Bump the npm group with 2 updates

[dependabot]

Bumps the npm group with 2 updates: @11ty/eleventy-img and js-yaml.

Updates @11ty/eleventy-img from 6.0.4 to 7.0.0

Release notes

Sourced from @​11ty/eleventy-img's releases.

Image v7.0.0: The Memory Efficiency Release

TL;DR: ESM-only, Node 22+ minimum, and huge memory and performance wins over v6.

Thank you to @​sentience, @​valadaptive, @​kirthi-b, @​jens-struct, and @​jornmineur for their contributions to this release!

Issue Milestone: https://github.com/11ty/eleventy-img/milestone/25?closed=1 Full Changelog: v6.0.4...v7.0.0

Breaking changes

• Node 22 or newer is required. This matches Core v4. #351
• The package is now ESM. This is unlikely to require any changes as the Node minimum now supports require(esm). #300
  • ESM: import Image from "@11ty/eleventy-img"
  • CommonJS friendly: const Image = await import("@11ty/eleventy-img")
• Upgrades sharp from v0.33 to v0.35 #352, #289
  • You can review the upstream v0.34 and v0.35 changelogs.

And a few breaking changes that are unlikely to affect most projects:

• If you use the Transform method and set both width and eleventy:widths on the same element, note that eleventy:widths now takes priority. #314
• Image.statsSync and Image.statsByDimensionsSync have been removed after being deprecated in 2024. Use the statsOnly feature instead, like so: await Image(src, { statsOnly: true, /* …options */ }). Helpful error messaging is provided if your project uses these (so don’t worry about it until you run into it, they weren’t commonly used). #211 #295
• Removes the <eleventy-image> WebC component (use the transform method instead) #305

New Features

• New passthrough format (usage: formats: ["passthrough"]) copies and uses the source file directly, while still adding width and height attributes to the generated output. Useful when you've already optimized your source images and want to skip the optimization pipeline — about 20× faster in local benchmarks. [Example on #212](11ty/image#212). Also #133, #183, #309
• New eleventy:sizes attribute allows overriding any sizes attribute in markup #306
• New manualCacheKey option to improve the cropping API #271 #274 by @​jens-struct

Bug Fixes

• Huge memory usage improvements from @​sentience in #313 and @​jornmineur in #302 #319 (v6 had issues, but we’ve eclipsed v5 performance with this release 🏆)
• Removes the w descriptor when only one size is used in srcset, fixing valid HTML output when only one width is used and no sizes is present (#298).
• Fixes eleventy:ignore appearing in output on <img> tags inside <picture> elements — by @​valadaptive in #303.
• Decodes HTML entities on <img src> when read back from HTML, by @​kirthi-b #349 #307

Internals

• Swaps the debug dependency for obug (#356).
• Major version dependency upgrade: upgrades p-queue from v6.6 to v8.1. #120 This dependency became ESM-only in v7 and Node 18+ in v8.

Image v7.0.0-alpha.5

This is likely the last pre-release before v7 stable.

• Breaking change: Node minimum is now 22+ (matching core v4) #351
• Breaking change: removes deprecated (since 2024) synchronous functions Image.statsSync and Image.statsByDimensionsSync #211 #295
• Breaking change: ugprades to sharp v0.35 #352 see upstream sharp changes

... (truncated)

Commits

• f69b24b v7.0.0
• fcabc87 Remove removed sharp option
• f4c514a v7.0.0-alpha.5
• d2eb0ce Use npm staged publishing
• 5943d24 v7.0.0-alpha.5
• 84d9bf4 Fixes #356
• c20189a Fixes #212. Adds passthrough special format that skips sharp processing alt...
• ec011f6 Rename eleventyImage in a few places to more generic names
• ebbe22d Fixes #302 unbounded memory use from memory cache
• 5e79529 Merge branch 'pr/274'
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​11ty/eleventy-img since your current version.

Updates js-yaml from 5.2.2 to 5.2.3

Changelog

Sourced from js-yaml's changelog.

[5.2.3] - 2026-08-01

Fixed

• Prevent prototype fallback when resolving tags and mapping entries, #782.
• Resolve !!timestamp years 0000-0099 correctly, #775.
• Preserve implicit null mapping values before document markers and reject unpaired mapping event streams, #784.
• Preserve folded scalar values with tab-indented lines when round-tripping a parsed AST through present(); dump() and loading are unaffected, #780.

Commits

• 6740445 5.2.3 released
• 94e766d Update changelog
• c3bd7ca Polish previous commit, #780
• 00209b6 presenter: treat a tab-indented line in a folded scalar as more-indented (#780)
• 40fcb4f Fix missing mapping values before document markers and reject unpaired mappin...
• 49280f3 Fix !!timestamp resolution for years 0000-0099, #775
• 355dc96 fix: prevent prototype fallback in tag and harden object lookups, #782 (than...
• d524f83 docs: add contributing guidelines
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions