Bump cssnano from 5.1.2 to 5.1.4 #477

Merged

dependabot[bot] merged 1 commit from dependabot/npm_and_yarn/develop/cssnano-5.1.4 into develop

2022-03-14 05:07:08 +01:00

dependabot[bot] commented

2022-03-14 05:04:05 +01:00

(Migrated from github.com)

Bumps cssnano from 5.1.2 to 5.1.4.

Release notes

Sourced from cssnano's releases.

v5.1.3

Bug Fixes

fix: do not merge declarations containing custom properties when it might create invalid declarations (2c699341)

Commits

b012425 Publish cssnano 5.1.4 (#1360)
5428d5f fix(postcss-merge-longhand): preserve custom property case (#1359)
a013208 chore: use workspace protocol for local dependencies (#1358)
f0ccbc7 Publish cssnano 5.1.3 (#1357)
2c69934 fix(postcss-merge-longhand): don't explode custom properties (#1356)
1e01938 docs update site (#1355)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @Serraniel.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [cssnano](https://github.com/cssnano/cssnano) from 5.1.2 to 5.1.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/cssnano/cssnano/releases">cssnano's releases</a>.</em></p> <blockquote> <h2>v5.1.3</h2> <h2>Bug Fixes</h2> <ul> <li>fix: do not merge declarations containing custom properties when it might create invalid declarations (<a href="https://github.com/cssnano/cssnano/commit/2c699341efb42d148f2df9a81211c60191d2265e">2c699341</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/cssnano/cssnano/commit/b012425cdba4d8e747ad947c204c61df7a98ae75"><code>b012425</code></a> Publish cssnano 5.1.4 (<a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/1360">#1360</a>)</li> <li><a href="https://github.com/cssnano/cssnano/commit/5428d5fc9518f0a4808d0bdd8a6d5f6eaa90c3cf"><code>5428d5f</code></a> fix(postcss-merge-longhand): preserve custom property case (<a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/1359">#1359</a>)</li> <li><a href="https://github.com/cssnano/cssnano/commit/a0132086dd3ab9cd7285102debf0e7f9a1de3b92"><code>a013208</code></a> chore: use workspace protocol for local dependencies (<a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/1358">#1358</a>)</li> <li><a href="https://github.com/cssnano/cssnano/commit/f0ccbc74937b1aa72abd02222a5ca9ee73c3f1ed"><code>f0ccbc7</code></a> Publish cssnano 5.1.3 (<a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/1357">#1357</a>)</li> <li><a href="https://github.com/cssnano/cssnano/commit/2c699341efb42d148f2df9a81211c60191d2265e"><code>2c69934</code></a> fix(postcss-merge-longhand): don't explode custom properties (<a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/1356">#1356</a>)</li> <li><a href="https://github.com/cssnano/cssnano/commit/1e019389bb4cd3a447720da293559bde17b815fa"><code>1e01938</code></a> docs update site (<a href="https://github-redirect.dependabot.com/cssnano/cssnano/issues/1355">#1355</a>)</li> <li>See full diff in <a href="https://github.com/cssnano/cssnano/compare/cssnano@5.1.2...cssnano@5.1.4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cssnano&package-manager=npm_and_yarn&previous-version=5.1.2&new-version=5.1.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) Dependabot will merge this PR once CI passes on it, as requested by @Serraniel. [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

Serraniel (Migrated from github.com) approved these changes 2022-03-14 05:04:22 +01:00