Skip to content

chore(deps): bump @dicebear/initials from 8.0.2 to 9.4.3 in /packages/server - #20

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/packages/server/dicebear/initials-9.4.3
Open

chore(deps): bump @dicebear/initials from 8.0.2 to 9.4.3 in /packages/server#20
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/packages/server/dicebear/initials-9.4.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026

Copy link
Copy Markdown

Bumps @dicebear/initials from 8.0.2 to 9.4.3.

Release notes

Sourced from @​dicebear/initials's releases.

DiceBear 9.4 - Release Notes

Security

  • @dicebear/converter: ensureSize() no longer reads the SVG's width / height attributes to determine the output canvas size. Previously, a crafted SVG with extremely large dimensions could cause excessive memory allocation (DoS). Thanks to @​maru1009 for reporting this issue.

New features

  • @dicebear/converter: New size option for toPng, toJpeg, toWebp, and toAvif (default: 512, max: 2048). Invalid values (NaN, <= 0, Infinity) fall back to 512.
  • dicebear CLI: The --size flag is now forwarded to the converter, so rasterized output matches the requested avatar size.

Breaking changes

  • @dicebear/converter: The output image size is no longer derived from the input SVG dimensions. It is always set by the size option.

DiceBear 9.3 - Release Notes

I would like to introduce you to a new avatar style. 🎉

A huge thank you to @​Johan-Melin for contributing this style in #474!

Say hello to ToonHead!

This avatar style is a remix of: ToonHead by Johan Melin, licensed under CC BY 4.0.

Documentation | Playground | Editor

DiceBear 9.2 - Release Notes

I would like to introduce you to two new avatar styles. 🎉

Say hello to dylan!

This avatar style is a remix of: Dylan! The Avatar Generator by Natalia Spivak, licensed under CC BY 4.0.

Documentation | Playground | Editor

And you might also like colourful glass?

Licensed under CC0 1.0 .

You can make it even more colourful with backgroundType = gradientLinear

Documentation | Playground

... (truncated)

Commits
  • dc3dc40 v9.4.3
  • 8ccc349 Chore: Set npm dist-tag to v9-lts
  • 922946d Fix: Escape rotate, fontSize and fontWeight in SVG output
  • efe62f2 ci: grant CodeQL the documented permissions and move to node24-ready action r...
  • e51023e Add: v10 hints
  • bf3babb Use branch-specific deployment environments
  • 3175da2 Fix: Theme switch icon disappearing due to SSR hydration mismatch
  • d6139c8 FIx: Theme switch icon
  • ecbf790 Replace social links with GitHub Star button and custom nav actions
  • 640b8fa Change data-website-id
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​dicebear/initials since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [@dicebear/initials](https://github.com/dicebear/dicebear) from 8.0.2 to 9.4.3.
- [Release notes](https://github.com/dicebear/dicebear/releases)
- [Changelog](https://github.com/dicebear/dicebear/blob/11.x/CHANGELOG.md)
- [Commits](dicebear/dicebear@v8.0.2...v9.4.3)

---
updated-dependencies:
- dependency-name: "@dicebear/initials"
  dependency-version: 9.4.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants