Skip to content

Bump svgo, cssnano and imagemin-svgo - #1157

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-16a3e8cca3
Open

Bump svgo, cssnano and imagemin-svgo#1157
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-16a3e8cca3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown

Bumps svgo to 4.0.2 and updates ancestor dependencies svgo, cssnano and imagemin-svgo. These dependencies need to be updated together.

Updates svgo from 1.3.2 to 4.0.2

Release notes

Sourced from svgo's releases.

v4.0.2

What's Changed

Security

Bug Fixes

Performance

Other Changes

v4.0.1

What's Changed

Dependencies

  • Sets minimum version of sax (XML parser) to v1.5.0, which improves built-in guards against entity expansion.

Bug Fixes

Performance

Other Changes

  • Plugins no longer include if they are enabled or disabled by default, as this was written inconsistently. The --show-plugins argument appends the presets a plugin is in to the end of the line. By @​viralcodex in svg/svgo#2174
  • Plugin/preset types to enforce the name start with preset- if it is a preset (collection of plugins). By @​SethFalco in svg/svgo#2178

Metrics

Before and after of the browser bundle of each respective version:

| | v4.0.0 | v4.0.1 | Delta |

... (truncated)

Commits
  • b2309cf chore: sync version with api
  • f529cfc Merge commit from fork
  • 581fe68 performance: speed up mergePath child node removal (#2216)
  • eb4c8b6 docs(removeAttributesBySelector): properly document and check types (#2215)
  • 6fd5872 fix(convertColors): skip convertCase on css custom properties (#2213)
  • 7414f73 fix: properly parse negative (or +) arc radii (#2205)
  • a8c19aa fix: only call encodeSVGDatauri once and add test case (#2053)
  • 65548f4 fix(convertPathData): properly handle consecutive t commands (#2156)
  • a41a7c1 fix(convertPathData): introducing isSafeToRemove (#2164)
  • 38625dd test: handle charm icons (#2203)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by sethiii, a new releaser for svgo since your current version.


Updates cssnano from 4.1.10 to 8.0.2

Release notes

Sourced from cssnano's releases.

v8.0.2

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.1...cssnano@8.0.2

v8.0.1

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.0...cssnano@8.0.1

v8.0.0

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.9...cssnano@8.0.0

v7.1.9

Bug Fixes

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.8...cssnano@7.1.9

v7.1.8

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.7...cssnano@7.1.8

v.7.1.7

This release is idnetical to the previous one, but is being published to ensure that the latest versions of postcss-normalize-repeat-style and postcss-normalize-positions are uploaded to the npm registry.

... (truncated)

Commits
  • 185e1c7 Publish cssnano 8.0.2
  • 2ce8c2d chore: update the postcs peer dependency
  • 99bd9c1 docs: update website dependencies
  • 2ca8d4a chore: update development deps
  • b245a0b fix: update caniuse-api
  • 3bf3f4d chore: update postcss-selector-parser
  • 7343c87 fix: preserve apostrophes in svg data uris (#1819)
  • 964b9db chore(util): add benchmark + cpuprofile tooling (#1812)
  • 54a8db2 Include postcss-discard-overridden types in package
  • e0e39ae perf(postcss-merge-longhand): skip processors with no relevant decls
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for cssnano since your current version.


Updates imagemin-svgo from 8.0.0 to 12.0.0

Release notes

Sourced from imagemin-svgo's releases.

v12.0.0

Breaking

  • Require Node.js 20 8b8efb8

imagemin/imagemin-svgo@v11.0.1...v12.0.0

v11.0.1

  • Fix broken SVG check (#64) 0c37309

imagemin/imagemin-svgo@v11.0.0...v11.0.1

v11.0.0

Breaking

  • Require Node.js 18 69d8cea
  • Update svgo from v2 to v3

imagemin/imagemin-svgo@v10.0.1...v11.0.0

v10.0.1

  • Specify exports field ebd0041

imagemin/imagemin-svgo@v10.0.0...v10.0.1

v10.0.0

  • Fix usage 836063c
  • Use native ESM and update dependencies (#50) 35866f7

imagemin/imagemin-svgo@v9.0.0...v10.0.0

v9.0.0

  • Use GitHub Action instead (#44) a42fbfe
  • Upgrade svgo (#43) 43888a0
  • Update API usage 11dac11

imagemin/imagemin-svgo@v8.0.0...v9.0.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [svgo](https://github.com/svg/svgo) to 4.0.2 and updates ancestor dependencies [svgo](https://github.com/svg/svgo), [cssnano](https://github.com/cssnano/cssnano) and [imagemin-svgo](https://github.com/imagemin/imagemin-svgo). These dependencies need to be updated together.


Updates `svgo` from 1.3.2 to 4.0.2
- [Release notes](https://github.com/svg/svgo/releases)
- [Commits](svg/svgo@v1.3.2...v4.0.2)

Updates `cssnano` from 4.1.10 to 8.0.2
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/v4.1.10...cssnano@8.0.2)

Updates `imagemin-svgo` from 8.0.0 to 12.0.0
- [Release notes](https://github.com/imagemin/imagemin-svgo/releases)
- [Commits](imagemin/imagemin-svgo@v8.0.0...v12.0.0)

---
updated-dependencies:
- dependency-name: svgo
  dependency-version: 4.0.2
  dependency-type: indirect
- dependency-name: cssnano
  dependency-version: 8.0.2
  dependency-type: direct:development
- dependency-name: imagemin-svgo
  dependency-version: 12.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 24, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 24, 2026 14:40
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 24, 2026
@ceph-jenkins

Copy link
Copy Markdown

Thank you for your contribution. Since you, the author, are not a member of the Ceph GitHub Org yet, our CI will not automatically run. Any member of the Ceph Org may comment "ok - to - test" (without the dashes) to allow the Jenkins jobs to run.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant