Serraniel/AniwatchPlus
Serraniel/AniwatchPlus
1
0
Fork 0
Code Issues 9 Pull requests 8 Packages Projects Releases 10 Wiki Activity

Bump cssnano from 4.1.11 to 5.0.0 #233

Merged
dependabot[bot] merged 1 commit from dependabot/npm_and_yarn/develop/cssnano-5.0.0 into develop 2021-04-12 22:33:54 +02:00
Conversation 1 Commits 1 Files changed 2 +655 -1203
dependabot[bot] commented 2021-04-12 06:19:28 +02:00 (Migrated from github.com)
Copy link

Bumps cssnano from 4.1.11 to 5.0.0.

Release notes

Sourced from cssnano's releases.

v5.0.0

Major changes

  • requires Node >= 10.13
  • PostCSS 8 API, so cssnano 5 does not emit warnings when running under PostCSS 8
  • updated to SVGO 2, fixing many SVG minification bugs
  • updated css-value-parser and css-selector-parser, fixing many bugs

Upgrade notes

If you use the cssnano JavaScript API, you need to change your code:

  • Replace cssnano.process() with cssnano().process() (notice the () after cssnano)

  • pass cssnano options to cssnano() instead of process()

cssnano(cssnanoOptions).process(postcssOptions)

Bug fixes

  • fix improperly discarding @font-face declarations #726
  • partially fix some isues where cssnano did not combine rules when used together with postcss-nested #1004
  • fix translate3d() minification #920
  • fix minification of values starting with e #589, #984
  • fix minification of percentage vaalues #962, #957
  • fix minification of aspect-ratio #963
  • fix merging of @supports rules #974
  • fix sorting of longhand and shorthand properties #535
  • remove vulnerable dependency and always warn with bad SVG input #1034
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [cssnano](https://github.com/cssnano/cssnano) from 4.1.11 to 5.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/cssnano/cssnano/releases">cssnano's releases</a>.</em></p> <blockquote> <h2>v5.0.0</h2> <h2>Major changes</h2> <ul> <li>requires Node &gt;= 10.13</li> <li>PostCSS 8 API, so cssnano 5 does not emit warnings when running under PostCSS 8</li> <li>updated to SVGO 2, fixing many SVG minification bugs</li> <li>updated css-value-parser and css-selector-parser, fixing many bugs</li> </ul> <h3>Upgrade notes</h3> <p>If you use the cssnano JavaScript API, you need to change your code:</p> <ul> <li> <p>Replace <code>cssnano.process()</code> with <code>cssnano().process()</code> (notice the <code>()</code> after <code>cssnano</code>)</p> </li> <li> <p>pass cssnano options to <code>cssnano()</code> instead of <code>process()</code></p> </li> </ul> <pre><code>cssnano(cssnanoOptions).process(postcssOptions) </code></pre> <h2>Bug fixes</h2> <ul> <li>fix improperly discarding <code>@font-face</code> declarations <a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/726">#726</a></li> <li>partially fix some isues where cssnano did not combine rules when used together with <code>postcss-nested</code> <a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/1004">#1004</a></li> <li>fix <code>translate3d()</code> minification <a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/920">#920</a></li> <li>fix minification of values starting with <code>e</code> <a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/958">#589</a>, <a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/984">#984</a></li> <li>fix minification of percentage vaalues <a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/962">#962</a>, <a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/957">#957</a></li> <li>fix minification of <code>aspect-ratio</code> <a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/963">#963</a></li> <li>fix merging of <code>@supports</code> rules <a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/974">#974</a></li> <li>fix sorting of longhand and shorthand properties <a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/535">#535</a></li> <li>remove vulnerable dependency and always warn with bad SVG input <a href="https://github-redirect.dependabot.com/cssnano/cssnano/pull/1034">#1034</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/cssnano/cssnano/commit/ac2dbc77b5d8e40ad2fc708f02203a640e87f09f"><code>ac2dbc7</code></a> Publish</li> <li><a href="https://github.com/cssnano/cssnano/commit/53a5d66a0c2f4e3a0d3e8dd1eff2f04df0556e19"><code>53a5d66</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/1034">#1034</a> from cssnano/silence-cve-alerts</li> <li><a href="https://github.com/cssnano/cssnano/commit/fc8a52a9603606b27dedd426890ce016198cc426"><code>fc8a52a</code></a> refactor(postcss-svgo): always warn on invalid SVG</li> <li><a href="https://github.com/cssnano/cssnano/commit/22d2a18be178a7e0e30dc076a5cc12e15c112af9"><code>22d2a18</code></a> refactor: remove is-svg dependency</li> <li><a href="https://github.com/cssnano/cssnano/commit/60d107bc604f8171c67c77d5bb3de6fb948116c4"><code>60d107b</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/1017">#1017</a> from cssnano/5.0.0-rc2</li> <li><a href="https://github.com/cssnano/cssnano/commit/5ba19ca54892f76ba6b2b698b4d88adcabd4451b"><code>5ba19ca</code></a> Publish</li> <li><a href="https://github.com/cssnano/cssnano/commit/4218332f425439f85225660ebba0314f3cc54ba0"><code>4218332</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/1016">#1016</a> from cssnano/update-svgo</li> <li><a href="https://github.com/cssnano/cssnano/commit/dbc08bffd5935198b4616f15bfc4c39402edb37f"><code>dbc08bf</code></a> test: update SVG output in framework tests</li> <li><a href="https://github.com/cssnano/cssnano/commit/aa07cfd62c82ed4b1e87219eea8d0ed99635e4ca"><code>aa07cfd</code></a> fix: update SVGO</li> <li><a href="https://github.com/cssnano/cssnano/commit/c4a4f69eb3c9d9715737415b3d0d02d9ae36db12"><code>c4a4f69</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/1014">#1014</a> from cssnano/fix-babel-deps</li> <li>Additional commits viewable in <a href="https://github.com/cssnano/cssnano/compare/v4.1.11...cssnano@5.0.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cssnano&package-manager=npm_and_yarn&previous-version=4.1.11&new-version=5.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
Serraniel (Migrated from github.com) reviewed 2021-04-12 06:19:28 +02:00
Serraniel commented 2021-04-12 22:33:52 +02:00 (Migrated from github.com)
Copy link

@dependabot merge

@dependabot merge
👍 1
Sign in to join this conversation.
Reviewers
No reviewers
Serraniel
Labels
Clear labels   
dependencies

Pull requests that update a dependency file

  
Priority: Critical

Critical issue.

  
Priority: High

High priority issue.

  
Priority: Low

Low priority issue.

  
Priority: Medium

Average priority issue.

  
State: Abandoned

Issue will not be implemented.

  
State: Blocked

Issue is blocked by another issue.

  
State: Completed

Issue has been fixed or implemented and version has been released.

  
State: In progress

Issue in development.

  
State: New

New items which hasn´t been sighted yet.

  
State: On Hold

Issue is currently on hold.

  
State: Pending

Item is pending for some reason.

  
State: Review needed

Issue needs to be reviewed.

  
State: Waiting for release

Issue is completed but there is no release version available yet.

  
Type: Bug

The issue describes a bug in the project.

  
Type: Enhancement

The issues describes a new feature or some other kind of enhancement for the project.

  
Type: Maintenance

The issue describes some kind of maintenance which has to be done for the project or repository.

  
Type: Question

The issue is a question.

No labels
dependencies
Priority: Critical
Priority: High
Priority: Low
Priority: Medium
State: Abandoned
State: Blocked
State: Completed
State: In progress
State: New
State: On Hold
State: Pending
State: Review needed
State: Waiting for release
Type: Bug
Type: Enhancement
Type: Maintenance
Type: Question
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: Serraniel/AniwatchPlus#233
No description provided.
Delete branch "dependabot/npm_and_yarn/develop/cssnano-5.0.0"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?