Skip to content

Bump svgo and cssnano - #67

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-b2006cb08e
Open

Bump svgo and cssnano#67
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-b2006cb08e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown

Bumps svgo to 0.7.2 and updates ancestor dependency cssnano. These dependencies need to be updated together.

Updates svgo from 1.3.2 to 0.7.2

Changelog

Sourced from svgo's changelog.

[ > ] 0.7.2 / 29.01.2017

  • Extended currentColor match conditions (string, rx, bool) (by @​AlimovSV)
  • Fixed removing <animate> in <stop>.
  • Fixed removing same transform in inner element in removeUnknownsAndDefaults.
  • Fixed collapsing groups with same non-inheritable attribue.
  • Corrected removing of leading zero in case of exponential notation.

[ > ] 0.7.1 / 27.09.2016

  • Reverted the requirement of Node.js to version 0.10.
  • Added addAttributesToSVGElement to the default config to allow using it with --enable option.
  • Added korean translation of “How it works” doc (by @​primeiros).

[ > ] 0.7.0 / 25.08.2016

  • Required Node.js version has increased to 0.12.
  • New plugins: removeElementsByAttr (by IDs or classes) by @​elidupuis, addAttributesToSVGElement by @​gjjones, removeXMLNS (for SVG inlining) by @​ricardobeat.
  • Tests now correctly pass in Windows with CRLF line endings. Pretty print now accounts system line endings.
  • Fixed bugs with collapsing groups with masks and transforms in collapseGroups.
  • Fixed bugs with erroneous removing IDs in cleanupIDs.
  • Improved attributes sorting in sortAttrs by @​darktrojan.
  • addClassesToSVGElement no more repeats classes (by @​ricardobeat).

[ > ] 0.6.6 / 25.04.2016

  • Corrected CSSO API usage

[ > ] 0.6.5 / 25.04.2016

  • Extra content inserted by editors are now being removed within <foreignObject> as well thus fixing bug “Namespace prefix … is not defined“ after applying SVGO.
  • Doctype with entities declartion is now also being removed since svgo correctly parses them starting from the version 0.6.2.
  • Corrected moveGroupAttrsToElems not to move attributes to g content if it's referenced (has an id).
  • collapseGroups now don't collapse a group if it has an animated attribute (SMIL).

[ > ] 0.6.4 / 05.04.2016

  • Fixed bug in “convertStyleToAttrs” plugin with converting styling properties to non-existent attributes (which are normally removed later by removeUnknownsAndDefaults).
  • Added --indent option to style pretty-printed SVG. (e.g. --indent 2) (by @​scurker).
  • Added currentColor param to convertColors plugin for converting values like fill and stroke to currentColor (by @​scurker).
  • Bumped CSSO to the current version and used its new shiny API (thanks to @​lahmatiy).

[ > ] 0.6.3 / 20.03.2016

  • Smart rounding (introduced in 0.4.5) now applies only when rounding is needed, thus making subsequent passes more stable.
  • Fixed regression in converting curves to arcs.
  • xlink:href references are now being checked by local name href, thus correctly working with another namespace prefix.
  • Fixed id removing with disabled plugins/convertStyleToAttrs.js.

[ > ] 0.6.2 / 08.03.2016

  • Better error handling and messaging improvements.
  • SVG files with XML entities (e.g. from Adobe Illustrator) are now correctly being parsed.
  • Fixed error on converting curves to arcs.
  • Corrected rounding in subsequent passes with --multipass option.
  • Data URI option now handles charset (by @​holymonson)

... (truncated)

Commits
  • ad05378 update russian readme to latest changes
  • ec306c9 0.7.2
  • e582927 update docs
  • 085a4ef Merge pull request #654 from Zearin/patch-1
  • c8e9b45 Use GFM tables for README’s plugins list
  • 443f4bd Merge pull request #641 from elrumordelaluz/master
  • e57ecbd Update CLI help
  • a2a0a1e Microoptimize removing space before minus
  • b6e92f4 Correct leading zero removing in case of exponential notation. Fix #551
  • 11a6068 Collapse groups with non-inherited attr test improvement
  • Additional commits viewable in compare view

Updates cssnano from 3.10.0 to 8.0.2

Release notes

Sourced from cssnano's releases.

v8.0.2

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.1...cssnano@8.0.2

v8.0.1

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.0...cssnano@8.0.1

v8.0.0

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.9...cssnano@8.0.0

v7.1.9

Bug Fixes

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.8...cssnano@7.1.9

v7.1.8

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.7...cssnano@7.1.8

v.7.1.7

This release is idnetical to the previous one, but is being published to ensure that the latest versions of postcss-normalize-repeat-style and postcss-normalize-positions are uploaded to the npm registry.

... (truncated)

Commits
  • 185e1c7 Publish cssnano 8.0.2
  • 2ce8c2d chore: update the postcs peer dependency
  • 99bd9c1 docs: update website dependencies
  • 2ca8d4a chore: update development deps
  • b245a0b fix: update caniuse-api
  • 3bf3f4d chore: update postcss-selector-parser
  • 7343c87 fix: preserve apostrophes in svg data uris (#1819)
  • 964b9db chore(util): add benchmark + cpuprofile tooling (#1812)
  • 54a8db2 Include postcss-discard-overridden types in package
  • e0e39ae perf(postcss-merge-longhand): skip processors with no relevant decls
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for cssnano since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [svgo](https://github.com/svg/svgo) to 0.7.2 and updates ancestor dependency [cssnano](https://github.com/cssnano/cssnano). These dependencies need to be updated together.


Updates `svgo` from 1.3.2 to 0.7.2
- [Release notes](https://github.com/svg/svgo/releases)
- [Changelog](https://github.com/svg/svgo/blob/v0.7.2/CHANGELOG.md)
- [Commits](svg/svgo@v1.3.2...v0.7.2)

Updates `cssnano` from 3.10.0 to 8.0.2
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/v3.10.0...cssnano@8.0.2)

---
updated-dependencies:
- dependency-name: svgo
  dependency-version: 0.7.2
  dependency-type: indirect
- dependency-name: cssnano
  dependency-version: 8.0.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 24, 2026
@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant