build(deps): bump the dependecies group across 1 directory with 6 updates #146

dependabot · 2025-01-20T11:27:37Z

Bumps the dependecies group with 6 updates in the / directory:

Package	From	To
@fortawesome/fontawesome-free	`6.5.2`	`6.7.2`
@primer/css	`21.3.4`	`21.5.1`
autoprefixer	`10.4.19`	`10.4.20`
dompurify	`3.1.5`	`3.2.3`
postcss	`8.4.39`	`8.5.1`
sass	`1.77.6`	`1.83.4`

Updates @fortawesome/fontawesome-free from 6.5.2 to 6.7.2

Release notes

Sourced from @fortawesome/fontawesome-free's releases.

Release 6.7.2

Change log available at https://fontawesome.com/docs/changelog/

Release 6.7.1

Change log available at https://fontawesome.com/docs/changelog/

Release 6.7.0

Change log available at https://fontawesome.com/docs/changelog/

Release 6.6.0

Change log available at https://fontawesome.com/docs/changelog/

Commits

af62053 Release 6.7.2 (#20503)
d19ab26 Removed unnecessary 'and' from README.md for better clarity text (#20432)
3447c58 Release 6.7.1 (#20426)
a03a91d Release 6.7.0 (#20418)
37eff7f Release 6.6.0 (#20295)
138f8c3 Update 000_icon_request.yml
05235ab Updating Icon Request Template (#20275)
See full diff in compare view

Updates @primer/css from 21.3.4 to 21.5.1

Release notes

Sourced from @primer/css's releases.

v21.5.1

Patch Changes

#2727 7d4cd40 Thanks @kawakamimoeki! - Removed .css extension from @import and modified @primer/primitives to be output as Sass code.

#2728 7eaba91 Thanks @lukasoppermann! - Update primer/primitives to allow for version 9 and 10

#2680 1eb467e Thanks @robinwhittleton! - Use tabular numbers in tables

v21.5.0

Minor Changes

#2724 30d144b Thanks @camertron! - Move prod @primer/* dependencies to dev

v21.4.0

Minor Changes

#2691 5097430 Thanks @dylanatsmith! - Remove background behind images in markdown-body

Patch Changes

#2710 3017831 Thanks @smockle! - Replace deprecated CSS properties in '.sr-only'

v21.3.6

Patch Changes

#2624 7e62532 Thanks @sideshowbarker! - drop “display: none” from details element contents styling

v21.3.5

Patch Changes

#2657 b87c379 Thanks @jonrohan! - Import primitives/index.scss in the main primer.css file.

Changelog

Sourced from @primer/css's changelog.

21.5.1

Patch Changes

#2727 7d4cd40 Thanks @kawakamimoeki! - Removed .css extension from @import and modified @primer/primitives to be output as Sass code.

#2728 7eaba91 Thanks @lukasoppermann! - Update primer/primitives to allow for version 9 and 10

#2680 1eb467e Thanks @robinwhittleton! - Use tabular numbers in tables

21.5.0

Minor Changes

#2724 30d144b Thanks @camertron! - Move prod @primer/* dependencies to dev

21.4.0

Minor Changes

#2691 5097430 Thanks @dylanatsmith! - Remove background behind images in markdown-body

Patch Changes

#2710 3017831 Thanks @smockle! - Replace deprecated CSS properties in '.sr-only'

21.3.6

Patch Changes

#2624 7e62532 Thanks @sideshowbarker! - drop “display: none” from details element contents styling

21.3.5

Patch Changes

#2657 b87c379 Thanks @jonrohan! - Import primitives/index.scss in the main primer.css file.

Commits

13be44c Version Packages (#2730)
1eb467e Use tabular numbers in tables (#2680)
7d4cd40 Import CSS files directly into Sass (#2727)
d91ba9c Bump the all group with 2 updates (#2732)
0b44d0a Bump eslint from 9.13.0 to 9.14.0 in the all group (#2731)
7eaba91 update primitives version to allow for 9 and 10 (#2728)
0cc86c8 Bump eslint from 9.12.0 to 9.13.0 in the all group (#2726)
a3f2b01 Version Packages (#2725)
30d144b Move prod @primer/* dependencies to dev (#2724)
dfc7913 Bump markdown-to-jsx from 7.2.1 to 7.5.0 in /docs (#2723)
Additional commits viewable in compare view

Updates autoprefixer from 10.4.19 to 10.4.20

Release notes

Sourced from autoprefixer's releases.

10.4.20

Fixed fit-content prefix for Firefox.

Changelog

Sourced from autoprefixer's changelog.

10.4.20

Fixed fit-content prefix for Firefox.

Commits

dae6eb4 Release 10.4.20 version
ee43652 Fix fit-content for Firefox
cf80824 Update dependencies
49d5ec6 Move to pnpm 9
See full diff in compare view

Updates dompurify from 3.1.5 to 3.2.3

Release notes

Sourced from dompurify's releases.

DOMPurify 3.2.3

Fixed two conditional sanitizer bypasses discovered by @parrot409 and @Slonser

Updated the attribute clobbering checks to prevent future bypasses, thanks @parrot409

DOMPurify 3.2.2

Fixed a possible bypass in case a rather specific config for custom elements is set, thanks @yaniv-git

Fixed several minor issues with the type definitions, thanks again @reduckted

Fixed a minor issue with the types reference for trusted types, thanks @reduckted

Fixed a minor problem with the template detection regex on some systems, thanks @svdb99

DOMPurify 3.2.1

Fixed several minor issues with the type definitions, thanks @reduckted @ghiscoding @asamuzaK @MiniDigger

Fixed an issue with non-minified dist files and order of imports, thanks @reduckted

DOMPurify 3.2.0

Added type declarations, thanks @reduckted , @philmayfield, @aloisklink, @ssi02014 and others

Fixed a minor issue with the handling of hooks, thanks @kevin-mizu

DOMPurify 3.1.7

Fixed an issue with comment detection and possible bypasses with specific config settings, thanks @masatokinugawa

Fixed several smaller typos in documentation and test & build files, thanks @christianhg

Added better support for Angular compiler, thanks @jeroen1602

Added several new attributes to HTML and SVG allow-list, thanks @Gigabyte5671 and @Rotzbua

Removed the foreignObject element from the list of HTML entry-points, thanks @masatokinugawa

Bumped several dependencies to be more up to date

DOMPurify 3.1.6

Fixed an issue with the execution logic of attribute hooks to prevent bypasses, thanks @kevin-mizu

Fixed an issue with element removal leading to uncaught errors through DOM Clobbering, thanks @realansgar

Fixed a minor problem with the bower file pointing to the wrong dist path

Fixed several minor typos in docs, comments and comment blocks, thanks @Rotzbua

Updated several development dependencies

Commits

f1106aa chore: Preparing 3.2.3 release
9c71e04 fix: Added clobbering check for sanitizeAttribute to prevent an error
c183cd6 fix: Fixed a config-dependent bypass caused by skipped attribute checks, than...
6e76ece fix: Fixed a config-dependent bypass relating to data-attributes, thanks @Slo...
c3879a5 Merge pull request #1041 from CoryHrycko/patch-1
0e1c724 Update tags.ts
8513afd Update README.md
b883b9e Update README.md
3b4b5e9 Merge pull request #1037 from svdb99/main
b9e9087 Fix #1033
Additional commits viewable in compare view

Updates postcss from 8.4.39 to 8.5.1

Release notes

Sourced from postcss's releases.

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@romainmenke during his work on Stylelint added Input#document in additional to Input#css.
root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"
Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

Tidelift with a Spotify-like subscription model supporting all projects from your lock file.

Direct donations at GitHub Sponsors or Open Collective.

8.4.49

Fixed custom syntax without source.offset (by @romainmenke).

8.4.48

Fixed position calculation in error/warnings methods (by @romainmenke).

8.4.47

Removed debug code.

8.4.46

Fixed Cannot read properties of undefined (reading 'before').

8.4.45

Removed unnecessary fix which could lead to infinite loop.

8.4.44

Another way to fix markClean is not a function error.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

Added Input#document for sources like CSS-in-JS or HTML (by @romainmenke).

8.4.49

Fixed custom syntax without source.offset (by @romainmenke).

8.4.48

Fixed position calculation in error/warnings methods (by @romainmenke).

8.4.47

Removed debug code.

8.4.46

Fixed Cannot read properties of undefined (reading 'before').

8.4.45

Removed unnecessary fix which could lead to infinite loop.

8.4.44

Another way to fix markClean is not a function error.

8.4.43

Fixed markClean is not a function error.

8.4.42

Fixed CSS syntax error on long minified files (by @varpstar).

8.4.41

Fixed types (by @nex3 and @querkmachine).

Cleaned up RegExps (by @bluwy).

8.4.40

Moved to getter/setter in nodes types to help Sass team (by @nex3).

Commits

7b02c75 Release 8.5.1 version
4c15339 Update dependencies
7efe91e Improve backwards compat for Input#document (#2000)
6873270 Release 8.5 version
4223bb9 Fix 80 columns limit
80e2401 Add Input#document (#1996)
6f86879 Update dependencies
85cbbec Fix pnpm version on CI
76caa57 Update dependencies
46ff246 Move to pnpm 10
Additional commits viewable in compare view

Updates sass from 1.77.6 to 1.83.4

Release notes

Sourced from sass's releases.

Dart Sass 1.83.4

To install Sass 1.83.4, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.83.3

To install Sass 1.83.3, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.83.2

To install Sass 1.83.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Properly display deprecation IDs for the JS Sass API.

Don't display deprecation IDs for user-defined deprecations.

See the full changelog for changes in earlier releases.

Dart Sass 1.83.1

To install Sass 1.83.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Fix a bug where --quiet-deps would get deactivated for @content blocks, even when those blocks were entirely contained within dependencies.

Include deprecation IDs in deprecation warnings to make it easier to determine what to pass to --silence-deprecation or --fatal-deprecation.

... (truncated)

Changelog

Sourced from sass's changelog.

1.83.4

No user-visible changes.

1.83.3

No user-visible changes.

1.83.2

Properly display deprecation IDs for the JS Sass API.

Don't display deprecation IDs for user-defined deprecations.

1.83.1

Fix a bug where --quiet-deps would get deactivated for @content blocks, even when those blocks were entirely contained within dependencies.

Include deprecation IDs in deprecation warnings to make it easier to determine what to pass to --silence-deprecation or --fatal-deprecation.

1.83.0

Allow trailing commas in all argument and parameter lists.

1.82.0

Command-Line Interface

Improve --watch mode reliability when making multiple changes at once, such as checking out a different Git branch.

Parse the calc-size() function as a calculation now that it's supported in some browsers.

Dart API

Add a SassCalculation.calcSize() function.

1.81.1

No user-visible changes.

1.81.0

Fix a few cases where deprecation warnings weren't being emitted for global built-in functions whose names overlap with CSS calculations.

Add support for the CSS round() calculation with a single argument, as long

... (truncated)

Commits

89a5394 Fix more bugs in the sass-parser release process (#2491)
46686ed Merge pull request #2490 from sass/sass-parser-release
1261767 Use a file: dependency for local Sass development
173f39b Use the Dart Sass version for the sass-parser dependency
ddb14b2 Fix deprecation ID displays in JS mode (#2483)
b12b508 Compile sass-parser before deploying (#2489)
b19b57f Merge pull request #2478 from sass/if
23ff19d Merge branch 'main' into if
8818d93 Properly override the sass-parser dependency on sass during release (#2487)
adb7016 Merge pull request #2488 from sass/sdk-formatter
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates Bumps the dependecies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@fortawesome/fontawesome-free](https://github.com/FortAwesome/Font-Awesome) | `6.5.2` | `6.7.2` | | [@primer/css](https://github.com/primer/css) | `21.3.4` | `21.5.1` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.19` | `10.4.20` | | [dompurify](https://github.com/cure53/DOMPurify) | `3.1.5` | `3.2.3` | | [postcss](https://github.com/postcss/postcss) | `8.4.39` | `8.5.1` | | [sass](https://github.com/sass/dart-sass) | `1.77.6` | `1.83.4` | Updates `@fortawesome/fontawesome-free` from 6.5.2 to 6.7.2 - [Release notes](https://github.com/FortAwesome/Font-Awesome/releases) - [Changelog](https://github.com/FortAwesome/Font-Awesome/blob/6.x/CHANGELOG.md) - [Commits](FortAwesome/Font-Awesome@6.5.2...6.7.2) Updates `@primer/css` from 21.3.4 to 21.5.1 - [Release notes](https://github.com/primer/css/releases) - [Changelog](https://github.com/primer/css/blob/main/CHANGELOG.md) - [Commits](primer/css@v21.3.4...v21.5.1) Updates `autoprefixer` from 10.4.19 to 10.4.20 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.4.19...10.4.20) Updates `dompurify` from 3.1.5 to 3.2.3 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.1.5...3.2.3) Updates `postcss` from 8.4.39 to 8.5.1 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.39...8.5.1) Updates `sass` from 1.77.6 to 1.83.4 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.77.6...1.83.4) --- updated-dependencies: - dependency-name: "@fortawesome/fontawesome-free" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependecies - dependency-name: "@primer/css" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependecies - dependency-name: autoprefixer dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependecies - dependency-name: dompurify dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependecies - dependency-name: postcss dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependecies - dependency-name: sass dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependecies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-02-03T11:32:27Z

Superseded by #149.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 20, 2025

dependabot bot mentioned this pull request Jan 20, 2025

build(deps): bump the dependecies group across 1 directory with 6 updates #144

Closed

dependabot bot force-pushed the dependabot/npm_and_yarn/dependecies-3e298b2392 branch from a91033f to 6b724cf Compare January 27, 2025 11:47

dependabot bot closed this Feb 3, 2025

dependabot bot deleted the dependabot/npm_and_yarn/dependecies-3e298b2392 branch February 3, 2025 11:32

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the dependecies group across 1 directory with 6 updates #146

build(deps): bump the dependecies group across 1 directory with 6 updates #146

dependabot bot commented on behalf of github Jan 20, 2025 •

edited

Loading

dependabot bot commented on behalf of github Feb 3, 2025

build(deps): bump the dependecies group across 1 directory with 6 updates #146

build(deps): bump the dependecies group across 1 directory with 6 updates #146

Conversation

dependabot bot commented on behalf of github Jan 20, 2025 • edited Loading

Release 6.7.2

Release 6.7.1

Release 6.7.0

Release 6.6.0

v21.5.1

Patch Changes

v21.5.0

Minor Changes

v21.4.0

Minor Changes

Patch Changes

v21.3.6

Patch Changes

v21.3.5

Patch Changes

21.5.1

Patch Changes

21.5.0

Minor Changes

21.4.0

Minor Changes

Patch Changes

21.3.6

Patch Changes

21.3.5

Patch Changes

10.4.20

10.4.20

DOMPurify 3.2.3

DOMPurify 3.2.2

DOMPurify 3.2.1

DOMPurify 3.2.0

DOMPurify 3.1.7

DOMPurify 3.1.6

8.5.1

8.5 “Duke Alloces”

Thanks to Sponsors

8.4.49

8.4.48

8.4.47

8.4.46

8.4.45

8.4.44

8.5.1

8.5 “Duke Alloces”

8.4.49

8.4.48

8.4.47

8.4.46

8.4.45

8.4.44

8.4.43

8.4.42

8.4.41

8.4.40

Dart Sass 1.83.4

Changes

Dart Sass 1.83.3

Changes

Dart Sass 1.83.2

Changes

Dart Sass 1.83.1

Changes

1.83.4

1.83.3

1.83.2

1.83.1

1.83.0

1.82.0

Command-Line Interface

Dart API

1.81.1

1.81.0

dependabot bot commented on behalf of github Feb 3, 2025

dependabot bot commented on behalf of github Jan 20, 2025 •

edited

Loading