Build(deps): Bump calibreapp/image-actions from 1.1.0 to 1.3.0

[dependabot]

Bumps calibreapp/image-actions from 1.1.0 to 1.3.0.

Release notes

Sourced from calibreapp/image-actions's releases.

1.3.0

In this release:

✨ Only optimise new or changed images (#339)

• When your PR adds or updates images, image-actions will run on them
• When run manually, scheduled, or in the event of an error all images will be processed (uses pre 1.3.0 behavior)

Other changes:

• Updated README with updated config
• Removed long-deprecated configuration method

Full Changelog: calibreapp/image-actions@1.2.0...1.3.0

1.2.0

It's been 5 years since the last release of image-actions. Image-actions was authored before GitHub Actions used YML, and before GitHub had packages like @actions/core, @actions/github and @octokit/action to ease authoring of Actions.

Since then, image-actions has been executed millions of times(!) and is used by a large number of people.

Personally, I'm not using image-actions often as I usually rely on image CDNs to optimise images on the fly. As a result of this, image-actions lagged on releases and fell behind on dependencies. Until today :-)

This maintenance release includes many changes and fixes, including:

• Make use of @​actions/core, @​actions/github & octokit/action instead of legacy lib code
• Updates all dependencies to latest
• Update to Node 22
• Runs TSC, Lint & Format check in CI
• Removes TSC build, replaces with Experimental Node TS type stripping
• Prepares for a more expected versioning & release process
• Adds @​alexdupre's minPctChange configuration option (set to 5% by default)
• Drops dependencies where possible
• Changes default compression settings for better image visuals
• Throttles requests to GitHub, reducing failures for large change sets
• Limits to a maximum of 500 images changed per Pull Request
• Truncates markdown report to list a maximum of 25 images
• (Probably) supports ARM64 and other architectures (By switching to Docker build over 1 pre-built image)

Thanks to everyone who uses image-actions and community members who helped support up until now.

@​benschwarz

Commits

• 51921e2 Merge pull request #339 from calibreapp/pr-changed-images
• 6f75477 Update @​actions and @​github packages together
• f92ff2e Format
• 66fb592 Remove support for legacy configuration
• 4720579 Update README.md
• 4a2f0cd Add tests for image sourcing methods
• 5fb2346 Update tests & checks
• 597919b Find PR changed images, fallback to all repo images
• 196c42f Add link to throttling limits, improve summary text
• b299a36 Rate-limit commit blobs for large changesets
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #913.