Bump image_processing from 1.14.0 to 2.0.1

[dependabot]

Bumps image_processing from 1.14.0 to 2.0.1.

Changelog

Sourced from image_processing's changelog.

2.0.1 (2026-05-22)

• [minimagick] Prevent remote shell execution when passing loader/saver options from user input

2.0.0 (2026-05-20)

• mini_magick/ruby-vips are now soft dependencies and need to be manually added to the Gemfile (@​janko)

• Avoid remote shell execution vulnerability in #apply when arguments are coming from user input (@​janko)

• [vips] Unfuzzed loaders are now blocked by default (@​janko)

• [vips] Sharpening after resize has been disabled by default (@​janko)

• [minimagick] Remove deprecated :compose and :geometry keyword arguments for #composite (@​janko)

• Ruby 3.0+ is now required (@​janko)

Commits

• 9489387 Bump to 2.0.1
• 31b3d91 Prevent remote shell execution in loader/saver minimagick options
• cd1353d Bump to 2.0.0
• fb1c0ed Update documentation with recent changes
• f9a1379 Use double quotes
• ad46160 Add IRB and Benchmark to Gemfile
• c064833 Remove deprecated :compose and :geometry in MiniMagick#composite
• 4a26fa8 Make ruby-vips and mini_magick soft dependencies
• 201586c Block unfuzzed loaders by default on libvips 8.13+
• a71fcad Remove libvips 8.6+ check
• Additional commits viewable in compare view

[dependabot]

A newer version of image_processing exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.