Skip to content

chore(deps-dev): bump cssnano from 9.1.2 to 9.8.0 - #1322

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/develop/cssnano-9.8.0
Open

dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/develop/cssnano-9.8.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026

Copy link
Copy Markdown
Contributor

Bumps cssnano from 9.1.2 to 9.8.0.

Release notes

Sourced from cssnano's releases.

v9.8.0

Feature Changes

  • feat(postcss-normalize-url): stop rewriting URLs

    The plugin only changes the url() token (unquoting, whitespace, escaping) and keeps the URL byte-identical. It no longer removes dot segments or duplicate slashes, decodes percent-escapes, removes default ports or strips the trailing dot of host names, because these are not equivalent for every server or bundler. It keeps whitespace inside a quoted @namespace URL as well, because the namespace name is an identifier compared character by character rather than a URL that gets fetched.

  • feat(cssnano-preset-default): remove postcss-svgo from the preset

    The presets no longer run postcss-svgo; run it before cssnano or optimize SVG assets with the SVGO cli instead. A svgo option is now ignored. The output changes for CSS with inline SVG data URIs, and for CSS with URLs that postcss-normalize-url used to rewrite (see the postcss-normalize-url changeset).

Patch Changes

  • Always convert between cm and mm, and convert q to cm or mm, since metric units relate by exact decimal factors. q is never the output unit.

v9.7.0

What's Changed

New Features

  • feat(postcss-minify-params): drop a min-* or max-* already implied in another range in the same media query

Patch Changes

  • fix(postcss-merge-rules): merge at-rules separated by unrelated rules

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@9.6.0...cssnano@9.7.0

v9.6.0

What's Changed

New Features

  • feat(postcss-merge-longhand): merge row-gap/column-gap, overscroll-behavior-x/-y, flex-direction/flex-wrap, column-rule-* and equal overflow-x/-y into their shorthands when every target supports them

Bug Fixes

  • refactor: remove cssesc dependency

  • fix: improve escape handling in selectors

  • fix: update postcss-calc

  • fix: accept the optional leading rounding strategy of round(), such as round(up, 1s, 1s), when postcss-ordered-values orders animations and transitions and when postcss-merge-longhand folds shorthands. The rounding strategy must be separated by a comma, so round(up 1px, 2px) is no longer treated as valid.

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@9.5.0...cssnano@9.6.0

... (truncated)

Commits
  • 72a19c9 Publish cssnano 9.8.0
  • 2fdb87b chore: correct SVGO case
  • 3e3a689 docs: update normalize-url changeset
  • fbd1855 chore: add extra allocations rule to AGENTS.md
  • 9c53162 docs: rename files
  • 4a2866a feat(cssnano-preset-default): remove svgo from default preset
  • 34d8dee feat(postcss-svgo): add the configFile option to read svgo.config.js
  • 78cc61f feat(postcss-normalize-url): only make url() token syntax changes
  • 51f4bce fix(postcss-convert-values): format disabled time, angle and frequency units
  • 3d32ee0 feat(postcss-convert-values): always perform exact conversions
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [cssnano](https://github.com/cssnano/cssnano) from 9.1.2 to 9.8.0.
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/cssnano@9.1.2...cssnano@9.8.0)

---
updated-dependencies:
- dependency-name: cssnano
  dependency-version: 9.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 16, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants