Skip to content

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Feb 27, 2023

Bumps rollup-plugin-sass from 1.2.9 to 1.12.18.

Release notes

Sourced from rollup-plugin-sass's releases.

Maintenance Release

What's Changed

Maintenance updates:

  • Patched index.test, and scripts/*-downlevel-dts script, to use fs.rm method, if available (later versions of node v18, etc.), else use fs.rmdir one - The latter is deprecated in later versions of node, and will throw errors when removed (in later versions of node).
  • Annotated some @ts-ignores.
  • Added notes on dart-sass legacy API, and legacy importer functions.

Depedabot security updates:

Full Changelog: elycruz/rollup-plugin-sass@1.12.17...1.12.18

Enjoy!

1.12.15

Hi all,

In this release we provide one bug fix (to a recently unnoticed duplicate css bug), and a test suite where we test out, and show, how to extract sass variables to resulting *.js modules.

What's Changed

Full Changelog: elycruz/rollup-plugin-sass@1.12.14...1.12.15

Thank you, and Happy Coding!

  • rollup-plugin-sass admins

Dependency Updates and Watch Feature

In this Release

  • dev-deps - Upgraded packages reported to having vulnerabilities to their safe versions.
  • dev-deps - Updated 'ava' version to allow builds on certain versions (there was a "moderate" vulnerability in ava that was blocking our package from being built on *nix systems see #97 ).
  • dev-deps - Updated typescript version and added 'downlevel-dts' version of the project's '*.d.ts' files (the whole typescript backward compatibility setup is now in place).
  • plugin - Updated our plugin's custom 'sass file' importer to enforce file load order in the defined 'async' importer - the async importer can sometimes load files out of order, which could result in sass content being compiled in incorrect order (when using the plugin's output (as a function) feature) - This enforces the load order by chaining each legacy importer done call to a promise (which chained, and awaited for, on subsequent importer calls).
  • plugin - Merged in changes related to #96 "Add sass files to rollup watch list" - forces files to be added to rollup's watch list, when rollup is running in 'watch' mode.

Merged PRs

... (truncated)

Commits
  • 403b88b maintenance - Added notes about legacy api.
  • bfb8bda maintenance - Removed deprecation warning due to node v18+ deprecating 'fs.rm...
  • 2370810 Merge pull request #110 from elycruz/dependabot/npm_and_yarn/json5-2.2.3
  • abd3288 Bump json5 from 2.2.0 to 2.2.3
  • 2fdde37 Merge pull request #109 from elycruz/dependabot/npm_and_yarn/qs-6.5.3
  • 2199fd9 Bump qs from 6.5.2 to 6.5.3
  • 74cc83d Merge pull request #108 from elycruz/dev
  • 067c850 Updated package version.
  • d9ee5ba Merge branch 'master' of github.com:elycruz/rollup-plugin-sass into dev
  • 2f4fd7a Added .nvmrc file.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [rollup-plugin-sass](https://github.com/differui/rollup-plugin-sass) from 1.2.9 to 1.12.18.
- [Release notes](https://github.com/differui/rollup-plugin-sass/releases)
- [Changelog](https://github.com/elycruz/rollup-plugin-sass/blob/master/CHANGELOG.md)
- [Commits](elycruz/rollup-plugin-sass@1.2.9...1.12.18)

---
updated-dependencies:
- dependency-name: rollup-plugin-sass
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 27, 2023
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Mar 6, 2023

Superseded by #185.

@dependabot dependabot bot closed this Mar 6, 2023
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/rollup-plugin-sass-1.12.18 branch March 6, 2023 11:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants