build(deps): bump imgproxy/imgproxy from v3.31 to v4.0 in /imgproxy

[dependabot]

Bumps imgproxy/imgproxy from v3.31 to v4.0.

Release notes

Sourced from imgproxy/imgproxy's releases.

v4.0.0-beta.0

Added

• (pro) Add internal cache for processed images.
• (pro) Add digital camera raw formats support (loading only).
• (pro) Add crop_objects processing option to crop the image to detected objects.
• (pro) Add thumb_hash info option to calculate ThumbHash of the source image.
• (pro) Add phash info option to calculate perceptual hash of the source image.
• (pro) Add classify info option to classify objects in the source image using a classification model.
• Add IMGPROXY_PRESERVE_HDR config. When set to true, imgproxy will try to keep the image's bits per pixel when possible.
• Add IMGPROXY_OPEN_TELEMETRY_ENABLE_LOGS config to control whether to send logs to OpenTelemetry.
• Add IMGPROXY_NEW_RELIC_PROPAGATE_EXTERNAL, IMGPROXY_DATADOG_PROPAGATE_EXTERNAL, and IMGPROXY_OPEN_TELEMETRY_PROPAGATE_EXTERNAL configs to control propagation of tracing headers to external requests.
• Add IMGPROXY_S3_ALLOWED_BUCKETS, IMGPROXY_GCS_ALLOWED_BUCKETS, IMGPROXY_ABS_ALLOWED_BUCKETS, and IMGPROXY_SWIFT_ALLOWED_BUCKETS configs to allowlist buckets/containers that imgproxy can read source images from.
• Add IMGPROXY_S3_DENIED_BUCKETS, IMGPROXY_GCS_DENIED_BUCKETS, IMGPROXY_ABS_DENIED_BUCKETS, and IMGPROXY_SWIFT_DENIED_BUCKETS configs to denylist buckets/containers that imgproxy can read source images from.
• Add pretty error pages when IMGPROXY_DEVELOPMENT_ERRORS_MODE is enabled.
• Add documentation links to errors. They will be visible in logs and error reports.
• Add IMGPROXY_LAST_MODIFIED_BUSTER config to control whether to pass through the If-Modified-Since header to the image source.

Changed

• Most of the code base is refactored to improve maintainability and extensibility.
• Implemented asynchronous downloading and processing of images. This improves performance when the source image is slow to download or when processing is slow.
• Source image colorspace is now preserved when possible.
• (pro) Improved SVG minification. It is now much faster and more efficient.
• (pro) Improved autoquality. Implemented weighted DSSIM calculation and trained new ML models for JPEG, WebP, AVIF, and JPEG XL.
• IMGPROXY_USE_ETAG and IMGPROXY_USE_LAST_MODIFIED are now enabled by default.
• Etag generation is now based only on Etag received from the image source and IMGPROXY_ETAG_BUSTER config.
• IMGPROXY_USE_GCS is not automatically set if the GCS key is present anymore. It should be set explicitly to enable loading images from Google Cloud Storage.
• SVG rendering DPI is changed from 72 to 96 to match W3C recommendations.
• (pro) Improved behavior of IMGPROXY_OBJECT_DETECTION_GRAVITY_MODE=one_best_centermost.
• Custom New Relic metrics are now reported as timescales. Metric names have been changed from imgproxy.X to Custom/imgproxy/X.
• Changed log formats. Option and argument names now match those in the documentation.
• (docker) imgproxy and its dependencies are now built on Ubuntu 22.04. Linux packages exported from Docker images now require a minimum libc version of 2.35.

Removed

• Removed deprecated IMGPROXY_CONCURRENCY config. Use IMGPROXY_WORKERS instead.
• Removed deprecated --keypath and --saltpath CLI arguments. Use IMGPROXY_KEY and IMGPROXY_SALT environment variables instead.
• Removed deprecated --presets CLI argument. Use IMGPROXY_PRESETS_PATH environment variable instead.
• (pro) Removed deprecated --info-presets CLI argument. Use IMGPROXY_INFO_PRESETS_PATH environment variable instead.
• Removed gif_options processing option, as it does nothing since v3.
• Removed deprecated IMGPROXY_WRITE_TIMEOUT config. Use IMGPROXY_TIMEOUT instead.
• Removed deprecated IMGPROXY_READ_TIMEOUT config. Use IMGPROXY_READ_REQUEST_TIMEOUT instead.
• Removed obsolete IMGPROXY_MAX_SVG_CHECK_BYTES config.
• Removed deprecated IMGPROXY_OPEN_TELEMETRY_ENDPOINT config. Use OTEL_EXPORTER_OTLP_ENDPOINT instead. Unlike IMGPROXY_OPEN_TELEMETRY_ENDPOINT, OTEL_EXPORTER_OTLP_ENDPOINT should contain a URL scheme (http:// or https://).
• Removed deprecated IMGPROXY_OPEN_TELEMETRY_PROTOCOL config. Use OTEL_EXPORTER_OTLP_PROTOCOL instead.
• Removed deprecated IMGPROXY_OPEN_TELEMETRY_GRPC_INSECURE config. Use OTEL_EXPORTER_OTLP_ENDPOINT with http:// scheme instead.
• Removed deprecated IMGPROXY_OPEN_TELEMETRY_SERVICE_NAME config. Use OTEL_SERVICE_NAME instead.
• Removed deprecated IMGPROXY_OPEN_TELEMETRY_PROPAGATORS config. Use OTEL_PROPAGATORS instead.
• Removed deprecated IMGPROXY_OPEN_TELEMETRY_CONNECTION_TIMEOUT config. Use OTEL_EXPORTER_OTLP_TIMEOUT instead.
• Removed deprecated IMGPROXY_UNSHARPENING_MODE, IMGPROXY_UNSHARPENING_WEIGHT, IMGPROXY_UNSHARPENING_DIVIDER configs. Use IMGPROXY_UNSHARP_MASKING_MODE, IMGPROXY_UNSHARP_MASKING_WEIGHT, IMGPROXY_UNSHARP_MASKING_DIVIDER instead.
• Removed deprecated download_duration_seconds and processing_duration_seconds histograms from Prometheus metrics. Use request_span_duration_seconds histogram with span label instead.

... (truncated)

Changelog

Sourced from imgproxy/imgproxy's changelog.

[3.24.0] - 2024-04-29

Added

• Add IMGPROXY_ALWAYS_RASTERIZE_SVG config.
• Add IMGPROXY_PNG_UNLIMITED and IMGPROXY_SVG_UNLIMITED configs.
• (pro) Add fill, foxus_x, and focus_y arguments to the video_thumbnail_tile processing option.
• (pro) Add the ch (chessboard order) position for watermarks.
• (pro) Add the watermark_rotate processing option.

Changed

• Respond with 404 when the bucket/container name or object key is empty in an S3, Google Cloud Storage, Azure Blob Storage, or OpenStack Object Storage (Swift) URL.
• Ensure that the watermark is always centered when replicated.
• (pro) Improve unsharp masking.
• (docker) Update AWS Lambda adapter to 0.8.3.
• (docker) Increase EXIF size limit to 8MB.

Fixed

• Fix parsing some TIFFs.
• Fix over-shrinking during scale-on-load.
• Fix watermarks overlapping animation frames in some cases.
• (pro) Fix false-positive video detections.

[3.23.0] - 2024-03-11

Added

• Add request ID, processing/info options, and source image URL to error reports.

Changed

• Support configuring OpenTelemetry with standard general and OTLP Exporter environment variables.
• IMGPROXY_MAX_SRC_RESOLUTION default value is increased to 50.

Fixed

• Fix loading environment variables from the AWS System Manager Parameter Store when there are more than 10 parameters.
• (pro) Fixed thumbnail generation for MKV/WebM files containing blocks invalidly marked as keyframes.

Deprecated

• IMGPROXY_OPEN_TELEMETRY_ENDPOINT, IMGPROXY_OPEN_TELEMETRY_PROTOCOL, IMGPROXY_OPEN_TELEMETRY_GRPC_INSECURE, IMGPROXY_OPEN_TELEMETRY_SERVICE_NAME, IMGPROXY_OPEN_TELEMETRY_PROPAGATORS, and IMGPROXY_OPEN_TELEMETRY_CONNECTION_TIMEOUT config options are deprecated. Use standard OpenTelemetry environment variables instead.

[3.22.0] - 2024-02-22

Added

• Add the IMGPROXY_TRUSTED_SIGNATURES config.
• (pro) Add the hashsum processing and info options.
• (pro) Add the calc_hashsums info option.
• (pro) Add the IMGPROXY_VIDEO_THUMBNAIL_TILE_AUTO_KEYFRAMES config.
• (pro) Add the IMGPROXY_WEBP_SMART_SUBSAMPLE config and the smart_subsample argument to the webp_options processing option
• (docker) Add lambda adapter to the Docker image.

Changed

• Allow relative values for gravity and watermark offsets.
• Revised downloading errors reporting.
• Allow IMGPROXY_TTL to be zero.
• Don't set Expires HTTP header as it is ignored if the Cache-Control header is set.

... (truncated)

Commits

• d9feb06 Remove EA note from readme
• c39e009 Bump version
• 23bca78 Fix premature closing of watermark data; Add closing of fallback image data
• 309cc7e Merge branch 'master' into version/4
• 59c6c72 Add lychee config; Enable lychee cache
• 849698e Allow 0 as a valid value for quality and format_quality options
• 21561c6 Fix license in README
• fa2e374 Merge branch 'master' into version/4
• ae0c505 Update and pin GH Actions
• b3fec0d Bump version
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)