Skip to content

Bump the dev-tools group across 1 directory with 2 updates - #6

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-tools-4a16bd992c
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-tools-4a16bd992c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •

Copy link
Copy Markdown

Bumps the dev-tools group with 2 updates in the / directory: copy-webpack-plugin and cssnano.

Updates copy-webpack-plugin from 13.0.1 to 14.0.0

Release notes

Sourced from copy-webpack-plugin's releases.

v14.0.0

14.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#819) (2881203)

Bug Fixes

  • update serialize-javascript to fix security problems
Changelog

Sourced from copy-webpack-plugin's changelog.

14.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#819) (2881203)

Bug Fixes

  • update serialize-javascript to fix security problems
Commits

Updates cssnano from 6.1.2 to 9.3.1

Release notes

Sourced from cssnano's releases.

v9.3.1

What's Changed

Bug Fixes

Fix a crash because of a dependency on an unpublished version of cssnano-utils

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@9.3.0...cssnano@9.3.1

v9.3.0

What's Changed

New Features

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@9.2.2...cssnano@9.3.0

v9.2.2

What's Changed

Bug Fixes

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@9.2.1...cssnano@9.2.2

v9.2.1

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@9.2.0...cssnano@9.2.1

v9.2.0

Features

  • Merge box alignment properties into the place-content, place-items and place-self shorthands, such as align-items:center;justify-items:start into place-items:center start. This only happens when every browser in your Browserslist targets supports the shorthands, because a browser that does not would ignore both alignments. The defaults query includes browsers with unknown support, such as Opera Mini and UC Browser, so it keeps the longhands. Values that use safe, unsafe or last baseline merge only when both values use the same keywords. postcss-merge-longhand now accepts the Browserslist options overrideBrowserslist, stats, path and env.

Fixes

  • Write numbers in scientific notation when it is shorter, such as 1e-6px for 0.000001px and 1e6px for 1000000px. This also applies when length unit conversion is disabled. Numbers written without a decimal point, such as z-index:1000000, keep their form, because an <integer> cannot use scientific notation.

  • Stop merging longhands across a nested rule or at-rule. The shorthand ended up after the nested rule and overrode it, so in a{margin-top:1px;&{margin-top:2px}…} the nested margin-top was lost. This applies to margin, padding, border, border-radius and columns. Declarations on each side of a nested rule are now merged separately. An at-rule without a block, such as @apply x;, also separates them, since it may add declarations. An empty rule such as &{} does not. A border-image or all declaration before a nested rule no longer prevents merging the border longhands after it.

  • Stop merging rules that have an invalid selector, such as b: hover, [a b], :lang(en fr) or a||b. An invalid selector makes the whole selector list invalid, so the browser also dropped the valid rule it was merged with.

  • Only treat a dimension as the font size in the font shorthand when it has a length unit. An invalid value such as font:bold 1s "Arial Black" is now left unchanged.

... (truncated)

Commits
  • e23f6f1 Publish cssnano 9.3.1
  • 73f9166 chore: update pnpm to 12.9.1
  • 8e4ccd5 ci: separate performance tests
  • 11ca130 Publish cssnano 9.3.0
  • e71acac docs: improve changesets
  • 18cd87b refactor(postcss-merge-rules): remove temporary arrays and closures
  • d444843 refactor(postcss-merge-rules): make fields private
  • 1a54666 fix(postcss-discard-empty): preserve cascade layers ordering
  • 7a49ca3 perf(postcss-merge-rules): refactor traversal
  • 5f1f026 feat(postcss-merge-rules): join non-adjacent rules with identical declarations
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for cssnano since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 5, 2026
Bumps the dev-tools group with 2 updates in the / directory: [copy-webpack-plugin](https://github.com/webpack/copy-webpack-plugin) and [cssnano](https://github.com/cssnano/cssnano).


Updates `copy-webpack-plugin` from 13.0.1 to 14.0.0
- [Release notes](https://github.com/webpack/copy-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/copy-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/copy-webpack-plugin@v13.0.1...v14.0.0)

Updates `cssnano` from 6.1.2 to 9.3.1
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/cssnano@6.1.2...cssnano@9.3.1)

---
updated-dependencies:
- dependency-name: copy-webpack-plugin
  dependency-version: 14.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-tools
- dependency-name: cssnano
  dependency-version: 9.1.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-tools
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the dev-tools group with 2 updates Bump the dev-tools group across 1 directory with 2 updates Oct 8, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-tools-4a16bd992c branch from f19a600 to 8934af5 Compare October 8, 2026 17:37
@dependabot @github

dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 15, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev-tools-4a16bd992c branch October 15, 2026 17:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants