[Snyk] Fix for 2 vulnerabilities

[sestinj]

Snyk has created this PR to fix 2 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• docs/package.json
• docs/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Use After Free SNYK-JS-SHARP-20552492	838
	Allocation of Resources Without Limits or Throttling SNYK-JS-OPENTELEMETRYCORE-17373280	624

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling
🦉 Use After Free

[sestinj]

This update contains major version upgrades with significant breaking changes for both @c15t/react and sharp.

@c15t/react@1.8.5 → @c15t/react@2.0.0

Risk: HIGH

This is a major release with a completely new styling model, a rewritten backend, and API changes that require significant developer action.

Key Breaking Changes:

• New Styling System: The library has moved from a css-in-js approach to imported CSS stylesheets (e.g., @c15t/react/styles.css). This is a fundamental change requiring a full migration of all UI styling.
• API Renaming: The API for translations has been renamed from translations to i18n.
• Backend v2: The backend has been completely rewritten, which may impact configuration and data handling.
• License Change: The license has been changed from GPL-3.0 to Apache-2.0.

Recommendation: A dedicated migration effort is required. The package provides a CLI tool (@c15t/cli setup) to assist with the upgrade process. Do not merge this upgrade without a thorough migration and testing plan.

sharp@0.34.5 → sharp@0.35.5

Risk: HIGH

This minor version upgrade introduces multiple breaking changes in v0.35.0, including API removals and environment changes.

Key Breaking Changes:

• API Removals: The deprecated failOnError constructor property and paletteBitDepth from metadata have been removed. Properties from the sharpen operation were also removed.
• Environment: Support for older, unspecified Node.js versions has been dropped.
• Behavioral Changes: Lossy AVIF output quality is now tuned differently, which may alter image output. A new default channel limit (limitInputChannels) has been added.

Recommendation: Review code for usage of the removed properties (failOnError, paletteBitDepth, sharpen properties). Verify image processing output and ensure your Node.js version is still supported.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.