chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

[dependabot]

Bumps the npm_and_yarn group with 2 updates in the / directory: liquidjs and sharp.

Updates liquidjs from 10.27.0 to 10.27.2

Release notes

Sourced from liquidjs's releases.

v10.27.2

10.27.2 (2026-07-09)

Bug Fixes

• charge join/json/inspect filters by produced output size (#925) (7ab49f9)
• date: zero-pad milliseconds when formatting %N fractional seconds (#929) (2634f9d)
• enforce ownPropertyOnly for inherited array indices (#924) (552819a)
• filters: modulo should follow divisor sign for negative operands (#922) (568bd5f)
• filters: return empty for out-of-range slice begin or negative length (#928) (f9a1316)

v10.27.1

10.27.1 (2026-06-23)

Bug Fixes

• improve round function; improvement to #873 (#901) (956b51e)
• security: charge pop filter allocation to memoryLimit (#907) (8a0c74a)
• strip_html: infinite loop for strip_html (5c3522f)

Performance Improvements

• parser: memoize createTrie to avoid rebuilding tries per Tokenizer (#911) (3a0d80d)

Changelog

Sourced from liquidjs's changelog.

10.27.2 (2026-07-09)

Bug Fixes

• charge join/json/inspect filters by produced output size (#925) (7ab49f9)
• date: zero-pad milliseconds when formatting %N fractional seconds (#929) (2634f9d)
• enforce ownPropertyOnly for inherited array indices (#924) (552819a)
• filters: modulo should follow divisor sign for negative operands (#922) (568bd5f)
• filters: return empty for out-of-range slice begin or negative length (#928) (f9a1316)

10.27.1 (2026-06-23)

Bug Fixes

• improve round function; improvement to #873 (#901) (956b51e)
• security: charge pop filter allocation to memoryLimit (#907) (8a0c74a)
• strip_html: infinite loop for strip_html (5c3522f)

Performance Improvements

• parser: memoize createTrie to avoid rebuilding tries per Tokenizer (#911) (3a0d80d)

Commits

• 050f161 chore(release): 10.27.2 [skip ci]
• 2634f9d fix(date): zero-pad milliseconds when formatting %N fractional seconds (#929)
• f9a1316 fix(filters): return empty for out-of-range slice begin or negative length (#...
• 7ab49f9 fix: charge join/json/inspect filters by produced output size (#925)
• 552819a fix: enforce ownPropertyOnly for inherited array indices (#924)
• 8bfb642 docs: add spokodev as a contributor for code (#923)
• 568bd5f fix(filters): modulo should follow divisor sign for negative operands (#922)
• ed48986 chore(release): 10.27.1 [skip ci]
• afec88b docs(readme): README overhaul, used-by grid, and docs homepage (#914)
• 3a0d80d perf(parser): memoize createTrie to avoid rebuilding tries per Tokenizer (#911)
• Additional commits viewable in compare view

Updates sharp from 0.33.5 to 0.35.3

Release notes

Sourced from sharp's releases.

v0.35.3

• Tighten verification of text dimensions, TIFF tile dimensions and extend values.

• Improve code bundler support by resolving path to libvips binary.

• Increase default concurrency when use of MALLOC_ARENA_MAX is detected.

• Emit warning about binaries provided by Electron for use on Linux.

• Add hasAlpha property to output info. #4500

• TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520 @​Andarist

• Bound clahe width and height to avoid signed overflow. #4551 @​metsw24-max

• Bound trim margin to avoid signed overflow. #4552 @​metsw24-max

• Reject infinite values when validating numbers. #4553 @​metsw24-max

• Bound extract region to libvips coordinate limit. #4555 @​metsw24-max

• Verify background colour values are numbers. #4556 @​metsw24-max

• Bound create and raw input dimensions to coordinate limit. #4558 @​metsw24-max

• Tighten recomb and affine matrix verification. #4560 @​chatman-media

• Verify cache memory limit to avoid overflow. #4561 @​metsw24-max

v0.35.3-rc.2

• Tighten verification of text dimensions, TIFF tile dimensions and extend values.

... (truncated)

Commits

• 1018449 Release v0.35.3
• ba303a7 Prerelease v0.35.3-rc.2
• 4f94fc5 Upgrade to sharp-libvips v1.3.2
• c5e7a3f Bump devDeps, fix Deno/Windows smoke tests
• 9a8d002 Docs: Add changelog entry and note about transferable #4520
• 8694db0 TypeScript: Return more precise Buffer\<ArrayBuffer> from toBuffer (#4520)
• e000d0b Prerelease v0.35.3-rc.1
• 9554ca9 Prerelease v0.35.3-rc.0
• 6a29fd5 Emit warning about native binaries on Linux Electron
• 540d2ea Increase default concurrency when use of MALLOC_ARENA_MAX detected
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for sharp since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[cloudflare-workers-and-pages]

Deploying bichael-uk with    Cloudflare Pages

Latest commit:	d3dbfa3
Status:	✅  Deploy successful!
Preview URL:	https://443a539f.bichael-uk.pages.dev
Branch Preview URL:	https://dependabot-npm-and-yarn-npm-hqoh.bichael-uk.pages.dev

View logs