Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the npm-dependencies group with 4 updates #482

Merged
merged 1 commit into from
Jan 8, 2024
Merged

Bump the npm-dependencies group with 4 updates #482

merged 1 commit into from
Jan 8, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 8, 2024

Bumps the npm-dependencies group with 4 updates: cssnano, postcss-import, rollup and stylelint.

Updates cssnano from 6.0.2 to 6.0.3

Release notes

Sourced from cssnano's releases.

v6.0.3

Bug fixes

  • do not sort unknown properties\

Other

  • Require latest browserslist and postcss-selector-parser
Commits
  • 796988e Publish cssnano 6.0.3
  • 1797d35 chore: add workflow to publish to npm
  • b1aea33 chore(postcss-svgo)): update SVGO to 3.0.2
  • 1ead72d chore: update postcss-selector-parser to 6.0.15
  • f233b22 chore: update postcss-selector-parser
  • bbca7b3 chore: update all dependencies
  • b433b4c test(cssnano): update google-fonts-complete dependency
  • a2107c6 Update development dependencies (#1541)
  • 5066593 chore: update ESLint config to flat config
  • 42249e7 fix(postcss-svgo): update SVGO to 3.1.0
  • Additional commits viewable in compare view

Updates postcss-import from 15.1.0 to 16.0.0

Changelog

Sourced from postcss-import's changelog.

16.0.0 / 2024-01-02

  • BREAKING: Require Node.js v18+ (#550, #551)
  • BREAKING: Signifigant rewrite, with small behavioral tweaks in a number of edge cases
  • Support for @supports conditional imports added (#532, #548)
  • When skipDuplicates is false, handles import cycles correctly (#462, #535)
  • Add warnOnEmpty option to allow disabling warnings for empty files (#84, #541)
  • Use proper node.errors (#518, #540)

Huge thanks to @romainmenke for all the hard work he put into this release.

Commits

Updates rollup from 4.9.1 to 4.9.4

Release notes

Sourced from rollup's releases.

v4.9.4

4.9.4

2024-01-06

Bug Fixes

  • Use quotes for keys in namespaces that are only numbers but are not valid integers (#5328)
  • Allow to have comments between pure annotations and the annoted node (#5332)

Pull Requests

v4.9.3

4.9.3

2024-01-05

Bug Fixes

  • Support __proto__ as export/import name (#5313)
  • Use ESTree AST type over custom type in user-facing types (#5323)

Pull Requests

v4.9.2

4.9.2

2023-12-30

Bug Fixes

  • Extend support for arbitrary namespace identifiers in SystemJS (#5321)
  • Do not wrongly flag functions without side effects as side effects if moduleSideEffects is false (#5322)

Pull Requests

... (truncated)

Changelog

Sourced from rollup's changelog.

4.9.4

2024-01-06

Bug Fixes

  • Use quotes for keys in namespaces that are only numbers but are not valid integers (#5328)
  • Allow to have comments between pure annotations and the annoted node (#5332)

Pull Requests

4.9.3

2024-01-05

Bug Fixes

  • Support __proto__ as export/import name (#5313)
  • Use ESTree AST type over custom type in user-facing types (#5323)

Pull Requests

4.9.2

2023-12-30

Bug Fixes

  • Extend support for arbitrary namespace identifiers in SystemJS (#5321)
  • Do not wrongly flag functions without side effects as side effects if moduleSideEffects is false (#5322)

Pull Requests

Commits

Updates stylelint from 16.0.2 to 16.1.0

Release notes

Sourced from stylelint's releases.

16.1.0

  • Added: lightness-notation rule (#7366) (@​fpetrakov).
  • Added: ignore: ["keyframe-selectors"] to selector-disallowed-list (#7417) (@​mattxwang).
  • Fixed: selector-pseudo-class-no-unknown false positive for :popover-open (#7425) (@​mattxwang).
  • Fixed: declaration-property-value-no-unknown and other false positives for multiline SCSS interpolation. (#7406) (@​FloEdelmann).
  • Fixed: function-url-quotes false positives for SCSS variable and @ character (#7416) (@​mattxwang).
Changelog

Sourced from stylelint's changelog.

16.1.0

  • Added: lightness-notation rule (#7366) (@​fpetrakov).
  • Added: ignore: ["keyframe-selectors"] to selector-disallowed-list (#7417) (@​mattxwang).
  • Fixed: selector-pseudo-class-no-unknown false positive for :popover-open (#7425) (@​mattxwang).
  • Fixed: declaration-property-value-no-unknown and other false positives for multiline SCSS interpolation. (#7406) (@​FloEdelmann).
  • Fixed: function-url-quotes false positives for SCSS variable and @ character (#7416) (@​mattxwang).
Commits
  • 5882290 16.1.0
  • 6c4b64d Prepare 16.1.0 (#7415)
  • 566c422 Bump file-entry-cache from 7.0.2 to 8.0.0 (#7427)
  • 42bf8f8 Bump meow from 12.1.1 to 13.0.0 (#7426)
  • cb509a0 Fix function-url-quotes false positives for SCSS variable and @ character...
  • e222352 Document benefits from TypeScript annotation (#7423)
  • 760a6f1 Fix selector-pseudo-class-no-unknown false positive for :popover-open (#7...
  • 8ec6748 Add ignore: ["keyframe-selectors"] to selector-disallowed-list (#7417)
  • 548b221 Add missing changelog for PR #7366
  • 19ab06a Sort rules alphabetically in docs/user-guide/rules.md (#7422)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the npm-dependencies group with 4 updates
913b0fb 
Bumps the npm-dependencies group with 4 updates: [cssnano](https://github.com/cssnano/cssnano), [postcss-import](https://github.com/postcss/postcss-import), [rollup](https://github.com/rollup/rollup) and [stylelint](https://github.com/stylelint/stylelint).


Updates `cssnano` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/cssnano@6.0.2...cssnano@6.0.3)

Updates `postcss-import` from 15.1.0 to 16.0.0
- [Release notes](https://github.com/postcss/postcss-import/releases)
- [Changelog](https://github.com/postcss/postcss-import/blob/master/CHANGELOG.md)
- [Commits](postcss/postcss-import@15.1.0...16.0.0)

Updates `rollup` from 4.9.1 to 4.9.4
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.9.1...v4.9.4)

Updates `stylelint` from 16.0.2 to 16.1.0
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@16.0.2...16.1.0)

---
updated-dependencies:
- dependency-name: cssnano
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: postcss-import
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: rollup
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: stylelint
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 8, 2024
@ian-noaa ian-noaa merged commit dad7428 into main Jan 8, 2024
5 checks passed
@ian-noaa ian-noaa deleted the dependabot-npm_and_yarn-npm-dependencies-7f8d9ca3fc branch January 8, 2024 16:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@ian-noaa ian-noaa

Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
1 participant
@ian-noaa