search

scottish-government-design-system / design-system

Design System for the Scottish Government and other Scottish public sector bodies
https://designsystem.gov.scot
MIT License
25 stars 11 forks source link

Bump nth-check and svg-sprite #14

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps nth-check to 2.1.1 and updates ancestor dependency svg-sprite. These dependencies need to be updated together.

Updates nth-check from 1.0.2 to 2.1.1

Release notes

Sourced from nth-check's releases.

v2.1.1

  • The ESM code had some issues that are now fixed aeeb067

https://github.com/fb55/nth-check/compare/v2.1.0...v2.1.1

v2.1.0

What's Changed

  • nth-check is now a dual CommonJS and ESM module fb55/nth-check#206
  • With the new sequence and generate methods, it is now possible to generate a sequence of indices for a given formula fb55/nth-check#207

Full Changelog: https://github.com/fb55/nth-check/compare/v2.0.1...v2.1.0

v2.0.1

Fixes:

  • Replace regex with hand-rolled parser for nth-expressions (#9) 9894c1d
    • Ensures parsing will always have linear time complexity.

Internal:

  • chore(ci): Use GitHub Actions, Dependabot (#10) e02b4dd
  • Bump dependencies

https://github.com/fb55/nth-check/compare/v2.0.0...v2.0.1

v2.0.0

  • Port module to TS, Jest, ESLint

Breaking:

  • The main export is now a default export.
  • The module now throws regular Errors on invalid selectors instead of SyntaxErrors.
Commits


Updates svg-sprite from 1.5.4 to 2.0.0

Release notes

Sourced from svg-sprite's releases.

v2.0.0

Breaking changes

  • Drop Node.js < 12 support
  • Update svgo to v2.x

Changes

  • Add namespaceIDPrefix option
  • Add rel="noopener noreferrer" to all links in generated HTML pages.
  • Add compileAsync method
  • Add support for disabling root viewBox attribute in stack mode
  • Add ID references substitution in href attributes (earlier worked with xlink:href only)
  • Drop Node.js < 12 support
  • Remove the deprecated transform option
  • Add milliseconds in logger's output
  • Change SVG dimensions calculation from PhantomJS to resvg-js, drop PhantomJ direct dependency (replaced with resvg-js)
  • Fix a rare issue with valid SVG files marked as invalid
  • Fix a rare bug with checking if passed config.log option is an instance of winston.Logger
  • Fix missing shape names when adding input files with a relative path
  • Replace cssmin with csso
  • Reduce lodash and other direct dependencies; switch to native JS alternatives

Dev updates

  • Update all devDepedencies
  • Switch to xo for linting
  • Replace mocha, should and c8 with jest
  • Replace PhantomJS and image-diff with playwright and pixelmatch for regression tests
  • A lot of docs tweaks
  • A lot of code refactoring
    • Switch to ES6+ syntax and methods
    • Switch to async methods whenever possible
    • Switch to ES6 classes whenever possible
    • Fix JSDoc documentation
  • Massively improve tests
    • Add regression tests for SVGs without dimensions
    • Add regression tests for all modes
    • Add tests and coverage reports to CI (Linux, Windows support)

Full Changelog: https://github.com/svg-sprite/svg-sprite/compare/v1.5.4...v2.0.0?w=1

v2.0.0-beta7

What's Changed

Full Changelog: https://github.com/svg-sprite/svg-sprite/compare/v2.0.0-beta6...v2.0.0-beta7

v2.0.0-beta6

... (truncated)

Changelog

Sourced from svg-sprite's changelog.

Newer release notes are published on the GitHub release page: https://github.com/svg-sprite/svg-sprite/releases

1.6.0-alpha Maintenance pre-release (2020-01-18)

  • Remove support for Node < 8.0
  • Update dependencies (#306, #310)
  • Update documentation to use updated SVGO plugin name (#275)
  • Move mocha and should dependencies back to devDependencies again (#297, #285)
  • Add built-in templating function to encode hash signs (#294)
  • Fix verbose logging output (#279, #291)
  • Add option to prefix auto-generated namespace IDs (#292, #293)
  • Update preview templates to use SVG checker image (#287)

1.5.0 Maintenance release (2018-09-18)

  • Updated dependencies
  • Dropped support for Node.js < 6.4

1.4.1 Maintenance release (2018-09-18)

1.4.0 Maintenance release (2018-03-17)

  • Added more Node.js versions to Travis instructions
  • Updated dependencies
  • Updated SVGO version & test fixture (#258, #259)
  • Reformatted documentation code examples (#236)
  • Fix JSHint errors (#261)
  • Add support for simple shape ID generator (#240)
  • Add failing CPU detection workaround (#252)
  • Changed SVGO plugin defaults (#249)

1.3.7 Bugfix release (2017-06-01)

  • Updated dependencies
  • Fixed invalid markup in <defs> example html (#229)
  • Fallback for failing CPU detection (#217)
  • Fixed broken SVGO configuration in CLI (#216, #199)
  • Added glob base directory option to CLI (#220)
  • Fixed broken rootAttributes option in CLI (#228)

1.3.6 Bugfix release (2016-08-29)

... (truncated)

Commits
  • d5031aa 2.0.0
  • 9681f5d Update minor dependencies (#733)
  • 5bf5b55 Replaced Error.errno with Error classes (#726)
  • 396d56e Added snapshots testing for regression tests
  • 9527e18 Fixed #288: Preserving @font-face in style defs
  • 697db77 Fixed mock import address
  • 05d5ee8 add tests for SVGShape reference methods
  • 7ccd2d2 add tests for SVGShape._initSVG
  • 6da97fd add tests for SVGShape.distribute
  • 758016b add tests for SVGShape dimension methods
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/scottishgovernment/pattern-library/network/alerts).
dependabot[bot] commented 1 year ago

Looks like these dependencies are up-to-date now, so this is no longer needed.