Skip to content

Conversation

@amureki
Copy link
Contributor

@amureki amureki commented Jan 2, 2025

Bumps cssnano to current 7.0.6

The only breaking changes there are dropping Node.js 14 and 16, which seems to not be supported here anyways.

The reasoning behind this change is to update subdependencies postcss and nanoid, as there was a security issue found in the latter one.

@changeset-bot
Copy link

changeset-bot bot commented Jan 2, 2025

🦋 Changeset detected

Latest commit: 854f1df

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
@pwrs/lit-css Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@bennypowers
Copy link
Owner

package lock needs to be updated

@bennypowers bennypowers merged commit b0cb17f into bennypowers:main Jan 2, 2025
@amureki
Copy link
Contributor Author

amureki commented Jan 2, 2025

@bennypowers ah, sorry, I was not fully aware of the structure of lockfiles here in the multi-package repo.
Thank you for instantly picking this one up! 🏅

@amureki amureki deleted the fix/cssnano-bump branch January 2, 2025 08:14
@amureki amureki mentioned this pull request Jan 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants