Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade svgo from 3.0.2 to 3.2.0 #262

Open
wants to merge 1 commit into
base: capella
Choose a base branch
from

Conversation

X-oss-byte
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade svgo from 3.0.2 to 3.2.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 5 versions ahead of your current version.

  • The recommended version was released on 5 months ago.

Release notes
Package name: svgo
  • 3.2.0 - 2024-01-02

    What's Changed

    Bug Fixes

    SVG Optimization

    • convertPathData, improves closing paths and how we determine if to use absolute or relative commands. By @ KTibow in #1867
    • convertPathData, round arc or convert to lines based on the sagitta, can be disabled by setting smartArcRounding to false. By @ KTibow in #1873
    • convertPathData, convert cubic Bézier curves to quadratic Bézier curves where possible, can be disabled by setting convertToQ to false. By @ KTibow in #1889

    Performance

    Metrics

    Before and after using vectors from various sources, with the default preset of each respective version:

    SVG Original v3.1.0 v3.2.0 Delta
    Arch Linux Logo 9.529 KiB 4.162 KiB 4.115 KiB ⬇️ 0.047 KiB
    Blobs 50.45 KiB 42.949 KiB 42.623 KiB ⬇️ 0.326 KiB
    Isometric Madness 869.034 KiB 550.153 KiB 540.582 KiB ⬇️ 9.571 KiB
    tldr-pages Banner 2.071 KiB 1.07 KiB 1.07 KiB
    Wikipedia Logo 161.551 KiB 116 KiB 111.668 KiB ⬇️ 4.332 KiB

    Before and after of the browser bundle of each respective version:

    v3.1.0 v3.2.0 Delta
    svgo.browser.js 660.9 kB 910.9 kB ⬆️ 250 kB
  • 3.1.0 - 2023-12-11

    What's Changed

    Bug Fixes

    SVG Optimization

    Metrics

    Before and after using vectors from various sources, with the default preset of each respective version:

    SVG Original v3.0.5 v3.1.0 Delta
    Arch Linux Logo 9.529 KiB 4.608 KiB 4.162 KiB ⬇️ 0.446 KiB
    Blobs 50.45 KiB 42.949 KiB 42.949 KiB
    Isometric Madness 869.034 KiB 550.153 KiB 550.153 KiB
    tldr-pages Banner 2.071 KiB 1.07 KiB 1.07 KiB
    Wikipedia Logo 161.551 KiB 117.146 KiB 116 KiB ⬇️ 1.146 KiB

    Before and after of the browser bundle of each respective version:

    v3.0.5 v3.1.0 Delta
    svgo.browser.js 657.5 kB 660.9 kB ⬆️ 3.4 kB
  • 3.0.5 - 2023-11-30

    What's Changed

    Bug Fixes

    Chores

    • Improved exported types for the #loadConfig method. By @ nuintun in #1844

    Metrics

    Before and after using vectors from various sources, with the default preset of each respective version:

    SVG Original v3.0.4 v3.0.5 Delta
    Arch Linux Logo 9.529 KiB 4.735 KiB 4.608 KiB ⬇️ 0.127 KiB
    Blobs 50.45 KiB 42.949 KiB 42.949 KiB
    Isometric Madness 869.034 KiB 550.593 KiB 550.153 KiB ⬇️ 0.44 KiB
    tldr-pages Banner 2.071 KiB 1.07 KiB 1.07 KiB
    Wikipedia Logo 161.551 KiB 117.152 KiB 117.146 KiB ⬇️ 0.006 KiB

    Before and after of the browser bundle of each respective version:

    v3.0.4 v3.0.5 Delta
    svgo.browser.js 656.9 kB 657.5 kB ⬆️ 0.6 kB
  • 3.0.4 - 2023-11-18

    Includes various bug fixes for existing plugins and a new optimization. Also splits removeXMLNS, which removed XLink, into two separate plugins, removeXMLNS and removeXlink.

    What's Changed

    Default Behavior

    • removeXMLNS, no longer removes the XLink (xmlns:xlink) namespace. If that is desirable, you should enable the new removeXlink plugin, which does more while being safer. By @ TrySound and @ SethFalco in #1535

    Bug Fixes

    SVG Optimization

    • convertPathData, convert to z command if going back to initial position, or drop z if redundant. By @ KTibow in #1822
    • inlineStyles, when inlining a CSS property that's already declared in a presentation attribute of the node, drop the attribute. By @ SethFalco in #1829
    • removeXlink, new plugin that removes the XLink (xmlns:xlink) namespace and migrates from XLink attributes to the SVG 2 equivalent. Disabled by default. By @ TrySound and @ SethFalco in #1535

    Metrics

    Before and after using vectors from various sources, with the default preset of each respective version:

    SVG Original v3.0.3 v3.0.4 Delta
    Arch Linux Logo 9.529 KiB 4.738 KiB 4.735 KiB ⬇️ 0.003 KiB
    Blobs 50.45 KiB 42.949 KiB 42.949 KiB
    Isometric Madness 869.034 KiB 550.699 KiB 550.593 KiB ⬇️ 0.106 KiB
    tldr-pages Banner 2.071 KiB 1.07 KiB 1.07 KiB
    Wikipedia Logo 161.552 KiB 118.441 KiB 117.152 KiB ⬇️ 1.289 KiB

    Before and after of the browser bundle of each respective version:

    v3.0.3 v3.0.4 Delta
    svgo.browser.js 651.7 kB 656.9 kB ⬆️ 5.2 kB
  • 3.0.3 - 2023-11-08

    Includes various bug fixes and optimizations for existing plugins.

    We're also revamped the documentation for the project. You can find it on svgo.dev!
    The frontend for svgo.dev is maintained in svg/svgo.dev, contributions are welcome.

    What's Changed

    Default Behavior

    • removeComments, introduces preservePatterns parameter. Preserves legal comments by default, same as the previous behavior, but can now be overridden. By @ SethFalco in #1812
    • removeDesc, set the removeAny parameter to false by default for accessibility. By @ SethFalco in #1806

    Bug Fixes

    • removeRasterImages, removes inline JPEG images. By @ abejfehr in #1742
    • cleanupIds, correctly handle when 2 IDs have been referenced in a single attribute. By @ SethFalco in #1795
    • cleanupIds, correctly handle when we've encountered a reference to a node that doesn't exist. By @ SethFalco in #1817
    • inlineStyles, treat style prop keys as case-insensitive. By @ SethFalco in #1797
    • inlineStyles, remove all classes in multiclass selector. By @ SethFalco in #1801
    • inlineStyles, ignore empty CSS blocks instead of adding empty style attribute. By @ SethFalco in #1823
    • minifyStyles, removes unused class selectors when the document has no classes. By @ SethFalco in #1800
    • prefixIds, reuse the same prefix when encountering an ID multiple times. By @ SethFalco in #1814
    • removeHiddenElems, stops removing non-rendering elements like masks. By @ SethFalco in #1793
    • reusePaths, creates a new ID if the current one is referenced by another element. By @ SethFalco in #1784
    • reusePaths, removes redundant defs children after optimization. By @ SethFalco in #1785
    • reusePaths, stops duplicating attributes into the shared definition. By @ SethFalco in #1791
    • Don't crash on a null, undefined, or empty plugin. Instead, log a warning and ignore it. By @ SethFalco in #1128

    SVG Optimization

    Performance

    Chores

    Metrics

    Before and after using vectors from various sources, with the default preset of each respective version:

    SVG Original v3.0.2 v3.0.3 Delta
    Arch Linux Logo 8.584 KiB 4.748 KiB 4.747 KiB ⬇️ 0.001 KiB
    Blobs 50.45 KiB 42.949 KiB 42.949 KiB
    Isometric Madness 869.034 KiB 550.829 KiB 550.699 KiB ⬇️ 0.13 KiB
    tldr-pages Banner 2.071 KiB 1.07 KiB 1.07 KiB
    Wikipedia Logo 161.552 KiB 118.441 KiB 118.441 KiB

    Before and after of the browser bundle of each respective version:

    v3.0.2 v3.0.3 Delta
    svgo.browser.js 643.5 kB 651.7 kB ⬆️ 8.2 kB
  • 3.0.2 - 2022-11-18

    Installing @ types/csso no longer required

from svgo GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade svgo from 3.0.2 to 3.2.0.

See this package in npm:
svgo

See this project in Snyk:
https://app.snyk.io/org/sammyfilly/project/cc19e96e-4083-4d24-ae8b-ddbc58138043?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

stackblitz bot commented May 25, 2024

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

Copy link

changeset-bot bot commented May 25, 2024

⚠️ No Changeset found

Latest commit: 9814cfb

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Copy link

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We have skipped reviewing this pull request. It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants