BREAKING CHANGE:node-sass has been changed from a direct dependency to a peer dependency. If you are upgrading from v1.x.x, you may need to install it directly in your project using npm install --save node-sass.
Changed node-sass to a peer dependency. This gives you direct control over which version of node-sass you want to use in your project going forward. No more waiting for metalsmith-sass releases!
Upgraded dependencies and resolved vulnerabilities.
Remove test files from npm distribution.
Enable support for all versions of Node.js supported by node-sass. Going forward, whichever version of node-sass you install will determine your Node.js support. See node-sass' version support policy for details.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/williamdingwall/Portfolio/network/alerts).
Bumps semver to 7.5.3 and updates ancestor dependency metalsmith-sass. These dependencies need to be updated together.
Updates
semver
from 5.3.0 to 7.5.3Release notes
Sourced from semver's releases.
... (truncated)
Changelog
Sourced from semver's changelog.
... (truncated)
Commits
7fdf1ef
chore: release 7.5.3bf53dd8
docs: add example for>
comparator (#569)abdd93d
fix: set max lengths in regex for numeric and build identifiers (#571)e7b78de
chore: release 7.5.258c791f
fix: diff when detecting major change from prerelease (#566)5c8efbc
fix: preserve build in raw after inc (#565)717534e
fix: better handling of whitespace (#564)2f738e9
chore: bump@npmcli/template-oss
from 4.14.1 to 4.15.1 (#558)aa016a6
chore: release 7.5.1d30d25a
fix: show type on invalid semver error (#559)Maintainer changes
This version was pushed to npm by npm-cli-ops, a new releaser for semver since your current version.
Updates
metalsmith-sass
from 1.7.0 to 1.8.0Changelog
Sourced from metalsmith-sass's changelog.
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/williamdingwall/Portfolio/network/alerts).