search

nextstrain / auspice

Web app for visualizing pathogen evolution
https://docs.nextstrain.org/projects/auspice/
GNU Affero General Public License v3.0
290 stars 159 forks source link

Bump postcss and css-loader #1745

Open dependabot[bot] opened 5 months ago

dependabot[bot] commented 5 months ago

Bumps postcss to 8.4.33 and updates ancestor dependency css-loader. These dependencies need to be updated together.

Updates postcss from 7.0.39 to 8.4.33

Release notes

Sourced from postcss's releases.

8.4.33

8.4.32

8.4.31

  • Fixed \r parsing to fix CVE-2023-44270.

8.4.30

8.4.29

8.4.28

  • Fixed Root.source.end for better source map (by @​romainmenke).
  • Fixed Result.root types when process() has no parser.

8.4.27

  • Fixed Container clone methods types.

8.4.26

  • Fixed clone methods types.

8.4.25

8.4.24

  • Fixed Plugin types.

8.4.23

  • Fixed warnings in TypeDoc.

8.4.22

8.4.21

8.4.20

  • Fixed source map generation for childless at-rules like @layer.

8.4.19

  • Fixed whitespace preserving after AST transformations (by @​romainmenke).

8.4.18

... (truncated)

Changelog

Sourced from postcss's changelog.

8.4.33

  • Fixed NoWorkResult behavior difference with normal mode (by Romain Menke).
  • Fixed NoWorkResult usage conditions (by @​ahmdammarr).

8.4.32

  • Fixed postcss().process() types (by Andrew Ferreira).

8.4.31

  • Fixed \r parsing to fix CVE-2023-44270.

8.4.30

  • Improved source map performance (by Romain Menke).

8.4.29

  • Fixed Node#source.offset (by Ido Rosenthal).
  • Fixed docs (by Christian Oliff).

8.4.28

  • Fixed Root.source.end for better source map (by Romain Menke).
  • Fixed Result.root types when process() has no parser.

8.4.27

  • Fixed Container clone methods types.

8.4.26

  • Fixed clone methods types.

8.4.25

8.4.24

  • Fixed Plugin types.

8.4.23

  • Fixed warnings in TypeDoc.

8.4.22

  • Fixed TypeScript support with node16 (by Remco Haszing).

8.4.21

  • Fixed Input#error types (by Aleks Hudochenkov).

8.4.20

  • Fixed source map generation for childless at-rules like @layer.

8.4.19

  • Fixed whitespace preserving after AST transformations (by Romain Menke).

8.4.18

... (truncated)

Commits
  • ae57d83 Release 8.4.33 version
  • 2e9d029 Update dependencies
  • 892b269 Update size limit for new metric on brotli
  • f2e7a9f Merge pull request #1908 from ahmdammarr/refactor/safe-check-for-NoWorkResult
  • c751e11 Merge pull request #1909 from romainmenke/no-work-result-vs-lazy-result--inve...
  • 3c2fa2a fix
  • a4626e9 failing test
  • c37346d refactor: check all falsy conditions of plugins and opts before returning NoW...
  • a0d9f10 Release 8.4.32 version
  • 0146b3e Add Node.js 21 to CI
  • Additional commits viewable in compare view


Updates css-loader from 3.4.0 to 6.10.0

Release notes

Sourced from css-loader's releases.

v6.10.0

6.10.0 (2024-01-30)

Features

  • add @rspack/core as an optional peer dependency (#1568) (3924679)
  • pass the resourceQuery and resourceFragment to the auto and mode callback (#1569) (d641c4d)
  • support named exports with any characters (6f43929)

v6.9.1

6.9.1 (2024-01-18)

Bug Fixes

  • css nesting support
  • @scope at-rule support

v6.9.0

6.9.0 (2024-01-09)

Features

  • updated generateExportEntry to expose node details (#1556) (05002f3)

Bug Fixes

v6.8.1

6.8.1 (2023-05-28)

Bug Fixes

  • use cause for original errors and warnings (#1526) (ae3d8ae)

v6.8.0

6.8.0 (2023-05-27)

Features

  • use template literal when it possible to prevent Maximum call stack size exceeded (#1525) (6eb5661)

Bug Fixes

... (truncated)

Changelog

Sourced from css-loader's changelog.

6.10.0 (2024-01-30)

Features

  • add @rspack/core as an optional peer dependency (#1568) (3924679)
  • pass the resourceQuery and resourceFragment to the auto and mode callback (#1569) (d641c4d)
  • support named exports with any characters (6f43929)

6.9.1 (2024-01-18)

Bug Fixes

  • css nesting support
  • @scope at-rule support

6.9.0 (2024-01-09)

Features

  • updated generateExportEntry to expose node details (#1556) (05002f3)

Bug Fixes

6.8.1 (2023-05-28)

Bug Fixes

  • use cause for original errors and warnings (#1526) (ae3d8ae)

6.8.0 (2023-05-27)

Features

  • use template literal when it possible to prevent Maximum call stack size exceeded (#1525) (6eb5661)

Bug Fixes

6.7.4 (2023-05-19)

... (truncated)

Commits
  • 7bbb57c chore(release): 6.10.0
  • d641c4d feat: pass the resourceQuery and resourceFragment to the auto and `mode...
  • 3924679 feat: add @rspack/core as an optional peer dependency (#1568)
  • 6f43929 feat: support named exports with any characters
  • f9192ee chore(release): 6.9.1
  • 6515be0 fix: css nesting support and @scope at-rule
  • 0751f7a docs: update (#1562)
  • 2d17551 chore(release): 6.9.0
  • e38116f chore: update dependencies to latest version (#1561)
  • d09ff73 test: getLocalIdent and node type (#1560)
  • Additional commits viewable in compare view


You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/nextstrain/auspice/network/alerts).

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.