Update dependency upgrades - non-major

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@ts-safeql/eslint-plugin (source)	3.5.1 -> 3.6.0
canvas	3.0.0-rc3 -> 3.0.0
pnpm (source)	9.15.0+sha512.76e2379760a4328ec4415815bcd6628dee727af3779aaa4c914e3944156c4299921a89f976381ee107d41f12cfa4b66681ca9c718f0668fa0831ed4c6d8ba56c -> 9.15.1

---

Release Notes

ts-safeql/safeql (@​ts-safeql/eslint-plugin)

v3.6.0

Compare Source

Minor Changes

• d215453: Added support for literal inference. SafeQL will now be able to infer string literals from your queries:

  // Before:
  sql<{ col: string }>`SELECT ${"value"} FROM table`;
  sql<{ col: string }>`SELECT CASE WHEN ${condition} THEN 'a' ELSE 'b' END`;
  
  // After:
  sql<{ col: "value" }>`SELECT ${"value"} FROM table`;
  sql<{ col: "a" | "b" }>`SELECT CASE WHEN ${condition} THEN 'a' ELSE 'b' END`;

  This behavior could be disabled or adjusted in the connections.inferLiterals.

Automattic/node-canvas (canvas)

v3.0.0

Compare Source

==================

This release notably changes to using N-API. 🎉

Breaking

• Dropped support for Node.js 16.x and below.

Changed

• Migrated to N-API (by way of node-addon-api) and removed libuv and v8 dependencies
• Change from node-pre-gyp to prebuild-install
• Defer the initialization of the op variable to the default switch case to avoid a compiler warning. (#​2229)
• Use a default switch case with a null statement if some enum values aren't suppsed to be handled, this avoids a compiler warning. (#​2229)
• Migrate from librsvg's deprecated rsvg_handle_get_dimensions() and rsvg_handle_render_cairo() functions to the new rsvg_handle_get_intrinsic_size_in_pixels() and rsvg_handle_render_document() respectively. (#​2229)
• Avoid calling virtual methods in constructors/destructors to avoid bypassing virtual dispatch. (#​2229)
• Remove unused private field backend in the Backend class. (#​2229)
• Add Node.js v20 to CI. (#​2237)
• Replaced dtslint with tsd (#​2313)
• Changed PNG consts to static properties of Canvas class
• Reverted improved font matching on Linux (#​1572) because it doesn't work if fonts are installed. If you experience degraded font selection, please file an issue and use v3.0.0-rc3 in the meantime.

Added

• Added string tags to support class detection
• Throw Cairo errors in canvas.toBuffer()

Fixed

• Fix a case of use-after-free. (#​2229)
• Fix usage of garbage value by filling the allocated memory entirely with zeros if it's not modified. (#​2229)
• Fix a potential memory leak. (#​2229)
• Fix the wrong type of setTransform
• Fix the improper parsing of rgb functions issue. (#​2300)
• Fix issue related to improper parsing of leading and trailing whitespaces in CSS color. (#​2301)
• RGB functions should support real numbers now instead of just integers. (#​2339)
• Allow alternate or properly escaped quotes within font-family names
• Fix TextMetrics type to include alphabeticBaseline, emHeightAscent, and emHeightDescent properties
• Fix class properties should have defaults as standard js classes (#​2390)
• Fixed Exif orientation in JPEG files being ignored (#​1670)
• Align DOMMatrix/DOMPoint to spec by adding missing methods

pnpm/pnpm (pnpm)

v9.15.1

Compare Source

---

Configuration

📅 Schedule: Branch creation - "after 4pm on thursday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@ts-safeql/[email protected]	environment, filesystem, unsafe Transitive: network, shell	+50	12.1 MB	newbie012
npm/[email protected]	filesystem Transitive: environment, network, shell	+39	1.57 MB	calebhearon

🚮 Removed packages: npm/@ts-safeql/[email protected], npm/[email protected]

View full report↗︎