Bump cssnano from 8.0.3 to 8.0.4 - #1811
Conversation
Bumps [cssnano](https://github.com/cssnano/cssnano) from 8.0.3 to 8.0.4. - [Release notes](https://github.com/cssnano/cssnano/releases) - [Commits](https://github.com/cssnano/cssnano/compare/cssnano@8.0.3...cssnano@8.0.4) --- updated-dependencies: - dependency-name: cssnano dependency-version: 8.0.4 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
javascript
✅ Deploy Preview for gh-pages-openinf ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
|
Rebasing to pick up the bot-commit exemption from #1812, which this pull request would otherwise fail. |
|
@dependabot rebase |
|
The dependabot.yml entry that created this PR has been deleted so this PR can't be rebased. Please close the PR so Dependabot can create a new one with the current dependabot.yml. |
|
Closing: dependabot no longer manages dependencies here. Its configuration was removed in #1807, because renovate already covers every manifest in this repository — 98 dependencies across 11 files, including the two The bump itself is right, and renovate will propose it on its own schedule: cssnano 8.0.4 was published on 2026-08-05, so it is now past the seven-day wait added in #1805. Dependabot security updates are unaffected — those are a repository setting rather than a file, and they remain on. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Bumps cssnano from 8.0.3 to 8.0.4.
Release notes
Sourced from cssnano's releases.
Commits
6b64af9chore: update types6a2ed8bPublish cssnano 8.0.4cb09239fix(postcss-svgo): use built-in URI encodere1a7419fix(postcss-svgo): improve character encodingdceffeechore: update lockfile after creating devEngines field in package.jsondca50f7docs: add devengines field to website package.jsonc169273docs: remove unused website dependencybca3daddocs: add browserslist query for building the website67c666echore: remove unused package.json fieldc24a5a4chore(ci): update devTools packageManger and use pnpm/setup everywhereDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)