Bump image_processing from 1.14.0 to 2.0.2

[dependabot]

Bumps image_processing from 1.14.0 to 2.0.2.

Changelog

Sourced from image_processing's changelog.

2.0.2 (2026-06-03)

• Raise LoadError instead of ImageProcessing::Error when soft dependencies are missing (@​bdewater-thatch)

2.0.1 (2026-05-22)

• [minimagick] Prevent remote shell execution when passing loader/saver options from user input

2.0.0 (2026-05-20)

• mini_magick/ruby-vips are now soft dependencies and need to be manually added to the Gemfile (@​janko)

• Avoid remote shell execution vulnerability in #apply when arguments are coming from user input (@​janko)

• [vips] Unfuzzed loaders are now blocked by default (@​janko)

• [vips] Sharpening after resize has been disabled by default (@​janko)

• [minimagick] Remove deprecated :compose and :geometry keyword arguments for #composite (@​janko)

• Ruby 3.0+ is now required (@​janko)

Commits

• 7d89c01 Bump to 2.0.2
• 7f38304 Create a new LoadError for missing dependencies
• 996862c Warn and reraise LoadError instead of raising custom error (#143)
• a64dbd5 Inline dhash-vips
• 9489387 Bump to 2.0.1
• 31b3d91 Prevent remote shell execution in loader/saver minimagick options
• cd1353d Bump to 2.0.0
• fb1c0ed Update documentation with recent changes
• f9a1379 Use double quotes
• ad46160 Add IRB and Benchmark to Gemfile
• Additional commits viewable in compare view

[Jberma23]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[Jberma23]

@dependabot recreate