2.6.3-alpha.3

Author: yisibl

CHANGELOG.md

@@ -9,6 +9,11 @@ This changelog also contains important changes in dependencies.
 
 ## [Unreleased]
 
+## [2.6.3-alpha.3] - 2026-01-09
+
+- fix: enhance `cropByBBox()` input validation to prevent panics
+- chore: `[email protected]` requires rustc 1.88
+
 ## [2.6.3-alpha.2] - 2025-09-26
 
 - feat: the `padding` of `cropByBBox()` no longer scales with image dimensions
@@ -660,7 +665,9 @@ The first official version, use [resvg 0.18.0](https://github.com/RazrFalcon/res
 - Support custom fonts and system fonts.
 - Supports setting the background color of PNG.
 
-[unreleased]: https://github.com/yisibl/resvg-js/compare/2.6.3-alpha.1...HEAD
+[unreleased]: https://github.com/yisibl/resvg-js/compare/2.6.3-alpha.2...HEAD
+[2.6.3-alpha.3]: https://github.com/yisibl/resvg-js/compare/v2.6.3-alpha.2...v2.6.3-alpha.3
+[2.6.3-alpha.2]: https://github.com/yisibl/resvg-js/compare/v2.6.3-alpha.1...v2.6.3-alpha.2
 [2.6.3-alpha.1]: https://github.com/yisibl/resvg-js/compare/v2.6.3-alpha.0...v2.6.3-alpha.1
 [2.6.3-alpha.0]: https://github.com/yisibl/resvg-js/compare/v2.6.2...v2.6.3-alpha.0
 [2.6.2]: https://github.com/yisibl/resvg-js/compare/v2.6.1...v2.6.2

__test__/index.spec.ts

@@ -751,77 +751,6 @@ test('cropByBBox with fitTo should handle zero/negative bbox dimensions', (t) =>
   }
 })
 
-test('cropByBBox should handle invalid padding values', (t) => {
-  const svg = `<svg viewBox="0 0 300 300" xmlns="http://www.w3.org/2000/svg">
-    <rect fill="green" x="50" y="50" width="200" height="200"/>
-  </svg>`
-  const resvg = new Resvg(svg)
-  const bbox = resvg.getBBox()!
-
-  // Invalid values should silently use 0, not throw
-  t.notThrows(() => resvg.cropByBBox(bbox, NaN))
-  t.notThrows(() => resvg.cropByBBox(bbox, Infinity))
-  t.notThrows(() => resvg.cropByBBox(bbox, -10))
-
-  // padding >= half of dimensions should produce transparent image, not panic
-  t.notThrows(() => resvg.cropByBBox(bbox, bbox.width))
-})
-
-test('cropByBBox should handle zero/negative bbox dimensions', (t) => {
-  const svg = `<svg viewBox="0 0 300 300" xmlns="http://www.w3.org/2000/svg">
-    <rect fill="green" x="50" y="50" width="200" height="200"/>
-  </svg>`
-  const resvg = new Resvg(svg)
-  const bbox = resvg.getBBox()!
-
-  // These should not panic (validation happens in Rust)
-  const zeroBbox = { ...bbox, width: 0 }
-  const negativeBbox = { ...bbox, width: -10 }
-
-  // napi-rs may reject invalid BBox objects at type conversion level (InvalidArg)
-  // or at Rust validation level (silently ignored). Both are acceptable.
-  try {
-    resvg.cropByBBox(zeroBbox as any)
-    t.pass('Zero width bbox handled without panic')
-  } catch (e: any) {
-    t.true(e.code === 'InvalidArg', 'Zero width bbox rejected at type level')
-  }
-
-  try {
-    resvg.cropByBBox(negativeBbox as any)
-    t.pass('Negative width bbox handled without panic')
-  } catch (e: any) {
-    t.true(e.code === 'InvalidArg', 'Negative width bbox rejected at type level')
-  }
-})
-
-test('cropByBBox with fitTo should handle zero/negative bbox dimensions', (t) => {
-  const svg = `<svg viewBox="0 0 300 300" xmlns="http://www.w3.org/2000/svg">
-    <rect fill="green" x="50" y="50" width="200" height="200"/>
-  </svg>`
-  const resvg = new Resvg(svg, { fitTo: { mode: 'width', value: 500 } })
-  const bbox = resvg.getBBox()!
-
-  // Modify bbox to have zero/negative dimensions
-  const zeroBbox = { ...bbox, width: 0 }
-  const negativeBbox = { ...bbox, width: -10 }
-
-  // These should not panic with fitTo option
-  try {
-    resvg.cropByBBox(zeroBbox as any)
-    t.pass('Zero width bbox with fitTo handled without panic')
-  } catch (e: any) {
-    t.true(e.code === 'InvalidArg', 'Zero width bbox rejected at type level')
-  }
-
-  try {
-    resvg.cropByBBox(negativeBbox as any)
-    t.pass('Negative width bbox with fitTo handled without panic')
-  } catch (e: any) {
-    t.true(e.code === 'InvalidArg', 'Negative width bbox rejected at type level')
-  }
-})
-
 test('should render using font buffer provided by options', async (t) => {
   const svg = `<svg width='480' height='150' viewBox='-20 -80 550 100' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink'>
   <text x='0' y='0' font-size='100' fill='#000'>Font Buffer</text>

npm/android-arm-eabi/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@resvg/resvg-js-android-arm-eabi",
-  "version": "2.6.3-alpha.2",
+  "version": "2.6.3-alpha.3",
   "os": [
     "android"
   ],

npm/android-arm64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@resvg/resvg-js-android-arm64",
-  "version": "2.6.3-alpha.2",
+  "version": "2.6.3-alpha.3",
   "os": [
     "android"
   ],

npm/darwin-arm64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@resvg/resvg-js-darwin-arm64",
-  "version": "2.6.3-alpha.2",
+  "version": "2.6.3-alpha.3",
   "os": [
     "darwin"
   ],

npm/darwin-x64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@resvg/resvg-js-darwin-x64",
-  "version": "2.6.3-alpha.2",
+  "version": "2.6.3-alpha.3",
   "os": [
     "darwin"
   ],

npm/linux-arm-gnueabihf/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@resvg/resvg-js-linux-arm-gnueabihf",
-  "version": "2.6.3-alpha.2",
+  "version": "2.6.3-alpha.3",
   "os": [
     "linux"
   ],

npm/linux-arm64-gnu/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@resvg/resvg-js-linux-arm64-gnu",
-  "version": "2.6.3-alpha.2",
+  "version": "2.6.3-alpha.3",
   "os": [
     "linux"
   ],

npm/linux-arm64-musl/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@resvg/resvg-js-linux-arm64-musl",
-  "version": "2.6.3-alpha.2",
+  "version": "2.6.3-alpha.3",
   "os": [
     "linux"
   ],

npm/linux-x64-gnu/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@resvg/resvg-js-linux-x64-gnu",
-  "version": "2.6.3-alpha.2",
+  "version": "2.6.3-alpha.3",
   "os": [
     "linux"
   ],