Bump sharp and favicons

[dependabot]

Bumps sharp and favicons. These dependencies needed to be updated together.
Updates sharp from 0.28.3 to 0.31.1

Changelog

Sourced from sharp's changelog.

v0.31.1 - 29th September 2022

• Upgrade to libvips v8.13.2 for upstream bug fixes.

• Ensure close event occurs after end event for Stream-based output. #3313

• Ensure limitInputPixels constructor option uses uint64. #3349 @​marcosc90

• Ensure auto-rotation works with shrink-on-load and extract (regression in 0.31.0). #3352

• Ensure AVIF output is always 8-bit. #3358

• Ensure greyscale images can be trimmed (regression in 0.31.0). #3386

v0.31.0 - 5th September 2022

• Drop support for Node.js 12, now requires Node.js >= 14.15.0.

• GIF output now re-uses input palette if possible. Use reoptimise option to generate a new palette.

• Add WebP minSize and mixed options for greater control over animation frames.

• Remove previously-deprecated WebP reductionEffort and HEIF speed options. Use effort to control these.

• The flip and flop operations will now occur before the rotate operation.

• Improve normalise operation with use of histogram. #200

• Use combined bounding box of alpha and non-alpha channels for trim operation. #2166

• Add Buffer and Stream support to tile-based output. #2238

• Add input fileSuffix and output alias to format information. #2642

• Re-introduce support for greyscale ICC profiles (temporarily removed in 0.30.2). #3114

• Add support for WebP and PackBits compression options with TIFF output. #3198

... (truncated)

Commits

• 99bf279 Release v0.31.1
• 1b0eb6a Tests: add assertion to existing scenario #3357
• 891cf67 Upgrade to libvips v8.13.2
• eaf8a86 Tests: increase timeout to 20s
• 3400976 Tests: ignore a branch for coverage check
• 2d49f0e Tests: require 100% branch coverage to pass
• b0c69f1 CI: use clearer job names
• 27d0c35 CI: use clearer job names
• 32a22b5 CI: GitHub Workflows security hardening (#3377)
• d1004ee Ensure greyscale images can be trimmed #3386
• Additional commits viewable in compare view

Updates favicons from 6.2.2 to 7.0.2

Release notes

Sourced from favicons's releases.

v7.0.2

• Allow to specify which icons to generate and their options simultaneously #407
• Opt-in support of SVG icons #401
• Throw an error if background is not specified and Windows icon is generated #408
• Update dependencies to their latest versions

v7.0.1

• Change minimal supported version of NodeJS to 14.x #402
• re-export FaviconOptions #404

v7.0.0

Notable changes

• Maskable icons #336
• Remove dependency on to-ico
• Replace Jimp by Sharp #338
• [BREAKING] Predictable picking of source image #350
• New option output to control which files are generated. This may be useful for those who want to generate different versions of manifest (e.g. per-locale) and reuse icons
• Proper escaping of application name and short name itgalaxy/favicons@7ac5abf
• Add support for related_applications (#352)
• [BREAKING] Drop support of Firefox OS and Opera Coast.
• New option manifestFileName. It may be used if you want to rename a manifest file: { files: { windows: { manifestFileName: "file.xml" } } }.
• [BREAKING] Rename manifest.json to manifest.webmanifest
• [BREAKING] Remove support of Gulp
• Add webmanifest's shortcuts support #378
• Fix scaling of SVG #380
• [BREAKING] Drop support of NodeJS 12.x
• remove non standard rel=shortcut #384
• [BREAKING] Drop support of callbacks in favor of promises. A code like this favicons(source, options, (error, result) => { ... }) should be changed to favicons(source, options).then(result => { ... }, error => { ... }).

Operational changes

• Migrate CI from Travis CI and AppVeyor to GitHub Actions #339
• Migrate test suite from AVA to Jest
• Convert source code to Typescript
• Refactor internals so that each platform is a separated class which may encapsulate that platform's features itgalaxy/favicons@6ea0e18
• Remove logging feature. We do not log anything anymore.

Commits

• 748c0f6 7.0.2
• 7e69c98 Update dependencies to their latest versions
• 28828b1 Ensure that background is specified when Windows icon is generated
• 07ae211 Update versions of used actions
• f34fee2 Add tests to demonstrate how selection of sizes works
• 57abca6 Support output of SVG favicons
• 8674547 Allow to specify which icons to generate and their options simultaneously
• a128393 Correct source type (Mixture of strings and Buffers is allowed)
• d9102e9 Correct a mistake in the sample code on README
• c3c5efb 7.0.1
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by andy128k, a new releaser for favicons since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.