search

tailwindlabs / heroicons

A set of free MIT-licensed high-quality SVG icons for UI development.
https://heroicons.com
MIT License
21.03k stars 1.27k forks source link

Bump nth-check and svgo #847

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps nth-check to 2.1.1 and updates ancestor dependency svgo. These dependencies need to be updated together.

Updates nth-check from 1.0.2 to 2.1.1

Release notes

Sourced from nth-check's releases.

v2.1.1

  • The ESM code had some issues that are now fixed aeeb067

https://github.com/fb55/nth-check/compare/v2.1.0...v2.1.1

v2.1.0

What's Changed

  • nth-check is now a dual CommonJS and ESM module fb55/nth-check#206
  • With the new sequence and generate methods, it is now possible to generate a sequence of indices for a given formula fb55/nth-check#207

Full Changelog: https://github.com/fb55/nth-check/compare/v2.0.1...v2.1.0

v2.0.1

Fixes:

  • Replace regex with hand-rolled parser for nth-expressions (#9) 9894c1d
    • Ensures parsing will always have linear time complexity.

Internal:

  • chore(ci): Use GitHub Actions, Dependabot (#10) e02b4dd
  • Bump dependencies

https://github.com/fb55/nth-check/compare/v2.0.0...v2.0.1

v2.0.0

  • Port module to TS, Jest, ESLint

Breaking:

  • The main export is now a default export.
  • The module now throws regular Errors on invalid selectors instead of SyntaxErrors.
Commits


Updates svgo from 1.3.2 to 2.8.0

Release notes

Sourced from svgo's releases.

v2.8.0

If you enjoy SVGO and would like to support our work, consider sponsoring us directly via our OpenCollective.

Join us in our discord

Features and bug fixes

  • added --no-color flag for testing purposes but you may find it useful (svg/svgo#1588)
  • handle url() in style attributes properly (svg/svgo#1592)
  • removeXMLNS plugin now removes xmlns:xlink attribute (svg/svgo#1508)
  • load .cjs configuration only with require to fix segfaults in linux (svg/svgo#1605)

Refactorings

  • simplified and covered with types svg stringifier (svg/svgo#1593)
  • migrated to visitor api and covered with types removeEmptyAttrs plugin (svg/svgo#1594)
  • migrated to visitor api and covered with types inlineStyles plugin (svg/svgo#1601)
  • migrated to picocolors (svg/svgo#1606)

DX

I found some users are trying to enable plugins which are not part of default preset, for example

{
  name: 'preset-default',
  params: {
    overrides: {
      cleanupListOfValues: true
    }
  }
}

To fix this I made docs more concrete about plugin (https://github.com/svg/svgo/commit/5165ccb9d1f116b26a30a020e65aadd666012cb1) and introduced a warning when true is specified in overrides (https://github.com/svg/svgo/commit/cb7e9be623b6e2fbbfcb9b67c4c85131e1477925). Please give us feedback if you still have issues.

Thanks to @​IlyaSkriblovsky, @​devongovett, @​matheus1lva, @​omgovich, @​renatorib and @​TrySound

v2.7.0

If you enjoy SVGO and would like to support our work, consider sponsoring us directly via our OpenCollective.

Join us in our discord

ES Modules support

This release adds support for es modules in svgo.config.js when package.json type field is "module". For projects with mixed cjs and esm svgo.config.mjs and svgo.config.cjs are also supported as fallback.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by trysound, a new releaser for svgo since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/tailwindlabs/heroicons/network/alerts).
thecrypticace commented 1 year ago

Migrating to svgo2 needs to be considered with a bit more scrutiny on the output. The precision plugin is disabled by default but when enabled the output is changing the path in some strange ways though it doesn't appear to materially affect the result at a glance. The size of each path is marginally larger though because of this.

Screen Shot 2022-10-06 at 11 39 42
dependabot[bot] commented 1 year ago

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.