Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

build(deps): bump the production-dependencies group across 1 directory with 8 updates #202

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 20, 2024

Bumps the production-dependencies group with 8 updates in the / directory:

Package From To
import-meta-resolve 4.0.0 4.1.0
joi 17.13.0 17.13.1
csv-parse 5.5.5 5.5.6
terser 5.30.4 5.31.0
lightningcss 1.24.1 1.25.0
imagemin 8.0.1 9.0.0
imagemin-pngquant 9.0.2 10.0.0
imagemin-svgo 10.0.1 11.0.0

Updates import-meta-resolve from 4.0.0 to 4.1.0

Release notes

Sourced from import-meta-resolve's releases.

4.1.0

Misc

Full Changelog: wooorm/import-meta-resolve@4.0.0...4.1.0

Commits

Updates joi from 17.13.0 to 17.13.1

Commits

Updates csv-parse from 5.5.5 to 5.5.6

Changelog

Sourced from csv-parse's changelog.

5.5.6 (2024-05-13)

Bug Fixes

  • csv-parse: skip event not raised with bom (fix #411) (1326351)
Commits
  • 6aadcac chore(release): publish
  • 53d62d4 test(csv-parse): on_skip validation
  • 1326351 fix(csv-parse): skip event not raised with bom (fix #411)
  • 7ca18b2 refactor(csv-parse): semi colon lint
  • 7d4961d test: skip test ability
  • 70fc026 docs(csv-parse): new cast sample
  • See full diff in compare view

Updates terser from 5.30.4 to 5.31.0

Changelog

Sourced from terser's changelog.

v5.31.0

  • Sync up property mangler exceptions with current contents of Firefox and Chrome environments
  • Add more webcomponent properties to property mangler exceptions (#1525)
  • Drop non-nullish constants in ...spreads in objects (#1141)
Commits

Updates lightningcss from 1.24.1 to 1.25.0

Release notes

Sourced from lightningcss's releases.

v1.25.0

This release adds more granular options for CSS modules, implements some new CSS properties, and fixes bugs.

Added

  • Add granular options to control which identifiers are scoped in CSS modules. You can turn off scoping for grid, animation, and custom_idents. This may be useful when migrating from other tools. See docs. Thanks @​timneutkens! 83839a98dbe0000acbdf039d968f33e1e8c50277
  • Optimize the all shorthand property to reset other properties except direction and unicode-bidi. d7aeff3db67ee9d15e0fefce9251cf41c0b8ec44
  • Implement animation-timeline property and add support for it in the animation shorthand f4408c7bdbbfa2c4cbdf5731b351811a0323fa8c

Fixed

  • Prevent simplifying translate: none and scale: none which are distinct from translate: 0 and scale: 1. Thanks @​RobinMalfait! a4cc0246d28c364c0f4e16552685bd911444bdc5
  • Fix crash on box-shadow with currentColor keyword. Thanks @​magic-akari! 06ba62f6d1af563cd8ad31dba13844f434345720
  • Fix minifier removing zero channels in color() function to follow spec change 445def9a77f89aa612fecb2f776261fc2c9d8f66
  • Fix CSS module scoping with variables in animation shorthand fb4b33488cbf54ba063de8babb42aec016a96ce8
  • Update browser compatibility data ec9da43eeb1a236f5fd8dc472b3fe060c3db9a79
Commits
  • 81d21b9 v1.25.0
  • f4408c7 Implement animation-timeline property and add to animation shorthand
  • ec9da43 update browser compat data
  • fb4b334 fix CSS module scoping with variables
  • 83839a9 Add granular CSS Modules options (#739)
  • 445def9 fix minifying predefined color spaces
  • 7c34ba5 Merge branch 'master' of github.com:parcel-bundler/lightningcss
  • 4a168e9 fixup ast
  • 06ba62f Fix box-shadow combination of oklch and currentColor (#722)
  • 029c88e fixup ast
  • Additional commits viewable in compare view

Updates imagemin from 8.0.1 to 9.0.0

Release notes

Sourced from imagemin's releases.

v9.0.0

Breaking

  • Require Node.js 18 0f2a0aa

Improvements

  • Update dependencies 0f2a0aa

imagemin/imagemin@v8.0.1...v9.0.0

Commits

Updates imagemin-pngquant from 9.0.2 to 10.0.0

Release notes

Sourced from imagemin-pngquant's releases.

v10.0.0

Breaking

  • Require Node.js 18 981b216
  • This package is now pure ESM. Please read this.
  • It now returns Uint8Array instead of Buffer 981b216
    • Buffer is a subclass of Uint8Array, so this only affects you if you use buffer-specific methods.
  • Removed support for streams 981b216

Improvements

imagemin/imagemin-pngquant@v9.0.2...v10.0.0

Commits

Updates imagemin-svgo from 10.0.1 to 11.0.0

Release notes

Sourced from imagemin-svgo's releases.

v11.0.0

Breaking

  • Require Node.js 18 69d8cea
  • Update svgo from v2 to v3

imagemin/imagemin-svgo@v10.0.1...v11.0.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 8 updates

Bumps the production-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [import-meta-resolve](https://github.com/wooorm/import-meta-resolve) | `4.0.0` | `4.1.0` |
| [joi](https://github.com/hapijs/joi) | `17.13.0` | `17.13.1` |
| [csv-parse](https://github.com/adaltas/node-csv/tree/HEAD/packages/csv-parse) | `5.5.5` | `5.5.6` |
| [terser](https://github.com/terser/terser) | `5.30.4` | `5.31.0` |
| [lightningcss](https://github.com/parcel-bundler/lightningcss) | `1.24.1` | `1.25.0` |
| [imagemin](https://github.com/imagemin/imagemin) | `8.0.1` | `9.0.0` |
| [imagemin-pngquant](https://github.com/imagemin/imagemin-pngquant) | `9.0.2` | `10.0.0` |
| [imagemin-svgo](https://github.com/imagemin/imagemin-svgo) | `10.0.1` | `11.0.0` |



Updates `import-meta-resolve` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/wooorm/import-meta-resolve/releases)
- [Commits](wooorm/import-meta-resolve@4.0.0...4.1.0)

Updates `joi` from 17.13.0 to 17.13.1
- [Commits](hapijs/joi@v17.13.0...v17.13.1)

Updates `csv-parse` from 5.5.5 to 5.5.6
- [Changelog](https://github.com/adaltas/node-csv/blob/master/packages/csv-parse/CHANGELOG.md)
- [Commits](https://github.com/adaltas/node-csv/commits/csv-parse@5.5.6/packages/csv-parse)

Updates `terser` from 5.30.4 to 5.31.0
- [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md)
- [Commits](terser/terser@v5.30.4...v5.31.0)

Updates `lightningcss` from 1.24.1 to 1.25.0
- [Release notes](https://github.com/parcel-bundler/lightningcss/releases)
- [Commits](parcel-bundler/lightningcss@v1.24.1...v1.25.0)

Updates `imagemin` from 8.0.1 to 9.0.0
- [Release notes](https://github.com/imagemin/imagemin/releases)
- [Commits](imagemin/imagemin@v8.0.1...v9.0.0)

Updates `imagemin-pngquant` from 9.0.2 to 10.0.0
- [Release notes](https://github.com/imagemin/imagemin-pngquant/releases)
- [Commits](imagemin/imagemin-pngquant@v9.0.2...v10.0.0)

Updates `imagemin-svgo` from 10.0.1 to 11.0.0
- [Release notes](https://github.com/imagemin/imagemin-svgo/releases)
- [Commits](imagemin/imagemin-svgo@v10.0.1...v11.0.0)

---
updated-dependencies:
- dependency-name: import-meta-resolve
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: joi
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: csv-parse
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: terser
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: lightningcss
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: imagemin
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: imagemin-pngquant
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: imagemin-svgo
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 20, 2024
Copy link

vercel bot commented May 20, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
magefront ✅ Ready (Inspect) Visit Preview 💬 Add feedback May 20, 2024 3:57am

Copy link

changeset-bot bot commented May 20, 2024

⚠️ No Changeset found

Latest commit: 54e0b10

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Copy link
Contributor Author

dependabot bot commented on behalf of github May 27, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this May 27, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/production-dependencies-1c3e19a578 branch May 27, 2024 03:09
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants