.35.5-rc.1
• ef4f934 CI: Upgrade to Ubuntu 26.04
• 358df95 Upgrade to libvips v8.18.7
• 49f4903 Improve gain map support for rotate-then-extract #4606
• 0e2e55e Silence a couple of compiler/static analysis warnings
• cef3b8c Improve gain map support for extract operation #4606
• Additional commits viewable in compare view

Updates astro from 6.4.8 to 7.4.0

Release notes

Sourced from astro's releases.

astro@7.4.0

Minor Changes

• #17894 b7a1bd9 Thanks @​Princesseuh! - Adds a new --timings flag to astro build to help you find what slows down your builds

  When a build takes longer than expected, it can be hard to tell whether the cause is an integration, a Markdown processor plugin, image processing, or even syntax highlighting. Add the --timings flag to your build command to print a summary once the build finishes:

  astro build --timings

  This is helpful to decide what to optimize first, or to compare build times before and after a change to your project.

• #17830 a937b0d Thanks @​florian-lefebvre! - Adds a new optional getFontProperties() callback to font providers

  Font providers can now expose the weights, styles, subsets and formats a font family actually has. Astro uses it when resolving your font configuration to warn about values a provider cannot serve, for example a weight a font family does not offer.

  All built-in providers implement it. If you maintain a custom font provider, implementing this callback is optional for now but it will be required in Astro 8:

  import type { FontProvider } from 'astro';
  const provider: FontProvider = {
  name: 'my-provider',
  resolveFont: ({ familyName }) => {
  // ...
  },
  getFontProperties: ({ familyName }) => ({
  weights: ['400', '700'],
  styles: ['normal', 'italic'],
  subsets: ['latin'],
  formats: ['woff2'],
  }),
  };

• #17830 a937b0d Thanks @​florian-lefebvre! - Adds a fetch() function to the font provider init() context

  This function requests a provider API, retrying transient failures and more. It lets providers that wrap a 3rd-party unifont provider pass the context to it directly:

  import type { FontProvider } from 'astro';
  import type { InitializedProvider } from 'unifont';
  import { acmeProvider } from '@acme/unifont-provider';
  export function acmeFontProvider(): FontProvider {
  const provider = acmeProvider();
  let initializedProvider: InitializedProvider | undefined;
  return {
  name: provider._name,

... (truncated)

Changelog

Sourced from astro's changelog.

7.4.0

Minor Changes

• #17894 b7a1bd9 Thanks @​Princesseuh! - Adds a new --timings flag to astro build to help you find what slows down your builds

  When a build takes longer than expected, it can be hard to tell whether the cause is an integration, a Markdown processor plugin, image processing, or even syntax highlighting. Add the --timings flag to your build command to print a summary once the build finishes:

  astro build --timings

  This is helpful to decide what to optimize first, or to compare build times before and after a change to your project.

• #17830 a937b0d Thanks @​florian-lefebvre! - Adds a new optional getFontProperties() callback to font providers

  Font providers can now expose the weights, styles, subsets and formats a font family actually has. Astro uses it when resolving your font configuration to warn about values a provider cannot serve, for example a weight a font family does not offer.

  All built-in providers implement it. If you maintain a custom font provider, implementing this callback is optional for now but it will be required in Astro 8:

  import type { FontProvider } from 'astro';
  const provider: FontProvider = {
  name: 'my-provider',
  resolveFont: ({ familyName }) => {
  // ...
  },
  getFontProperties: ({ familyName }) => ({
  weights: ['400', '700'],
  styles: ['normal', 'italic'],
  subsets: ['latin'],
  formats: ['woff2'],
  }),
  };

• #17830 a937b0d Thanks @​florian-lefebvre! - Adds a fetch() function to the font provider init() context

  This function requests a provider API, retrying transient failures and more. It lets providers that wrap a 3rd-party unifont provider pass the context to it directly:

  import type { FontProvider } from 'astro';
  import type { InitializedProvider } from 'unifont';
  import { acmeProvider } from '@acme/unifont-provider';
  export function acmeFontProvider(): FontProvider {
  const provider = acmeProvider();
  let initializedProvider: InitializedProvider | undefined;
  return {

... (truncated)

Commits

• c2c43a9 [ci] release (#18354)
• f698e18 fix(astro): ignore image.service overrides with only undefined values (#18383)
• 83f5f4d Update dependency vite to ^8.3.4 (#18393)
• 858938a Update astro (#18390)
• 1f04637 feat: use tinyps for process finding (#18368)
• c96d07e Update dependency preact to v11 (#18389)
• f8cf143 Update dependency rolldown to ^1.2.13 (#18388)
• 5c48d3b Update dependency devalue to v6 (#18385)
• 71e2b24 feat: treat Vite's resolved outDir values as the source of truth for build ou...
• a937b0d feat(fonts): warn on invalid properties (#17830)
• Additional commits viewable in compare view