Auto merge of #28904 - servo:dependabot/cargo/image-0.24.3, r=jdm

Bump image from 0.24.1 to 0.24.3

Bumps [image](https://github.com/image-rs/image) from 0.24.1 to 0.24.3.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/image-rs/image/blob/master/CHANGES.md">image's changelog</a>.</em></p>
<blockquote>
<h3>Version 0.24.3</h3>
<p>New Features:</p>
<ul>
<li><code>TiffDecoder</code> now supports setting resource limits.</li>
</ul>
<p>Bug fixes:</p>
<ul>
<li>Fix compile issues on little endian systems.</li>
<li>Various panics discovered by fuzzing.</li>
</ul>
<h3>Version 0.24.2</h3>
<p>Structural changes:</p>
<ul>
<li>CI now runs <code>cargo-deny</code>, checking dependent crates to an OSS license list
and against RUSTSEC advisories.</li>
</ul>
<p>New Features:</p>
<ul>
<li>The WebP decoder recognizes and decodes images with <code>VP8X</code> header.</li>
<li>The DDS decoder recognizes and decodes images with <code>DX10</code> headers.</li>
</ul>
<p>Bug fixes:</p>
<ul>
<li>Calling <code>DynamicImage</code>/<code>ImageBuffer</code>'s methods <code>write_to</code> and <code>save</code> will now
work properly even if the backing container is larger than the image layout
requires. Only the relevant slice of pixel data is passed to the encoder.</li>
<li>Fixed a OOM-panic caused by malformed images in the <code>gif</code> decoder.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/image-rs/image/commits">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=image&package-manager=cargo&previous-version=0.24.1&new-version=0.24.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

</details>
This commit is contained in:
bors-servo 2022-08-17 00:12:45 -04:00 committed by GitHub
commit 3e55deded6
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

15
Cargo.lock generated
View file

@ -884,7 +884,7 @@ dependencies = [
"euclid", "euclid",
"gfx_traits", "gfx_traits",
"gleam 0.12.1", "gleam 0.12.1",
"image 0.24.2", "image 0.24.3",
"ipc-channel", "ipc-channel",
"keyboard-types", "keyboard-types",
"libc", "libc",
@ -2977,9 +2977,9 @@ dependencies = [
[[package]] [[package]]
name = "image" name = "image"
version = "0.24.2" version = "0.24.3"
source = "registry+https://github.com/rust-lang/crates.io-index" source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "28edd9d7bc256be2502e325ac0628bde30b7001b9b52e0abe31a1a9dc2701212" checksum = "7e30ca2ecf7666107ff827a8e481de6a132a9b687ed3bb20bb1c144a36c00964"
dependencies = [ dependencies = [
"bytemuck", "bytemuck",
"byteorder", "byteorder",
@ -2987,7 +2987,6 @@ dependencies = [
"exr", "exr",
"gif", "gif",
"jpeg-decoder 0.2.3", "jpeg-decoder 0.2.3",
"num-iter",
"num-rational 0.4.0", "num-rational 0.4.0",
"num-traits", "num-traits",
"png 0.17.5", "png 0.17.5",
@ -4180,7 +4179,7 @@ dependencies = [
"http", "http",
"hyper 0.14.5", "hyper 0.14.5",
"hyper_serde", "hyper_serde",
"image 0.24.2", "image 0.24.3",
"ipc-channel", "ipc-channel",
"lazy_static", "lazy_static",
"log", "log",
@ -5387,7 +5386,7 @@ dependencies = [
"html5ever", "html5ever",
"http", "http",
"hyper_serde", "hyper_serde",
"image 0.24.2", "image 0.24.3",
"indexmap", "indexmap",
"ipc-channel", "ipc-channel",
"itertools", "itertools",
@ -5665,7 +5664,7 @@ dependencies = [
"clipboard", "clipboard",
"euclid", "euclid",
"getopts", "getopts",
"image 0.24.2", "image 0.24.3",
"keyboard-types", "keyboard-types",
"lazy_static", "lazy_static",
"libc", "libc",
@ -7301,7 +7300,7 @@ dependencies = [
"euclid", "euclid",
"headers", "headers",
"http", "http",
"image 0.24.2", "image 0.24.3",
"ipc-channel", "ipc-channel",
"keyboard-types", "keyboard-types",
"log", "log",