Skip to content

Bump tough-cookie, favicons and node-sass#19

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tough-cookie-and-favicons-and-node-sass--removed
Open

Bump tough-cookie, favicons and node-sass#19
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tough-cookie-and-favicons-and-node-sass--removed

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Jul 9, 2023

Removes tough-cookie. It's no longer used after updating ancestor dependencies tough-cookie, favicons and node-sass. These dependencies need to be updated together.

Removes tough-cookie

Updates favicons from 6.2.2 to 7.1.3

Release notes

Sourced from favicons's releases.

v7.1.3

No release notes provided.

v7.1.2

  • Update xml2js to 0.5.0
  • Update sharp to 0.32.0
  • Update Typescript to 5

v7.1.1

No release notes provided.

v7.1.0

  • A new cache busting option cacheBustingQueryParam is added

v7.0.2

  • Allow to specify which icons to generate and their options simultaneously #407
  • Opt-in support of SVG icons #401
  • Throw an error if background is not specified and Windows icon is generated #408
  • Update dependencies to their latest versions

v7.0.1

  • Change minimal supported version of NodeJS to 14.x #402
  • re-export FaviconOptions #404

v7.0.0

Notable changes

  • Maskable icons #336
  • Remove dependency on to-ico
  • Replace Jimp by Sharp #338
  • [BREAKING] Predictable picking of source image #350
  • New option output to control which files are generated. This may be useful for those who want to generate different versions of manifest (e.g. per-locale) and reuse icons
  • Proper escaping of application name and short name itgalaxy/favicons@7ac5abf
  • Add support for related_applications (#352)
  • [BREAKING] Drop support of Firefox OS and Opera Coast.
  • New option manifestFileName. It may be used if you want to rename a manifest file: { files: { windows: { manifestFileName: "file.xml" } } }.
  • [BREAKING] Rename manifest.json to manifest.webmanifest
  • [BREAKING] Remove support of Gulp
  • Add webmanifest's shortcuts support #378
  • Fix scaling of SVG #380
  • [BREAKING] Drop support of NodeJS 12.x
  • remove non standard rel=shortcut #384
  • [BREAKING] Drop support of callbacks in favor of promises. A code like this favicons(source, options, (error, result) => { ... }) should be changed to favicons(source, options).then(result => { ... }, error => { ... }).

Operational changes

  • Migrate CI from Travis CI and AppVeyor to GitHub Actions #339
  • Migrate test suite from AVA to Jest
  • Convert source code to Typescript

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by andy128k, a new releaser for favicons since your current version.


Updates node-sass from 6.0.1 to 9.0.0

Release notes

Sourced from node-sass's releases.

v9.0.0

What's Changed

Breaking changes

Supported Environments

OS Architecture Node
Windows x86 & x64 16, 18, 19, 20
OSX x64 16, 18, 19, 20
Linux* x64 16, 18, 19, 20
Alpine Linux x64 16, 18, 19, 20

*Linux support refers to major distributions like Ubuntu, and Debian

v8.0.0

What's Changed

Breaking changes

Features

Dependencies

  • Bump true-case-path@2.2.1
  • Bump node-gyp @​9.0.0
  • Bump nan@^2.17.0
  • Bump sass-graph@^4.0.1

Misc

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [tough-cookie](https://github.com/salesforce/tough-cookie). It's no longer used after updating ancestor dependencies [tough-cookie](https://github.com/salesforce/tough-cookie), [favicons](https://github.com/itgalaxy/favicons) and [node-sass](https://github.com/sass/node-sass). These dependencies need to be updated together.


Removes `tough-cookie`

Updates `favicons` from 6.2.2 to 7.1.3
- [Release notes](https://github.com/itgalaxy/favicons/releases)
- [Commits](itgalaxy/favicons@v6.2.2...v7.1.3)

Updates `node-sass` from 6.0.1 to 9.0.0
- [Release notes](https://github.com/sass/node-sass/releases)
- [Changelog](https://github.com/sass/node-sass/blob/master/CHANGELOG.md)
- [Commits](sass/node-sass@v6.0.1...v9.0.0)

---
updated-dependencies:
- dependency-name: tough-cookie
  dependency-type: indirect
- dependency-name: favicons
  dependency-type: direct:development
- dependency-name: node-sass
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 9, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants