Bump p5 from 2.3.2 to 2.3.3 in /skills/p5-paint-animation/scripts

[dependabot]

Bumps p5 from 2.3.2 to 2.3.3.

Release notes

Sourced from p5's releases.

v2.3.3

This patch release includes a security hardening measure, a couple of bugfixes, and documentation updates. Use this version by including:

<script src="https://cdn.jsdelivr.net/npm/p5@2.3.3/lib/p5.js"></script>
<!-- Optional for WEBGPU renderer: -->
<script src="https://cdn.jsdelivr.net/npm/p5@2.3.3/lib/p5.webgpu.js&quot;&gt;&lt;/script>

In processing/p5.js#9145 @​limzykenneth introduces MAX_GIF_PIXELS, a static property that defines how large, in total pixels, a GIF image is allowed to be loaded into a p5 sketch. The default value is 16,000,000. This means an image's width multiplied by its height must not exceed that value. The property can be set higher if needed. This limitation prevents a GIF with a very large canvas from taking up a lot of browser memory ("decompression bomb"). This patch addresses a security vulnerability report by @​slash-init, thanks for reporting! Security vulnerabilities can be reported according to the SECURITY.md policy.

In processing/p5.js#9006 @​roymacdonald spotted and patched a typo in quaternion multiplication, adding tests as well. In processing/p5.js#9039 @​xdroberto fixed a Friendly Error System (FES) parameter validation bug that @​TakagiHitoshi spotted.

Finally, in processing/p5.js#9118 @​ksen0 added initial documentation of p5's new Decorators API. This API is mainly aimed at addon authors, but is also used throughout the p5.js library code. In programming, a decorator helps to reduce duplicated code. In p5.js, decorators are applied using p5.registerDecoration(pattern, decorator). They have been supported since version 2.3.0, and follow the TC39 proposal as closely as possible. The new contributor guide is for p5.js code contributors who would like to learn when to use a decorator, and how.

Work continues (in the main branch) toward 2.4, but this atomic patch makes recent security updates and bugfixes available sooner, following our recent approach to patch releases.

🎉 Thanks to all contributors & stewards!

Full Changelog: processing/p5.js@v2.3.2...v2.3.3

Commits

• c0015d9 2.3.3
• a2e8cb2 Merge pull request #9150 from processing/233
• 1abff34 Fix false 'Expected at most 2 arguments' FES error for variadic min()/max()
• c130696 Improved clarity based on feedback
• 6f73054 Update contributor_docs/decorators.md
• 2a782df Update contributor_docs/decorators.md
• 3ec2dcc Update decorators documentation with visibility tags
• 143162c Create documentation for decorators in p5.js
• 76a7c7f Corrected function name in inline doc
• 3494582 Fixed typo in quaternion multiplication
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)