chore(deps): bump sharp from 0.35.0 to 0.35.3 in the production group across 1 directory

[dependabot]

Bumps the production group with 1 update in the / directory: sharp.

Updates sharp from 0.35.0 to 0.35.3

Release notes

Sourced from sharp's releases.

v0.35.3

• Tighten verification of text dimensions, TIFF tile dimensions and extend values.

• Improve code bundler support by resolving path to libvips binary.

• Increase default concurrency when use of MALLOC_ARENA_MAX is detected.

• Emit warning about binaries provided by Electron for use on Linux.

• Add hasAlpha property to output info. #4500

• TypeScript: Return more precise Buffer<ArrayBuffer> from toBuffer. #4520 @​Andarist

• Bound clahe width and height to avoid signed overflow. #4551 @​metsw24-max

• Bound trim margin to avoid signed overflow. #4552 @​metsw24-max

• Reject infinite values when validating numbers. #4553 @​metsw24-max

• Bound extract region to libvips coordinate limit. #4555 @​metsw24-max

• Verify background colour values are numbers. #4556 @​metsw24-max

• Bound create and raw input dimensions to coordinate limit. #4558 @​metsw24-max

• Tighten recomb and affine matrix verification. #4560 @​chatman-media

• Verify cache memory limit to avoid overflow. #4561 @​metsw24-max

v0.35.3-rc.2

• Tighten verification of text dimensions, TIFF tile dimensions and extend values.

... (truncated)

Commits

• 1018449 Release v0.35.3
• ba303a7 Prerelease v0.35.3-rc.2
• 4f94fc5 Upgrade to sharp-libvips v1.3.2
• c5e7a3f Bump devDeps, fix Deno/Windows smoke tests
• 9a8d002 Docs: Add changelog entry and note about transferable #4520
• 8694db0 TypeScript: Return more precise Buffer\<ArrayBuffer> from toBuffer (#4520)
• e000d0b Prerelease v0.35.3-rc.1
• 9554ca9 Prerelease v0.35.3-rc.0
• 6a29fd5 Emit warning about native binaries on Linux Electron
• 540d2ea Increase default concurrency when use of MALLOC_ARENA_MAX detected
• Additional commits viewable in compare view

Summary by CodeRabbit

• Chores
  • Updated the image processing dependency to a newer version for improved compatibility and maintenance.

[coderabbitai]

📝 Walkthrough

Walkthrough

The web application’s sharp dependency is updated from 0.35.0 to 0.35.3.

Changes

Web dependency update

Layer / File(s)	Summary
Update sharp dependency apps/web/package.json	Updates sharp from version 0.35.0 to 0.35.3.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: jusso-dev

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the sharp dependency version bump reflected in the changeset.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/npm_and_yarn/production-484b35d1ea

---

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@apps/web/package.json`:
- Line 46: Regenerate pnpm-lock.yaml after updating the sharp dependency to
0.35.3, ensuring the sharp override, importer entry, and package resolution all
consistently reference 0.35.3 so frozen-lockfile installs match the manifest.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: b6ec968b-5ec3-4886-89d0-45071444894d

📥 Commits

Reviewing files that changed from the base of the PR and between 679bd82 and 86793e7.

📒 Files selected for processing (1)

• apps/web/package.json

[coderabbitai]

🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

printf '\n== apps/web/package.json ==\n'
grep -n '"sharp"' -n apps/web/package.json || true

printf '\n== lockfile sharp references ==\n'
rg -n '"sharp"|sharp@|sharp:' pnpm-lock.yaml apps/web/package.json || true

printf '\n== nearby lockfile context ==\n'
rg -n -C 2 'sharp' pnpm-lock.yaml || true

Repository: jusso-dev/Muster

Length of output: 11755

---

Regenerate pnpm-lock.yaml for the Sharp bump. The lockfile still pins sharp to 0.35.0 in the override, importer entry, and package resolution, so frozen-lockfile installs can keep resolving the old version or fail against the updated manifest.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@apps/web/package.json` at line 46, Regenerate pnpm-lock.yaml after updating
the sharp dependency to 0.35.3, ensuring the sharp override, importer entry, and
package resolution all consistently reference 0.35.3 so frozen-lockfile installs
match the manifest.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml