deps(deps): bump canvas from 3.2.0 to 3.2.2

[dependabot]

Bumps canvas from 3.2.0 to 3.2.2.

Release notes

Sourced from canvas's releases.

v3.2.2

Fixed

• Fix dangling env pointer in image MIME data cleanup (#2550)
• Fix ctx.direction not affected by ctx.save and ctx.restore
• Preserve rest of PDF pages when changing width and height (#2538)
• Several security fixes for untrusted inputs to getImageData and putImageData. Thanks to Ethan Kim for the report.

v3.2.1

3.2.1

• Fix error message HTTP response status code in image src setter
• roundRect() shape incorrect when radii were large relative to rectangle size (#2400)
• Reject loadImage when src is null or invalid (#2304)
• Fix compilation on GCC 15 by including <cstdint> (#2545)

Changelog

Sourced from canvas's changelog.

3.2.2

Fixed

• Fix dangling env pointer in image MIME data cleanup (#2550)
• Fix ctx.direction not affected by ctx.save and ctx.restore
• Preserve rest of PDF pages when changing width and height (#2538)
• Several security fixes for untrusted inputs to getImageData and putImageData. Thanks to Ethan Kim for the report.

3.2.1

• Fix error message HTTP response status code in image src setter
• roundRect() shape incorrect when radii were large relative to rectangle size (#2400)
• Reject loadImage when src is null or invalid (#2304)
• Fix compilation on GCC 15 by including (#2545)

Commits

• ac82fa7 v3.2.2
• 103a620 add the last flurry of commits to CHANGELOG
• 7304c7a avoid integer overflow in getImageData
• f9fcc5f avoid integer overflow in putImageData
• 802a8ca avoid integer overflow in new ImageData
• 9d1b478 wrap negative values passed to createImageData
• 779483c bail early when setting zero-length image source
• 22ed2b7 make canvas types unsigned
• 2faab61 keep canvas width and height valid
• 351aacf avoid integer overflow in ensureSurface
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
fitbuddyai	Ready	Preview, Comment	Mar 30, 2026 2:06pm