chore(deps): update weekly dependency update

[have-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@napi-rs/canvas	0.1.100 -> 1.0.3			dependencies	major
actions/cache	v5 -> v6			action	major
actions/checkout	v4 -> v7			action	major
actions/checkout	v5 -> v7			action	major
actions/create-github-app-token	1b10c78 -> bcd2ba4			action	digest
actions/github-script	v7 -> v9			action	major
actions/setup-node	v4 -> v7			action	major
node (source)	>=24 -> >=24.18.0			engines	minor
oras-project/setup-oras	v1 -> v2			action	major
pnpm/action-setup	v5 -> v6			action	major

---

Release Notes

Brooooooklyn/canvas (@​napi-rs/canvas)

v1.0.3

Compare Source

Bug Fixes

• deps: update rust crate imagesize to 0.15 (#​1290) (2ad119e)
• deps: update rust crate infer to 0.22 (#​1294) (dc3377f)
• shadow: align Canvas2D shadows with Chromium (#​1300) (5646339)
• shadow: apply shadowColor alpha once instead of squaring it (#​1298) (2cd4e1a), closes #​1297

Features

• chrome/m151 (#​1302) (9eb7816)

v1.0.2

Compare Source

Features

• chrome/m149 (#​1281) (3fe9b54)

v1.0.1

Compare Source

Bug Fixes

• link aarch64-pc-windows-msvc against static CRT (#​1276) (8483662)
• missing icudtl.dat in win32-arm64 package (#​1278) (e1a75d1)

v1.0.0

Compare Source

Bug Fixes

• loadImage settles on invalid input (#​1257) (bed5c31)

0.1.99 (2026-04-18)

Bug Fixes

• drawImage gray halo on transparent PNG edges with imageSmoothingEnabled (#​1252) (a748f3f)

0.1.98 (2026-04-15)

Features

• chrome m148 (#​1248) (9b96c19)

0.1.97 (2026-03-16)

Bug Fixes

• use signed integers for canvas APIs that accept negative coordinates (#​1227) (fa7c7c1)

0.1.96 (2026-03-05)

Bug Fixes

• prevent memory leak when drawing canvas onto another via drawImage() (#​1222) (85ef08b)

0.1.95 (2026-02-24)

Bug Fixes

• snapshot pixel data in putImageData for deferred rendering mode (#​1213) (c2526ac)

0.1.94 (2026-02-20)

Bug Fixes

• putImageData incorrectly blending pixels due to Mitchell cubic resampler (#​1211) (d83e648)

0.1.93 (2026-02-17)

Features

• chrome m146 (#​1207) (0b9030d)

0.1.92 (2026-02-12)

Bug Fixes

• putImageData bypassed deferred rendering PageRecorder (#​1206) (ae938a3)

Features

• add node-canvas compatibility layer (@napi-rs/canvas/node-canvas) (#​1203) (2ab43b6)

0.1.91 (2026-02-09)

Bug Fixes

• clip with nested transforms intersects in device space (#​1202) (7e87f9e)
• plug native memory leaks in SVG canvas, bitmap shader, and stream allocations (#​1201) (60a34e8)

0.1.90 (2026-02-05)

Bug Fixes

• add Drop impl for SkPictureRecorder to prevent memory leak (#​1199) (dd4f96c)
• copy font data in GlobalFonts.register to prevent buffer invalidation (#​1194) (fa5b40a)
• prevent memory leaks in encode_stream callback and SkPixmap (#​1200) (c21e2ea)

Features

• support http url in image src (#​1197) (8c65ffe)

0.1.89 (2026-01-28)

Bug Fixes

• napi feature (#​1191) (eb260b2)

Features

• implement deferred rendering with incremental layer caching (#​1193) (4643bfe)

0.1.88 (2025-12-27)

Bug Fixes

• should throw TypeError if drawImage param mismatched (#​1190) (386ac90)

0.1.87 (2025-12-26)

Bug Fixes

• image: make Buffer load synchronous and add decode() method (#​1186) (d418593)
• make Image class HTML spec compliant for jsdom integration (#​1184) (a6d3993)

Features

• add ctx.lang property for language-specific text rendering (#​1187) (5dfbfb6)
• add textRendering property for text rendering hints (#​1189) (6707c48)
• ignore Letter Spacing in Cursive Scripts (#​1185) (2fa4b40)

0.1.86 (2025-12-21)

Bug Fixes

• RTL text fillText(maxWidth) x positioning calculation error (#​1179) (4db0dac)

Features

• chrome m144 (#​1182) (dfb65a3)

0.1.85 (2025-12-19)

Bug Fixes

• initial black color string should be [#​000000](https://redirect.github.com/Brooooooklyn/canvas/issues/000000) rather than [#​000](https://redirect.github.com/Brooooooklyn/canvas/issues/000) (#​1174) (c45020a)

Features

• add fontVariantCaps (#​1161) (d21c146)
• basic support for direction (#​1175) (5c04020)
• support Lottie API (#​1177) (ca1f5f5)
• support windows arm64 (#​1176) (e17c4e5)

0.1.84 (2025-12-06)

Features

• add fontStretch and fontKerning support (#​1160) (8da5eea)
• add GIF encoding support (#​1159) (0cf2fcc)

0.1.83 (2025-11-27)

Features

• add variable font support (#​1148) (28fdfb2)
• chrome m143 (#​1153) (f49f4dc)

0.1.82 (2025-11-11)

Features

• add PDF annotation APIs for interactive links and navigation (#​1140) (52cd89f)
• add Uint16Array and Float32Array support to ImageData constructor (#​1144) (b6fc7d8)
• PDFDocument support (#​1137) (4ca7479)

0.1.81 (2025-10-26)

Features

• upgrade to chrome/142 (#​1136) (bcee494)

0.1.80 (2025-09-13)

Bug Fixes

• external memory usage adjustment mismatch (#​1123) (e0b76b9)
• shadow is not applied with transform correctly (#​1124) (05d10b1)

0.1.79 (2025-09-08)

Bug Fixes

• DOMMatrix.invertSelf() to return self for non-invertible matrices per DOM spec (#​1113) (d280e8a)
• prevent segfault when creating patterns from canvases (#​1118) (3d50fca), closes #​1107 #​1107 #​1106

0.1.78 (2025-08-28)

Bug Fixes

• canvas pattern live reference issue causing incorrect rendering (#​1107) (255b16e)

Features

• chrome m140 (#​1110) (ec4152c)

0.1.77 (2025-08-08)

Bug Fixes

• return early if setLineDash param is invalid (#​1097) (6c9e9f7)

0.1.76 (2025-08-01)

0.1.75 (2025-08-01)

Bug Fixes

• data URL handling for non-image MIME types (resolves #​1088) (#​1089) (22d45df)

Features

• implement toBlob and convertToBlob (a7f259f)

0.1.74 (2025-07-17)

Bug Fixes

• hsl color parsing (#​1084) (40f47b8)
• Ref was deprecated in NAPI-RS (#​1085) (e21858a)

Features

• upgrade to NAPI-RS 3.0.0-beta.11 (#​1081) (a299185)

0.1.73 (2025-06-29)

Bug Fixes

• wrong data pointer to ImageData in Electron env (#​1076) (c347654)

0.1.72 (2025-06-25)

Bug Fixes

• putImageData doesn't work on Electron environment (#​1075) (cc15b02)
• use this library with webpack (#​1074) (7b411bf)

0.1.71 (2025-06-08)

Bug Fixes

• memory leak in createPattern (#​1067) (2e9f718)
• shadow clipping beyond canvas bounds (#​1068) (deeeea7)
• wrong shadow alpha calculation (#​1064) (e853757)

Features

• chrome m137 (#​1049) (da30726)
• chrome m138 (#​1070) (2938333)
• upgrade cssparser (#​1063) (9c497a3)
• upgrade to NAPI-RS beta (#​1052) (91a20a0)

0.1.70 (2025-05-02)

Bug Fixes

• resize svg from file path render an empty image (#​1046) (2f03306)

Features

• expose SkCornerPathEffect as round() fn on Path2D (#​1040) (68c9f2c)

0.1.69 (2025-04-04)

Bug Fixes

• accept non-string param as text (#​1030) (c04cfd7)
• memory leak when creating bitmap from svg (#​1023) (1bd4caa)

Features

• chrome m136 (#​1033) (e71612b)

0.1.68 (2025-03-04)

Bug Fixes

• Bitmap::from_image_data width and height (#​1012) (dc9cdd1)
• BlendMode::Plus should be mapped to "plus" globalCompositeOperation (#​1016) (bd61a90)
• create pattern from Canvas (#​1013) (d1137a5)
• decode avif Image with libavif (#​1005) (d369c55)
• don't panic if current ts is not able to invert when transform (#​1002) (27e1cc8)
• draw canvas on canvas clip (#​1003) (e609b20)
• make sure registered font Buffer is valid (#​1014) (529e96c)
• memory leak in some blend mode (#​1015) (319f5b2)

0.1.67 (2025-02-08)

Bug Fixes

• drawImage canvas implementation (#​989) (1420291)
• make sure SVGCanvas get content is complete (#​990) (09120d1)

0.1.66 (2025-02-02)

Bug Fixes

• armv7 glibc version (#​981) (0bdd714)
• deps: update rust crate infer to 0.19 (#​985) (967bddf)
• deps: update rust crate nom to v8 (#​976) (521d1af)
• double free in putImageData (#​975) (2887aec)
• flush svg stream after write end (#​986) (8538673)

Features

• chrome/m133 (#​979) (9eba52d)
• support encode stream (#​974) (daccce1)

Performance Improvements

• avoid memcpy while drawing canvas on canvas (#​984) (8f00680)

0.1.65 (2024-12-02)

Bug Fixes

• loadImage should handle file URL (#​959) (0b56645)

0.1.64 (2024-11-25)

Bug Fixes

• missing icudtl.dat on Windows (#​953) (2acc354)

0.1.63 (2024-11-23)

Bug Fixes

• panic when restore from scale(0,0) state (#​944) (973adab)
• shadow blur 0 makes text shadow not render at all (#​946) (04a0cfd)
• shadowBlur position (#​945) (2beeedb)

Features

• add riscv64gc-unknown-linux-gnu (#​947) (d2c83f9)

0.1.62 (2024-11-15)

Bug Fixes

• align the imageSmoothingQuality behavior with chrome (#​942) (991edbb)

Features

• allow set file path as Image#src (#​938) (a94a2ad)
• support data url as Image#src (#​941) (8686c8b)

0.1.61 (2024-11-13)

Features

• after clearing, the bitmap should be cleared, and the width and height should be reset to the initial values. (#​937) (e2a86fe)

0.1.60 (2024-11-07)

Bug Fixes

• allow svg canvas size modification (#​928) (15c7eab)
• deps: update rust crate thiserror to v2 (#​930) (4680dc2)
• memory leak in Image (#​934) (cfc4da5)
• svg context (#​932) (8b53e25)
• upgrade to NAPI-RS 3.0.0-alpha.19 (#​929) (1304a9e)

0.1.59 (2024-10-27)

Bug Fixes

• build macos with xcode llvm (#​905) (b099c0a)
• loadImage convert ArrayBuffer issue (#​920) (0636775)

Features

• upgrade skia to m131 (#​923) (75525d6)

0.1.58 (2024-10-14)

Bug Fixes

• loadImage memleak and performance issue (#​914) (d4fd676)

0.1.57 (2024-10-14)

Bug Fixes

• Creating canvas with width or height of zero or less (#​739) (3a26c7d)
• memory leak in Image/loadImage (#​913) (527c0da)

Features

• chrome/m130 (#​904) (f45b4dd)

0.1.56 (2024-09-19)

Bug Fixes

• ?? is error on node@​10 (#​889) (366d738)
• adjust the order of onload calls (#​898) (df6df8d)
• deps: update rust crate napi to 3.0.0-alpha (d692f59)

0.1.55 (2024-09-04)

Bug Fixes

• image src is null after loaded (#​886) (1628756)

Features

• upgrade skia to m129 (#​888) (b103fc2)

0.1.54 (2024-08-17)

Bug Fixes

• deps: update rust crate libavif to 0.14 (d5db090)
• handle relative and invalid URLs in redirects when passing URL to loadImage() (#​866) (1666a33), closes #​865 #​865
• image decode should be async (#​872) (713ca40)

Features

• chrome/m118 (#​875) (f209603)
• update skia to m127 (#​853) (3d60556)

0.1.53 (2024-06-09)

Bug Fixes

• armv7 segmentfault (#​830) (e17e6b6)
• deps: update rust crate infer to 0.16 (3859fe4)
• loadImage: use promise (#​841) (e85ceee)
• trigger onerror while svg image is invalid (#​840) (31bd832)

Features

• chrome/m116 (#​839) (23276d7)

0.1.52 (2024-04-17)

Bug Fixes

• drawImage with exif orientation (#​814) (a54cd33)
• negative letter spacing (#​813) (11ab7e2)

Features

• chrome/m125 (#​815) (7edc894)

0.1.51 (2024-03-04)

Bug Fixes

• deps: update rust crate base64 to 0.22 (84fd52f)
• remove postinstall script for gnu/musl platform (#​797) (d37da08)

0.1.50 (2024-02-26)

Features

• support ctx.letterSpacing and ctx.wordSpacing (#​794) (793d2a0)

0.1.49 (2024-02-22)

Bug Fixes

• memory leak while encoding png from Canvas (#​791) (3f17b38)

Features

• chrome/m123 (#​790) (a70a8d4)

0.1.48 (2024-02-21)

Bug Fixes

• isPointInPath/isPointInStroke should respect transform (#​787) (9b068f1)
• map points args order (#​788) (72d3d35)
• memory leak in Canvas encode (#​786) (9a4ade5)

0.1.47 (2024-02-19)

Bug Fixes

• DOMMatrix#transformPoint (#​782) (dfc2224)
• font css parser should handle the font height (#​783) (382c304)

0.1.46 (2024-02-19)

Bug Fixes

• deps: update rust crate libavif to 0.13 (08f3ff4)
• draw text on svg (#​780) (b6928f2)

0.1.45 (2024-02-05)

Bug Fixes

• use drawPicture in some blending modes such as destination-in (#​755) (35f7f72), closes #​695

Features

• upgrade Rust toolchain (#​776) (6ce93d8)
• upgrade skia to chrome/122 (#​775) (48c2f88)

0.1.44 (2023-08-22)

Bug Fixes

• file extensions in loadFontsFromDir() are no longer case-sensitive (9342e33)

0.1.43 (2023-08-11)

0.1.42 (2023-08-08)

Bug Fixes

• add ctx.canvas property on svg context (#​697) (968e501)
• deps: update rust crate infer to 0.15 (376b19e)
• url is string type (#​671) (31a8ff9)

Features

• upgrade skia to m116 (#​702) (926c472)

0.1.41 (2023-05-22)

Bug Fixes

• adjust order of generating bitmap (#​675) (8df17af)

0.1.40 (2023-04-09)

Features

• chrome/m113 (#​656) (0141b20)

0.1.39 (2023-03-14)

Bug Fixes

• set empty src to Image (#​649) (d7e14cf)

0.1.38 (2023-03-11)

Bug Fixes

• deps: update rust crate infer to 0.13 (bad913c)

Features

• skia/m112 (#​648) (439a3c5)

0.1.37 (2023-02-27)

Bug Fixes

• reject if image is not supported (#​642) (e4f4930)

0.1.36 (2023-02-21)

Bug Fixes

• recalc paint_x according to align if maxWidth is set (#​639) (7f74567)

0.1.35 (2023-02-16)

Bug Fixes

• canvas instance check (#​632) (08ee680)
• deps: update rust crate libavif to 0.11 (fd1515b)
• DOMMatrix object to skia Transform convert (#​633) (c82d41d)
• DOMMatrix to skia Transform (#​634) (f43ccbd)

0.1.34 (2023-01-12)

Bug Fixes

• wrong text baseline calculation in drawText and measureText (#​606) (bba0296)

0.1.33 (2023-01-08)

Bug Fixes

• maxWidth overflow paint_x position should power the scale ratio (#​603) (17c7902)

0.1.32 (2023-01-07)

Bug Fixes

• getTransform should return DOMMatrix (#​602) (fc576e9)

Features

• chrome/m110 [skip skia] (#​599) (e1efc1d)
• roundRect (#​601) (0823325)

0.1.31 (2023-01-02)

Bug Fixes

• missing canvas property on Context2D (#​597) (b0a351a)
• multiple define on cached native object in jest (88f5ee9)

Features

• chrome/m107 (9f02e86)
• chrome/m108 (04f5a41)

0.1.30 (2022-09-22)

Bug Fixes

• add Mutex guard to GlobalFont (7e0a51a)
• ctx.globalAlpha should effect drawImage (#​561) (9c505e2)
• error listening to req (#​555) (8491685)
• resize canvas should clear the context (8ece352)
• TypeScript types for avif config (29b17f8)
• types: do not use reference tags (#​563) (9e5cc29)

0.1.29 (2022-08-26)

Bug Fixes

• data url should be standard base64 (a59cb40)
• drawImage alpha should not effect by fillStyle (41a6f29)
• isBufferLike in load-image.js (#​536) (c6ad306)

Features

• chrome m106 (45f425c)

0.1.28 (2022-08-16)

Bug Fixes

• adjust Node.js external memory while creating Canvas (77ecc52)

0.1.27 (2022-08-14)

Bug Fixes

• segfault while drawing empty text (#​528) (88f736c)

0.1.26 (2022-08-07)

Bug Fixes

• loadImage: redirect handler (dbbf826)
• miss applying image_smoothing_enabled and image_smoothing_quality (815bc91)
• shadow color was not applied correctly (4054e44)
• test snapshots diff on arm64 (21983c2)
• the quality of toDataURL should between 0 and 1 (27e87df)

Features

• chrome/m105 (ade8f64)

0.1.25 (2022-06-30)

Bug Fixes

• missing load-image.js in package.json (ddb2419)

0.1.24 (2022-06-30)

Bug Fixes

• ctx.filter should store in state and be able to save/restore (b85ee7b)
• parameters for drawImage(canvas) (2392263)
• skia async prop deprecated in future release ([088e628](https://redirect.github.com/Brooooooklyn/canvas/commit/088e628dfe8b73abf777dda97ba057df1a8f3

---

Configuration

📅 Schedule: Branch creation - Between 09:00 PM and 11:59 PM, only on Saturday ( * 21-23 * * 6 ) in timezone America/Edmonton, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[have-renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

[WARN] Ignored project-level auth setting "//npm.pkg.github.com/:_authToken" in "/tmp/renovate/repos/github/happyvertical/pdf/.npmrc": environment variables are not expanded in registry credentials that come from a project .npmrc, because that file is committed to the repository and could leak the secret to an attacker-controlled registry. Move this credential to a trusted source that pnpm still expands — put the line in your user-level ~/.npmrc, or set it with pnpm config set (for example, run: pnpm config set "//npm.pkg.github.com/:_authToken" <value>). See https://pnpm.io/npmrc

[willgriffin]

Queue triage: blocked, do not merge. Exact-head runs 29181123644 and 29181123698 fail before repository tests because pnpm/action-setup cannot self-install the proposed pnpm 11.12.0 (Cannot use in operator to search for integrity in undefined); conventional-commit and changeset gates are also red. Let Renovate refresh or split/fix the package-manager transition, then require fresh full current-policy validation and final review.