chore(deps): update dependency cssnano to v7 (2.x) #26930
Conversation
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
|
|
renovate
bot
force-pushed
the
renovate/2.x-cssnano-7.x
branch
from
5f25bd5
to
d15a704
Compare
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## 2.x #26930 +/- ##
=======================================
Coverage 66.22% 66.22%
=======================================
Files 93 93
Lines 4121 4121
Branches 1169 1169
=======================================
Hits 2729 2729
Misses 1126 1126
Partials 266 266
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
renovate
bot
force-pushed
the
renovate/2.x-cssnano-7.x
branch
from
d15a704
to
ee9dd86
Compare
renovate
bot
force-pushed
the
renovate/2.x-cssnano-7.x
branch
from
ee9dd86
to
111060e
Compare
|
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎ To accept the risk, merge this PR and you will not be notified again.
Next stepsWhat is an install script?Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts. Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead. Take a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with
|
renovate
bot
force-pushed
the
renovate/2.x-cssnano-7.x
branch
3 times, most recently
from
7b310da
to
d04af15
Compare
renovate
bot
force-pushed
the
renovate/2.x-cssnano-7.x
branch
4 times, most recently
from
67a4672
to
596444a
Compare
renovate
bot
force-pushed
the
renovate/2.x-cssnano-7.x
branch
from
596444a
to
9a2f590
Compare
This PR contains the following updates:
^6.1.2->^7.0.1Release Notes
cssnano/cssnano (cssnano)
v7.0.1: v7.0.1Compare Source
Patch changes
Update postcss-calc dependency to latest version
v7.0.0: v7.0.0Compare Source
Breaking changes
This release drops official support for unmaintained long term support Node.js releases 14 and 16. It also drops support for non-long term support releases 19 and 21 and add support for Node.js 22. Only the
package.jsonenginesfield has been updated. The code should otherwise be identical to the previous 6.1.2 release.Ensuring support for older Node.js had become difficult as the GitHub actions runners are not available for the latest MacOS and recent pnpm also could not run on CI any more.
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.