Skip to content
This repository has been archived by the owner on Aug 12, 2020. It is now read-only.

Update svgo requirement from 1.2.0 to 1.2.2 in /packages/heisenberg-scripts #421

Open
wants to merge 1 commit into
base: next
Choose a base branch
from

Conversation

dependabot-preview[bot]
Copy link
Contributor

Updates the requirements on svgo to permit the latest version.

Changelog

Sourced from svgo's changelog.

[ > ] 1.2.2 / 16.04.2019

  • Update js-yaml for Code Injection warning (by @​kaungst).

[ > ] 1.2.1 / 04.04.2019

Some goodness from pull-requests.

  • Bump up js-yaml version to fix DoS vulnerability (by @​eugestarr).

[ > ] 1.2.0 / 24.02.2019

Some goodness from pull-requests.

  • Fixed extra blank lines when processing many files (by @​panczarny).
  • Added --recursive option to process folders recursevely with option -f (by @​dartess).
  • Added removeAttributesBySelector plugin to remove elements matching a css selector (by @​bmease).
  • Added removeOffCanvasPaths plugin to remove elements outside of the viewbox (by @​JoshyPHP).
  • removeAttrs plugin: added preserveCurrentColor color (by @​roblevintennis) and 3rd optional filter for a value (by @​Herman-Freund).
  • Added reusePaths plugin to replace duplicated elements with link (by @​jhowcrof).
  • Added support of comma-separated plugins list in --disable and --enable options (by @​jmwebservices).
  • Added option to preserve IDs based on prefix in cleanupIDs plugin (by @​bkotzz).
  • Replaced colors dependency with chalk (by @​xPaw).

[ > ] 1.1.1 / 17.09.2018

  • Fixed crash in SVGO.optimize() when ‘info’ is absent.
  • Removed extra space after cleanupListOfValues plugin.

[ > ] 1.1.0 / 16.09.2018

  • Fixed collapseGroups plugin removing property with a child having inherit value.
  • version attribute value is not more being rounded.
  • Fixed jsAPI clone method with respect to the introduced CSS classes.
  • Fixed scaling strokes with vector-effect="non-scaling-stroke" (by @​alexjlockwood).
  • Fixed passing properties from groups in collapseGroups plugin if child have a filter (by @​stristr).
  • Fixed arc path commands parsing without separators after flags, effectively producing a JS error.
  • Fixed viewBox separators parsing.
  • Fixed removeNonInheritableGroupAttrs plugin to work as intended.
  • Fixed removing path segments without length in presence of stroke-linecap.
  • Fixed removeUnknownsAndDefaults plugin removing attributes from elements with id.
  • Fixed converting to large arcs from nearly straight lines curves.
  • Fixed collapseGroups plugin affecting <switch> and its subgroups.
  • Fixed convertTransform plugin converting to rotate() with wrong sign in some case.
  • Fixed cleanupListOfValues plugin not preserving non-numeric values.
  • Fixed !important being passed to attributes in convertStyleToAttrs plugin.
  • Added option keepImportant to convertStyleToAttrs plugin to preserve styles with !important.
  • removeHiddenElems plugin now also removes elements with visibility="hidden" attribute (by @​mikolaj92).
  • Added forceAbsolutePath option to convertPathData plugin to always use absolute coordinates (by @​cool).
  • Added keepRoleAttr for removeUnknownsAndDefaults plugin to preserve role- attributes (by @​himedlooff).
  • Added xmlns order option in sortAttrs plugin (by @​hellatan).
  • Added an option to prefixIds plugin to pass prefix as false or as a function that returns false (by @​vzaidman).
  • prefixIds plugin now adds prefix to every class (by @​vzaidman).
  • Updated and improved docs a bit (multiple authors).

[ > ] 1.0.5 / 26.02.2018

  • Fixed issue with prefixIDs plugin not replacing url() values correctly (by @​harrisjose).
... (truncated)
Commits
  • fe0ecaf Updage changelog and documentation parts
  • 71188f8 Document multipass option
  • db45845 🔧fix: update js-yaml for Code Injection warning
  • d9ae161 Update changelog [skip ci]
  • 5969899 v1.2.1
  • 593ea85 Merge pull request #1089 from eugestarr/master
  • bfae928 Bump up js-yaml version to fix DoS vulnerability
  • aa0df73 bump package-lock.json version
  • See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Automerge options (never/patch/minor, and dev/runtime dependencies)
  • Pull request limits (per update run and/or open at any time)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

Updates the requirements on [svgo](https://github.com/svg/svgo) to permit the latest version.
- [Release notes](https://github.com/svg/svgo/releases)
- [Changelog](https://github.com/svg/svgo/blob/master/CHANGELOG.md)
- [Commits](svg/svgo@1.2.0...v1.2.2)

Signed-off-by: dependabot[bot] <support@dependabot.com>
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant