Upgrade Jimp to address minimist security vulnerability

[karlhorky]

Why was this closed?

This is not the correct repo!

Opened a new PR in the new maintained repo of node-potrace here: tooolbox#5

This new repo is maintained by @tooolbox.

---

Since the pull request for Jimp addressing minimist security vulnerability (https://www.npmjs.com/advisories/1179) was accepted, it would be good to upgrade to at least 0.9.6:

jimp-dev/jimp#857

Original fix in mkdirp: isaacs/node-mkdirp#7 (comment)

It seems like the last minor releases have not changed anything breaking...?

• https://github.com/oliver-moran/jimp/releases/tag/v0.7.0
• https://github.com/oliver-moran/jimp/releases/tag/v0.8.0
• https://github.com/oliver-moran/jimp/releases/tag/v0.9.0

If this is accepted and released as a minor or patch, this will also enable Gatsby projects to fix the security issues without breaking semver, since gatsby-plugin-sharp and gatsby-transformer-sharp depend on potrace@^2.1.2:

• https://github.com/gatsbyjs/gatsby/blob/2ff2ba395a86407e3ccfd1e010be7408a4817a82/packages/gatsby-plugin-sharp/package.json#L22
• https://github.com/gatsbyjs/gatsby/blob/2ff2ba395a86407e3ccfd1e010be7408a4817a82/packages/gatsby-transformer-sharp/package.json#L13

[karlhorky]

Closing because of reason in description above. Superseded by tooolbox#5