Skip to content

Conversation

dependabot-preview[bot]
Copy link

Bumps clean-css from 4.1.9 to 4.2.2.

Changelog

Sourced from clean-css's changelog.

4.2.2 / 2020-01-25

  • Fixed error when property block has no value.
  • Fixed issue #1077 - local fonts with color in name.
  • Fixed issue #1082 - correctly convert colors if alpha >= 1.
  • Fixed issue #1085 - prevent unquoting of grid elements.

4.2.1 / 2018-08-07

  • Fixes giving breakWith option via a string.

4.2.0 / 2018-08-02

  • Adds process method for compatibility with optimize-css-assets-webpack-plugin.
  • Fixed issue #861 - new transition property optimizer.
  • Fixed issue #895 - ignoring specific styles.
  • Fixed issue #947 - selector based filtering.
  • Fixed issue #964 - adds configurable line breaks.
  • Fixed issue #986 - level 2 optimizations and CSS 4 colors.
  • Fixed issue #1000 - carriage return handling in tokenizer.
  • Fixed issue #1038 - font-variation-settings quoting.
  • Fixes ReDOS vulnerabilities in validator code.

4.1.11 / 2018-03-06

  • Backports fixes to ReDOS vulnerabilities in validator code.

4.1.10 / 2018-03-05

  • Fixed issue #988 - edge case in dropping default animation-duration.
  • Fixed issue #989 - edge case in removing unused at rules.
  • Fixed issue #1001 - corrupted tokenizer state.
  • Fixed issue #1006 - edge case in handling invalid source maps.
  • Fixed issue #1008 - edge case in breaking up font shorthand.
Commits
  • 58d80f8 Version 4.2.2.
  • e79454c Adds missing changelog entries.
  • e1410e4 fix(colors): convert rgba/hsla to rgb/hsl if opacity is >= 1 (#1083)
  • 9b1ed5b Prevent unquoting on grid elements (#1085)
  • 31379cd Fix local fonts with colors in name (#1077)
  • da25f4f Prevent error if property block has no value (level 0) (#1061)
  • b01dd75 Bumps web interface to version 4.2.1.
  • 87a8722 Version 4.2.1.
  • b7da0d1 Fixes giving breakWith option via a string.
  • e14931a Bumps web interface to version 4.2.0.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Pull request limits (per update run and/or open at any time)
  • Automerge options (never/patch/minor, and dev/runtime dependencies)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

@dependabot-preview dependabot-preview bot added the dependencies Pull requests that update a dependency file label Jan 27, 2020
@dependabot-preview
Copy link
Author

Superseded by #99.

@dependabot-preview dependabot-preview bot deleted the dependabot/npm_and_yarn/clean-css-4.2.2 branch January 29, 2020 04:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants