Bump the all group across 1 directory with 9 updates #326

dependabot · 2024-09-01T22:53:30Z

Bumps the all group with 9 updates in the / directory:

Package	From	To
autoprefixer	`10.4.19`	`10.4.20`
mini-css-extract-plugin	`2.9.0`	`2.9.1`
postcss	`8.4.39`	`8.4.43`
sass	`1.77.6`	`1.77.8`
sass-loader	`14.2.1`	`16.0.1`
sharp	`0.33.4`	`0.33.5`
uglify-js	`3.18.0`	`3.19.3`
webpack	`5.92.1`	`5.94.0`
yaml	`2.4.5`	`2.5.0`

Updates autoprefixer from 10.4.19 to 10.4.20

Release notes

Sourced from autoprefixer's releases.

10.4.20

Fixed fit-content prefix for Firefox.

Changelog

Sourced from autoprefixer's changelog.

10.4.20

Fixed fit-content prefix for Firefox.

Commits

dae6eb4 Release 10.4.20 version
ee43652 Fix fit-content for Firefox
cf80824 Update dependencies
49d5ec6 Move to pnpm 9
See full diff in compare view

Updates mini-css-extract-plugin from 2.9.0 to 2.9.1

Release notes

Sourced from mini-css-extract-plugin's releases.

v2.9.1

2.9.1 (2024-08-19)

Bug Fixes

add export default {} when CSS modules enabled and a file is empty for the defaultExport option (8f77e19)

Changelog

Sourced from mini-css-extract-plugin's changelog.

2.9.1 (2024-08-19)

Bug Fixes

add export default {} when CSS modules enabled and a file is empty for the defaultExport option (8f77e19)

Commits

00cdedb chore(release): 2.9.1
8f77e19 fix: add export default {} when CSS modules enabled and a file is empty for...
3df97b6 docs: update github syntax of note (#1102)
727427b docs: fix example of the namedExport (#1103)
aab1b12 ci: fix (#1099)
See full diff in compare view

Updates postcss from 8.4.39 to 8.4.43

Release notes

Sourced from postcss's releases.

8.4.43

Fixed markClean is not a function error.

8.4.42

Fixed CSS syntax error on long minified files (by @varpstar).

8.4.41

Fixed types (by @nex3 and @querkmachine).

Cleaned up RegExps (by @bluwy).

8.4.40

Moved to getter/setter in nodes types to help Sass team (by @nex3).

Changelog

Sourced from postcss's changelog.

8.4.43

Fixed markClean is not a function error.

8.4.42

Fixed CSS syntax error on long minified files (by @varpstar).

8.4.41

Fixed types (by @nex3 and @querkmachine).

Cleaned up RegExps (by @bluwy).

8.4.40

Moved to getter/setter in nodes types to help Sass team (by @nex3).

Commits

b985ed1 Release 8.4.43 version
3025b74 Update dependencies
79ff980 Update AST if it is not made by PostCSS >= 8.4.41
0fda48a Release 8.4.42 version
cd5b08c Add ESLint to CI
0975cc2 Sort source code and fix ESLint
36950b4 Try to fix old Node.js tests
fbb6d60 Update dependencies
118ebc9 Clean up code
9e7bdca Pretty CssSyntaxError from onelined (minified) css (#1965)
Additional commits viewable in compare view

Updates sass from 1.77.6 to 1.77.8

Release notes

Sourced from sass's releases.

Dart Sass 1.77.8

To install Sass 1.77.8, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

No user-visible changes.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.77.8

No user-visible changes.

1.77.7

Declarations that appear after nested rules are deprecated, because the semantics Sass has historically used are different from the semantics specified by CSS. In the future, Sass will adopt the standard CSS semantics.

See the Sass website for details.

Potentially breaking bug fix: // in certain places such as unknown at-rule values was being preserved in the CSS output, leading to potentially invalid CSS. It's now properly parsed as a silent comment and omitted from the CSS output.

Commits

be9c3ac Run Windows ARM64 releases on windows-latest instead (#2275)
d4b1939 Run pub in verbose mode on windows-arm64
c96b5e2 Fix windows-arm64 release (#2274)
7203d65 Deprecated mixed declarations (#2267)
1edc247 Avoid [this] in Dartdoc comments (#2273)
a164889 Enable AOT build for windows-arm64 (#2270)
04b6251 Parse silent comments in _interpolatedDeclarationValue() (#2266)
860eb5a Fix linux-ia32, linux-arm-musl, and windows-arm64 releases (#2265)
See full diff in compare view

Updates sass-loader from 14.2.1 to 16.0.1

Release notes

Sourced from sass-loader's releases.

v16.0.1

16.0.1 (2024-08-19)

Bug Fixes

generate correct sourceMaps for modern-compiler api (#1228) (f862f7a)

v16.0.0

16.0.0 (2024-07-26)

⚠ BREAKING CHANGES

use modern Sass JS API by default for sass and sass-embedded

[!WARNING]

The sass options are different for the legacy (before) and modern APIs. Please look at docs how to migrate to the modern options. Legacy options - https://sass-lang.com/documentation/js-api/interfaces/legacystringoptions/ Modern options - https://sass-lang.com/documentation/js-api/interfaces/options/

To return to the previous logic use:
module.exports = {
  module: {
    rules: [
      {
        test: /\.s[ac]ss$/i,
        use: [
          "style-loader",
          "css-loader",
          {
            loader: "sass-loader",
            options: {
              api: "legacy",
              // Your options
            },
          },
        ],
      },
    ],
  },
};
Features

use modern Sass JS API by default for sass and sass-embedded (10be1ba)

... (truncated)

Changelog

Sourced from sass-loader's changelog.

16.0.1 (2024-08-19)

Bug Fixes

generate correct sourceMaps for modern-compiler api (#1228) (f862f7a)

16.0.0 (2024-07-26)

⚠ BREAKING CHANGES

use modern Sass JS API by default for sass and sass-embedded

[!WARNING]

The sass options are different for the legacy (before) and modern APIs. Please look at docs how to migrate to the modern options. Legacy options - https://sass-lang.com/documentation/js-api/interfaces/legacystringoptions/ Modern options - https://sass-lang.com/documentation/js-api/interfaces/options/

To return to the previous logic use:
module.exports = {
  module: {
    rules: [
      {
        test: /\.s[ac]ss$/i,
        use: [
          "style-loader",
          "css-loader",
          {
            loader: "sass-loader",
            options: {
              api: "legacy",
              // Your options
            },
          },
        ],
      },
    ],
  },
};
Features

use modern Sass JS API by default for sass and sass-embedded (10be1ba)

15.0.0 (2024-07-23)

... (truncated)

Commits

ce1ffc7 chore(release): 16.0.1
93b8d83 docs: fix version
f862f7a fix: generate correct sourceMaps for modern-compiler api (#1228)
ef02dad docs: remove incorrect parameter documentation of sassOptions function (#1227)
c1997de chore: update husky hooks (#1221)
c7ca4ee feat!: use modern Sass JS API by default for sass and sass-embedded (#1220)
57eee6b test: added for asset modules (#1219)
3f0332f ci: node@22 (#1218)
0458ad5 chore(release): 15.0.0
83423ff feat!: prefer sass-embedded over sass by default (#1211)
Additional commits viewable in compare view

Updates sharp from 0.33.4 to 0.33.5

Changelog

Sourced from sharp's changelog.

v0.33.5 - 16th August 2024

Upgrade to libvips v8.15.3 for upstream bug fixes.

Add pageHeight and pages to response of multi-page output. #3411

Ensure option to force use of a globally-installed libvips works correctly. #4111 @project0

Minimise use of engines property to improve yarn v1 support. #4130

Ensure sharp.format.heif includes only AVIF when using prebuilt binaries. #4132

Add support to recomb operation for 4x4 matrices. #4147 @ton11797

Expose PNG text chunks as comments metadata. #4157 @nkeynes

Expose optional precision and minAmplitude parameters of blur operation. #4168 #4172 @marcosc90

Ensure keepIccProfile avoids colour transformation where possible. #4186

TypeScript: chromaSubsampling metadata is optional. #4191 @DavidVaness

Commits

fc32e0b Release v0.33.5
0546e48 Docs: changelog entry for #4191
ab65b7a TypeScript: chromaSubsampling can be undefined (#4191)
2474bd4 Prerelease v0.33.5-rc.1
ff2e689 Remove yarn v1 specifics from help text
6327f13 CI: Add yarn v1 to packaging tests
f1e69a2 Prerelease v0.33.5-rc.0
3c14dbb Minimise use of engines property to improve yarn v1 support
82cebc3 Upgrade to libvips v8.15.3 for Linux ARMv6
ad36fa0 Ensure emnapiInit function is exported
Additional commits viewable in compare view

Updates uglify-js from 3.18.0 to 3.19.3

Release notes

Sourced from uglify-js's releases.

v3.19.3

Bug Fixes

assignment operator (abefd944eaebfd20d7f01e75353de2c5260bd586, cf87290819d87bfec842503ae655eafeffd5bdb6)

function call (4a92cdc4807a01bcaba9003a45a0e13c46653a8f)

function literal (303417cb64f145b52d8162ad2ffb8a48c56aac38)

property accessor (f34fbb2c36b2fd1cfe38aa12d103cdeb3916c73d, 23f98ba3e19b30bfd47de7c1a4740f8aa442b333, abefd944eaebfd20d7f01e75353de2c5260bd586, cf87290819d87bfec842503ae655eafeffd5bdb6)

v3.19.2

Features

improve compression of logical expressions (c7152b5e6618089c359d8f6c944572997271cfc9, cd0a8ec757156737a71be697b0cdd4a95a2dd6ab)

simplify collapsed assignment expressions (76803d6b45421699e201fbc4ee3173af1b1033df)

convert function literals to arrow functions (22550741b913e3c9fcdc3cf39395a8020c77c5f5)

support ascii_only on template literals (4661b3472e228c056f273977319009d6103feaff)

improve generation of Unicode escape sequences (80ebacbf51ccf449d47f5ce5a41fffeae4f9c454)

Bug Fixes

destructuring syntax (d82b7de5e885da712b43703810a521f22820ee26)

if statement (69f4e3a419fc1328eacadf89cbbece0497ad8957)

logical operator (69f4e3a419fc1328eacadf89cbbece0497ad8957)

optional chaining operator (15c8edb7564a0ab825fce19517f96e8d377a01a8, 8bbbc5178ebee10eb9fa69a706b29f40cc2aa3b9, 69f4e3a419fc1328eacadf89cbbece0497ad8957)

property accessor (e9cf8deb3352935328671df92ae21bf7b1e8a3b0)

switch statement (69f4e3a419fc1328eacadf89cbbece0497ad8957)

try statement (4bf9a4f0954c3fb2b2b2ab9d2def03cebbf0ac7b, 69f4e3a419fc1328eacadf89cbbece0497ad8957)

v3.19.1

Features

simplify nullish comparison of complex expressions (7a4fb85404f44bbf2e4db5892eb32b698bc53b6e)

Bug Fixes

if statement (fac0aa2b8aca8605835e604afe8b39903cc89b75)

switch statement (12475763a60ef92fed1cd625bbb0064c347cc84c, fac0aa2b8aca8605835e604afe8b39903cc89b75)

v3.19.0

Features

eliminate side-effect-free property access (9c80456634550045b51e921e59deb61e4e1dcab7, 95d3ede664598916e6dced8a5e0f5003efd3c77a, 205a1d1f19cfc128018cfd822c3332e6ee0a831f, 124c4d3fe364c825488528f9d90b68cb3b48178d)

improve hoist_vars efficiency (ce8ef52e2bcad2747b803faad68ab9c78cadf4d9)

improve compression around built-in function (8c5a899986e7f66cadd76bfcbd7c017e03508d36)

improve deconstruction of singular destructuring assignment (8c5a899986e7f66cadd76bfcbd7c017e03508d36)

Bug Fixes

... (truncated)

Commits

3ea33af v3.19.3
cf87290 fix corner case in collapse_vars (#5928)
4a92cdc fix corner case in collapse_vars (#5926)
23f98ba improve fix for #5917 (#5921)
abefd94 fix corner case in unused (#5920)
f34fbb2 fix corner case in reduce_vars (#5919)
303417c fix corner cases in collapse_vars & reduce_vars (#5916)
52b6852 v3.19.2
80ebacb generate shorter unicode escape sequence (#5914)
69f4e3a fix corner case in reduce_vars (#5913)
Additional commits viewable in compare view

Updates webpack from 5.92.1 to 5.94.0

Release notes

Sourced from webpack's releases.

v5.94.0

Bug Fixes

Added runtime condition for harmony reexport checked

Handle properly data/http/https protocols in source maps

Make bigint optimistic when browserslist not found

Move @types/eslint-scope to dev deps

Related in asset stats is now always an array when no related found

Handle ASI for export declarations

Mangle destruction incorrect with export named default properly

Fixed unexpected asi generation with sequence expression

Fixed a lot of types

New Features

Added new external type "module-import"

Support webpackIgnore for new URL() construction

[CSS] @import pathinfo support

Security

Fixed DOM clobbering in auto public path

v5.93.0

Bug Fixes

Generate correct relative path to runtime chunks

Makes DefinePlugin quieter under default log level

Fixed mangle destructuring default in namespace import

Fixed consumption of eager shared modules for module federation

Strip slash for pretty regexp

Calculate correct contenthash for CSS generator options

New Features

Added the binary generator option for asset modules to explicitly keep source maps produced by loaders

Added the modern-module library value for tree shakable output

Added the overrideStrict option to override strict or non-strict mode for javascript modules

Commits

eabf85d chore(release): 5.94.0
955e057 security: fix DOM clobbering in auto public path
9822387 test: fix
cbb86ed test: fix
5ac3d7f fix: unexpected asi generation with sequence expression
2411661 security: fix DOM clobbering in auto public path
b8c03d4 fix: unexpected asi generation with sequence expression
f46a03c revert: do not use heuristic fallback for "module-import"
60f1898 fix: do not use heuristic fallback for "module-import"
66306aa Revert "fix: module-import get fallback from externalsPresets"
Additional commits viewable in compare view

Updates yaml from 2.4.5 to 2.5.0

Release notes

Sourced from yaml's releases.

v2.5.0

Add --indent option to CLI tool (#559, with thanks to @danielbayley)

Require newline in all cases for props on block sequence (#557)

Always reset indentation in lexer on ... (#558)

Ignore minContentWidth if greater than lineWidth (#562)

Drop unused Collection.maxFlowStringSingleLineLength (#522, #421)

Commits

b309e23 2.5.0
6e58318 style: Apply updated Prettier style
61140fa chore: Refresh lockfile
534d8ad fix: Ignore minContentWidth if greater than lineWidth (fixes #562)
f73e1d9 chore: Drop unused Collection.maxFlowStringSingleLineLength (see #522, closes...
e7c81fe feat: Add --indent option to CLI tool (#559)
f685e1c fix: Always reset indentation in lexer on ... (fixes #558)
aea700d fix: Require newline in all cases for props on block sequence (fixes #557)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.19` | `10.4.20` | | [mini-css-extract-plugin](https://github.com/webpack-contrib/mini-css-extract-plugin) | `2.9.0` | `2.9.1` | | [postcss](https://github.com/postcss/postcss) | `8.4.39` | `8.4.43` | | [sass](https://github.com/sass/dart-sass) | `1.77.6` | `1.77.8` | | [sass-loader](https://github.com/webpack-contrib/sass-loader) | `14.2.1` | `16.0.1` | | [sharp](https://github.com/lovell/sharp) | `0.33.4` | `0.33.5` | | [uglify-js](https://github.com/mishoo/UglifyJS) | `3.18.0` | `3.19.3` | | [webpack](https://github.com/webpack/webpack) | `5.92.1` | `5.94.0` | | [yaml](https://github.com/eemeli/yaml) | `2.4.5` | `2.5.0` | Updates `autoprefixer` from 10.4.19 to 10.4.20 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.4.19...10.4.20) Updates `mini-css-extract-plugin` from 2.9.0 to 2.9.1 - [Release notes](https://github.com/webpack-contrib/mini-css-extract-plugin/releases) - [Changelog](https://github.com/webpack-contrib/mini-css-extract-plugin/blob/master/CHANGELOG.md) - [Commits](webpack-contrib/mini-css-extract-plugin@v2.9.0...v2.9.1) Updates `postcss` from 8.4.39 to 8.4.43 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.39...8.4.43) Updates `sass` from 1.77.6 to 1.77.8 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.77.6...1.77.8) Updates `sass-loader` from 14.2.1 to 16.0.1 - [Release notes](https://github.com/webpack-contrib/sass-loader/releases) - [Changelog](https://github.com/webpack-contrib/sass-loader/blob/master/CHANGELOG.md) - [Commits](webpack-contrib/sass-loader@v14.2.1...v16.0.1) Updates `sharp` from 0.33.4 to 0.33.5 - [Release notes](https://github.com/lovell/sharp/releases) - [Changelog](https://github.com/lovell/sharp/blob/main/docs/changelog.md) - [Commits](lovell/sharp@v0.33.4...v0.33.5) Updates `uglify-js` from 3.18.0 to 3.19.3 - [Release notes](https://github.com/mishoo/UglifyJS/releases) - [Commits](mishoo/UglifyJS@v3.18.0...v3.19.3) Updates `webpack` from 5.92.1 to 5.94.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.92.1...v5.94.0) Updates `yaml` from 2.4.5 to 2.5.0 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.4.5...v2.5.0) --- updated-dependencies: - dependency-name: autoprefixer dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: mini-css-extract-plugin dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: postcss dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: sass dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: sass-loader dependency-type: direct:development update-type: version-update:semver-major dependency-group: all - dependency-name: sharp dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: uglify-js dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: webpack dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: yaml dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <[email protected]>

for more information, see https://pre-commit.ci

dependabot · 2024-10-01T22:06:07Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 1, 2024

[pre-commit.ci] auto fixes from pre-commit.com hooks

ed29d20

for more information, see https://pre-commit.ci

dependabot bot closed this Oct 1, 2024

dependabot bot deleted the dependabot/npm_and_yarn/all-66faa0ac55 branch October 1, 2024 22:06

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the all group across 1 directory with 9 updates #326

Bump the all group across 1 directory with 9 updates #326

dependabot bot commented on behalf of github Sep 1, 2024 •

edited

Loading

dependabot bot commented on behalf of github Oct 1, 2024

Bump the all group across 1 directory with 9 updates #326

Bump the all group across 1 directory with 9 updates #326

Conversation

dependabot bot commented on behalf of github Sep 1, 2024 • edited Loading

10.4.20

10.4.20

v2.9.1

2.9.1 (2024-08-19)

Bug Fixes

2.9.1 (2024-08-19)

Bug Fixes

8.4.43

8.4.42

8.4.41

8.4.40

8.4.43

8.4.42

8.4.41

8.4.40

Dart Sass 1.77.8

Changes

1.77.8

1.77.7

v16.0.1

16.0.1 (2024-08-19)

Bug Fixes

v16.0.0

16.0.0 (2024-07-26)

⚠ BREAKING CHANGES

Features

16.0.1 (2024-08-19)

Bug Fixes

16.0.0 (2024-07-26)

⚠ BREAKING CHANGES

Features

15.0.0 (2024-07-23)

v0.33.5 - 16th August 2024

v3.19.3

Bug Fixes

v3.19.2

Features

Bug Fixes

v3.19.1

Features

Bug Fixes

v3.19.0

Features

Bug Fixes

v5.94.0

Bug Fixes

New Features

Security

v5.93.0

Bug Fixes

New Features

v2.5.0

dependabot bot commented on behalf of github Oct 1, 2024

dependabot bot commented on behalf of github Sep 1, 2024 •

edited

Loading