build(deps): bump imgproxy/imgproxy from v3.31 to v4.0 in /imgproxy

[dependabot]

Bumps imgproxy/imgproxy from v3.31 to v4.0.

Release notes

Sourced from imgproxy/imgproxy's releases.

v4.0.0-beta.0

Added

• (pro) Add internal cache for processed images.
• (pro) Add digital camera raw formats support (loading only).
• (pro) Add crop_objects processing option to crop the image to detected objects.
• (pro) Add thumb_hash info option to calculate ThumbHash of the source image.
• (pro) Add phash info option to calculate perceptual hash of the source image.
• (pro) Add classify info option to classify objects in the source image using a classification model.
• Add IMGPROXY_PRESERVE_HDR config. When set to true, imgproxy will try to keep the image's bits per pixel when possible.
• Add IMGPROXY_OPEN_TELEMETRY_ENABLE_LOGS config to control whether to send logs to OpenTelemetry.
• Add IMGPROXY_NEW_RELIC_PROPAGATE_EXTERNAL, IMGPROXY_DATADOG_PROPAGATE_EXTERNAL, and IMGPROXY_OPEN_TELEMETRY_PROPAGATE_EXTERNAL configs to control propagation of tracing headers to external requests.
• Add IMGPROXY_S3_ALLOWED_BUCKETS, IMGPROXY_GCS_ALLOWED_BUCKETS, IMGPROXY_ABS_ALLOWED_BUCKETS, and IMGPROXY_SWIFT_ALLOWED_BUCKETS configs to allowlist buckets/containers that imgproxy can read source images from.
• Add IMGPROXY_S3_DENIED_BUCKETS, IMGPROXY_GCS_DENIED_BUCKETS, IMGPROXY_ABS_DENIED_BUCKETS, and IMGPROXY_SWIFT_DENIED_BUCKETS configs to denylist buckets/containers that imgproxy can read source images from.
• Add pretty error pages when IMGPROXY_DEVELOPMENT_ERRORS_MODE is enabled.
• Add documentation links to errors. They will be visible in logs and error reports.
• Add IMGPROXY_LAST_MODIFIED_BUSTER config to control whether to pass through the If-Modified-Since header to the image source.

Changed

• Most of the code base is refactored to improve maintainability and extensibility.
• Implemented asynchronous downloading and processing of images. This improves performance when the source image is slow to download or when processing is slow.
• Source image colorspace is now preserved when possible.
• (pro) Improved SVG minification. It is now much faster and more efficient.
• (pro) Improved autoquality. Implemented weighted DSSIM calculation and trained new ML models for JPEG, WebP, AVIF, and JPEG XL.
• IMGPROXY_USE_ETAG and IMGPROXY_USE_LAST_MODIFIED are now enabled by default.
• Etag generation is now based only on Etag received from the image source and IMGPROXY_ETAG_BUSTER config.
• IMGPROXY_USE_GCS is not automatically set if the GCS key is present anymore. It should be set explicitly to enable loading images from Google Cloud Storage.
• SVG rendering DPI is changed from 72 to 96 to match W3C recommendations.
• (pro) Improved behavior of IMGPROXY_OBJECT_DETECTION_GRAVITY_MODE=one_best_centermost.
• Custom New Relic metrics are now reported as timescales. Metric names have been changed from imgproxy.X to Custom/imgproxy/X.
• Changed log formats. Option and argument names now match those in the documentation.
• (docker) imgproxy and its dependencies are now built on Ubuntu 22.04. Linux packages exported from Docker images now require a minimum libc version of 2.35.

Removed

• Removed deprecated IMGPROXY_CONCURRENCY config. Use IMGPROXY_WORKERS instead.
• Removed deprecated --keypath and --saltpath CLI arguments. Use IMGPROXY_KEY and IMGPROXY_SALT environment variables instead.
• Removed deprecated --presets CLI argument. Use IMGPROXY_PRESETS_PATH environment variable instead.
• (pro) Removed deprecated --info-presets CLI argument. Use IMGPROXY_INFO_PRESETS_PATH environment variable instead.
• Removed gif_options processing option, as it does nothing since v3.
• Removed deprecated IMGPROXY_WRITE_TIMEOUT config. Use IMGPROXY_TIMEOUT instead.
• Removed deprecated IMGPROXY_READ_TIMEOUT config. Use IMGPROXY_READ_REQUEST_TIMEOUT instead.
• Removed obsolete IMGPROXY_MAX_SVG_CHECK_BYTES config.
• Removed deprecated IMGPROXY_OPEN_TELEMETRY_ENDPOINT config. Use OTEL_EXPORTER_OTLP_ENDPOINT instead. Unlike IMGPROXY_OPEN_TELEMETRY_ENDPOINT, OTEL_EXPORTER_OTLP_ENDPOINT should contain a URL scheme (http:// or https://).
• Removed deprecated IMGPROXY_OPEN_TELEMETRY_PROTOCOL config. Use OTEL_EXPORTER_OTLP_PROTOCOL instead.
• Removed deprecated IMGPROXY_OPEN_TELEMETRY_GRPC_INSECURE config. Use OTEL_EXPORTER_OTLP_ENDPOINT with http:// scheme instead.
• Removed deprecated IMGPROXY_OPEN_TELEMETRY_SERVICE_NAME config. Use OTEL_SERVICE_NAME instead.
• Removed deprecated IMGPROXY_OPEN_TELEMETRY_PROPAGATORS config. Use OTEL_PROPAGATORS instead.
• Removed deprecated IMGPROXY_OPEN_TELEMETRY_CONNECTION_TIMEOUT config. Use OTEL_EXPORTER_OTLP_TIMEOUT instead.
• Removed deprecated IMGPROXY_UNSHARPENING_MODE, IMGPROXY_UNSHARPENING_WEIGHT, IMGPROXY_UNSHARPENING_DIVIDER configs. Use IMGPROXY_UNSHARP_MASKING_MODE, IMGPROXY_UNSHARP_MASKING_WEIGHT, IMGPROXY_UNSHARP_MASKING_DIVIDER instead.
• Removed deprecated download_duration_seconds and processing_duration_seconds histograms from Prometheus metrics. Use request_span_duration_seconds histogram with span label instead.

... (truncated)

Changelog

Sourced from imgproxy/imgproxy's changelog.

[3.24.0] - 2024-04-29

Added

• Add IMGPROXY_ALWAYS_RASTERIZE_SVG config.
• Add IMGPROXY_PNG_UNLIMITED and IMGPROXY_SVG_UNLIMITED configs.
• (pro) Add fill, foxus_x, and focus_y arguments to the video_thumbnail_tile processing option.
• (pro) Add the ch (chessboard order) position for watermarks.
• (pro) Add the watermark_rotate processing option.

Changed

• Respond with 404 when the bucket/container name or object key is empty in an S3, Google Cloud Storage, Azure Blob Storage, or OpenStack Object Storage (Swift) URL.
• Ensure that the watermark is always centered when replicated.
• (pro) Improve unsharp masking.
• (docker) Update AWS Lambda adapter to 0.8.3.
• (docker) Increase EXIF size limit to 8MB.

Fixed

• Fix parsing some TIFFs.
• Fix over-shrinking during scale-on-load.
• Fix watermarks overlapping animation frames in some cases.
• (pro) Fix false-positive video detections.

[3.23.0] - 2024-03-11

Added

• Add request ID, processing/info options, and source image URL to error reports.

Changed

• Support configuring OpenTelemetry with standard general and OTLP Exporter environment variables.
• IMGPROXY_MAX_SRC_RESOLUTION default value is increased to 50.

Fixed

• Fix loading environment variables from the AWS System Manager Parameter Store when there are more than 10 parameters.
• (pro) Fixed thumbnail generation for MKV/WebM files containing blocks invalidly marked as keyframes.

Deprecated

• IMGPROXY_OPEN_TELEMETRY_ENDPOINT, IMGPROXY_OPEN_TELEMETRY_PROTOCOL, IMGPROXY_OPEN_TELEMETRY_GRPC_INSECURE, IMGPROXY_OPEN_TELEMETRY_SERVICE_NAME, IMGPROXY_OPEN_TELEMETRY_PROPAGATORS, and IMGPROXY_OPEN_TELEMETRY_CONNECTION_TIMEOUT config options are deprecated. Use standard OpenTelemetry environment variables instead.

[3.22.0] - 2024-02-22

Added

• Add the IMGPROXY_TRUSTED_SIGNATURES config.
• (pro) Add the hashsum processing and info options.
• (pro) Add the calc_hashsums info option.
• (pro) Add the IMGPROXY_VIDEO_THUMBNAIL_TILE_AUTO_KEYFRAMES config.
• (pro) Add the IMGPROXY_WEBP_SMART_SUBSAMPLE config and the smart_subsample argument to the webp_options processing option
• (docker) Add lambda adapter to the Docker image.

Changed

• Allow relative values for gravity and watermark offsets.
• Revised downloading errors reporting.
• Allow IMGPROXY_TTL to be zero.
• Don't set Expires HTTP header as it is ignored if the Cache-Control header is set.

... (truncated)

Commits

• d9feb06 Remove EA note from readme
• c39e009 Bump version
• 23bca78 Fix premature closing of watermark data; Add closing of fallback image data
• 309cc7e Merge branch 'master' into version/4
• 59c6c72 Add lychee config; Enable lychee cache
• 849698e Allow 0 as a valid value for quality and format_quality options
• 21561c6 Fix license in README
• fa2e374 Merge branch 'master' into version/4
• ae0c505 Update and pin GH Actions
• b3fec0d Bump version
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.