search

composer / satis

Simple static Composer repository generator - For a full private Composer repo use Private Packagist
MIT License
3.14k stars 516 forks source link

Bump the minor-patch group with 10 updates #911

Closed dependabot[bot] closed 3 weeks ago

dependabot[bot] commented 3 weeks ago

Bumps the minor-patch group with 10 updates:

Package From To
sass 1.77.8 1.78.0
@types/node 22.5.2 22.5.4
caniuse-lite 1.0.30001655 1.0.30001659
electron-to-chromium 1.5.13 1.5.18
follow-redirects 1.15.6 1.15.9
launch-editor 2.8.1 2.9.1
picocolors 1.0.1 1.1.0
postcss 8.4.44 8.4.45
source-map-js 1.2.0 1.2.1
yaml 2.5.0 2.5.1

Updates sass from 1.77.8 to 1.78.0

Release notes

Sourced from sass's releases.

Dart Sass 1.78.0

To install Sass 1.78.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • The meta.feature-exists function is now deprecated. This deprecation is named feature-exists.

  • Fix a crash when using @at-root without any queries or children in the indented syntax.

JS API

  • Backport the deprecation options (fatalDeprecations, futureDeprecations, and silenceDeprecations) to the legacy JS API. The legacy JS API is itself deprecated, and you should move off of it if possible, but this will allow users of bundlers and other tools that are still using the legacy API to still control deprecation warnings.

  • Fix a bug where accessing SourceSpan.url would crash when a relative URL was passed to the Sass API.

Embedded Sass

  • Explicitly expose a sass executable from the sass-embedded npm package. This was intended to be included in 1.63.0, but due to the way platform-specific dependency executables are installed it did not work as intended. Now users can run npx sass for local installs or just sass when sass-embedded is installed globally.

  • Add linux-riscv64, linux-musl-riscv64, and android-riscv64 support for the sass-embedded npm package.

  • Fix an edge case where the Dart VM could hang when shutting down when requests were in flight.

  • Fix a race condition where the embedded host could fail to shut down if it was closed around the same time a new compilation was started.

  • Fix a bug where parse-time deprecation warnings could not be controlled by the deprecation options in some circumstances.

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.78.0

  • The meta.feature-exists function is now deprecated. This deprecation is named feature-exists.

  • Fix a crash when using @at-root without any queries or children in the indented syntax.

JS API

  • Backport the deprecation options (fatalDeprecations, futureDeprecations, and silenceDeprecations) to the legacy JS API. The legacy JS API is itself deprecated, and you should move off of it if possible, but this will allow users of bundlers and other tools that are still using the legacy API to still control deprecation warnings.

  • Fix a bug where accessing SourceSpan.url would crash when a relative URL was passed to the Sass API.

Embedded Sass

  • Explicitly expose a sass executable from the sass-embedded npm package. This was intended to be included in 1.63.0, but due to the way platform-specific dependency executables are installed it did not work as intended. Now users can run npx sass for local installs or just sass when sass-embedded is installed globally.

  • Add linux-riscv64, linux-musl-riscv64, and android-riscv64 support for the sass-embedded npm package.

  • Fix an edge case where the Dart VM could hang when shutting down when requests were in flight.

  • Fix a race condition where the embedded host could fail to shut down if it was closed around the same time a new compilation was started.

  • Fix a bug where parse-time deprecation warnings could not be controlled by the deprecation options in some circumstances.

Commits


Updates @types/node from 22.5.2 to 22.5.4

Commits


Updates caniuse-lite from 1.0.30001655 to 1.0.30001659

Commits


Updates electron-to-chromium from 1.5.13 to 1.5.18

Commits


Updates follow-redirects from 1.15.6 to 1.15.9

Commits
  • e4e55c7 Release version 1.15.9 of the npm package.
  • 31a1abf Attempt much more gentle detection.
  • d2aaa97 Fix url field.
  • 62558f0 Release version 1.15.8 of the npm package.
  • a8d1cee Return subtlety.
  • 458ca8e Fix native URL test for Node 20.
  • ca49e44 Handle KeepAlive connections in tests.
  • f3711d7 Test on Node 20 and 22.
  • fda0faf Fix typo.
  • 760757f Release version 1.15.7 of the npm package.
  • Additional commits viewable in compare view


Updates launch-editor from 2.8.1 to 2.9.1

Commits


Updates picocolors from 1.0.1 to 1.1.0

Release notes

Sourced from picocolors's releases.

picocolors 1.1.0

What's new?

  • Added bright color variants #55
Changelog

Sourced from picocolors's changelog.

v1.1.0

  • Added bright color variants (#55)
Commits


Updates postcss from 8.4.44 to 8.4.45

Release notes

Sourced from postcss's releases.

8.4.45

  • Removed unnecessary fix which could lead to infinite loop.
Changelog

Sourced from postcss's changelog.

8.4.45

  • Removed unnecessary fix which could lead to infinite loop.
Commits


Updates source-map-js from 1.2.0 to 1.2.1

Release notes

Sourced from source-map-js's releases.

v1.2.1

Changelog

Sourced from source-map-js's changelog.

1.2.1

Commits


Updates yaml from 2.5.0 to 2.5.1

Release notes

Sourced from yaml's releases.

v2.5.1

  • Include range in flow sequence pair maps (#573)
Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions