Bump image_processing from 1.14.0 to 2.0.2

[dependabot]

Resolves #1168

Bumps image_processing from 1.14.0 to 2.0.2.

Changelog

Sourced from image_processing's changelog.

2.0.2 (2026-06-03)

• Raise LoadError instead of ImageProcessing::Error when soft dependencies are missing (@​bdewater-thatch)

2.0.1 (2026-05-22)

• [minimagick] Prevent remote shell execution when passing loader/saver options from user input

2.0.0 (2026-05-20)

• mini_magick/ruby-vips are now soft dependencies and need to be manually added to the Gemfile (@​janko)

• Avoid remote shell execution vulnerability in #apply when arguments are coming from user input (@​janko)

• [vips] Unfuzzed loaders are now blocked by default (@​janko)

• [vips] Sharpening after resize has been disabled by default (@​janko)

• [minimagick] Remove deprecated :compose and :geometry keyword arguments for #composite (@​janko)

• Ruby 3.0+ is now required (@​janko)

Commits

• 7d89c01 Bump to 2.0.2
• 7f38304 Create a new LoadError for missing dependencies
• 996862c Warn and reraise LoadError instead of raising custom error (#143)
• a64dbd5 Inline dhash-vips
• 9489387 Bump to 2.0.1
• 31b3d91 Prevent remote shell execution in loader/saver minimagick options
• cd1353d Bump to 2.0.0
• fb1c0ed Update documentation with recent changes
• f9a1379 Use double quotes
• ad46160 Add IRB and Benchmark to Gemfile
• Additional commits viewable in compare view

[davidpgero]

@dependabot rebase

[davidpgero]

https://github.com/dependabot rebase

[davidpgero]

How to test it?

As an admin, create a new announcement with images

**You need to recreate your local Docker images because the dev images have changed. **

[davidpgero]

@pollygee, it needs some extra changes to merge that. Can you do a review here? In this case, I can review myself because it's created by depenabot, but because of the change, it's better to ask it.

[davidpgero]

created an issue about this change: #1168

[pollygee]

Thanks! Yes I'll be happy to do a review but I might not be able to get to it till the weekend.
@dpowers1 if you have any time before that and are able could you review?

[davidpgero]

It's a change to the environment, so we need to check that it's good in staging + production.