fix(deps): update dependency colorthief to v3

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
colorthief (source)	^2.6.0 → ^3.0.0

---

Release Notes

lokesh/color-thief (colorthief)

v3.3.1

Compare Source

v3.3.0

Compare Source

Adds colorthief CLI with color, palette, and swatches subcommands. Supports --json, --css, and ANSI output formats, stdin piping, multi-file input, and a friendly error message when sharp is not installed.

v3.2.0

Compare Source

Browser bundlers no longer warn about sharp - Bundlers like webpack (Angular), Vite, and Rollup previously emitted a "Can't resolve 'sharp'" warning when using colorthief in browser-only projects. The library now ships separate browser builds that contain no references to sharp or Node.js-specific code. Bundlers automatically pick the right build via the "browser" condition in package.json exports. No changes needed on your end. The API is identical. (#​279)

v3.1.0

Compare Source

Changed palette functions to default to utilizing OKLCH (previously RGB)

v3.0.0

Compare Source

Full TypeScript rewrite with a unified browser + Node.js API.

Highlights:

• Rich Color objects with .hex(), .rgb(), .hsl(), .oklch(), .css()
• OKLCH perceptually uniform quantization
• Semantic swatches (Vibrant, Muted, DarkVibrant, DarkMuted, LightVibrant, LightMuted)
• Live extraction with observe() for video, canvas, and img elements
• Web Worker offloading
• Progressive 3-pass extraction
• WCAG contrast ratios and text color recommendations
• AbortSignal support
• Zero runtime dependencies

v2.7.0: v.2.7.0

Compare Source

New features:

• Configurable pixel filtering — New options: ignoreWhite, whiteThreshold, alphaThreshold, and minSaturation let callers control which pixels are
  included in color extraction
• Options object API — getColor and getPalette now accept an options object (e.g., { colorCount: 5, quality: 10, ignoreWhite: false }) in addition to the
  existing positional arguments
• New browser input types — getPalette/getColor now accept HTMLCanvasElement, ImageData, and ImageBitmap in addition to HTMLImageElement
• TypeScript type definitions — Added .d.ts files for both browser (color-thief.d.ts) and Node (color-thief-node.d.ts)

Bug fixes & robustness:

• Fallback color for edge cases — New computeFallbackColor() averages all pixels when the quantizer can't produce a palette (e.g., solid-color or
  all-white images), preventing null returns
• Progressive filter relaxation — If filtering removes all pixels, filters are progressively relaxed (first allowing white, then transparent) before
  falling back
• Fixed variable scope leak — i in getImageData changed from implicit global to let
• Input validation — Browser version now throws descriptive errors for unloaded images, missing sources, and CORS-tainted canvases
• Null-safe palette access — All call sites now check palette for null before accessing palette[0]

Chores & tooling:

• Removed file-type dependency from Node version (unused)
• Removed dist/ from git tracking (kept in npm package via .npmignore)
• Added GitHub Actions CI workflow
• Replaced CanvasImage class with a simpler getPixelData() function
• Updated README to reflect current project setup
• Version bump to 2.7.0 across package.json and source files

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
httpjpg	Error		Apr 21, 2026 9:21am
httpjpg-docs	Ready	Preview, Comment	Apr 21, 2026 9:21am
httpjpg-storybook	Error		Apr 21, 2026 9:21am

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 3.x releases. But if you manually upgrade to 3.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.