Bump the npm_and_yarn group with 4 updates

[dependabot]

Bumps the npm_and_yarn group with 4 updates: bootstrap-sass, got, gry and postcss.

Updates bootstrap-sass from 3.4.1 to 3.4.3

Changelog

Sourced from bootstrap-sass's changelog.

3.4.3 (non-ruby only)

• Fix malformed math.div expressions. #1225

3.4.2 (non-ruby only)

• Compatibility with Sass 1.33. #1221

3.4.0

• Bootstrap rubygem now depends on SassC instead of Sass.
• Compass no longer supported.

3.3.7

• Allows jQuery 3.x in bower.json. #1048
• Adds the style and sass fields to package.json. #1045
• Adds Eyeglass support. #1007

3.3.6

• Bumps Sass dependency to 3.3.4+ to avoid compatibility issues with @​at-root.
• Bumps node-sass dependency to ~3.4.2 for Node.js v5 compatibility. #986
• Fixes breadcrumb content issues on libsass. #919
• Fixes a Rails 5 compatibility issue. #965

Framework version: Bootstrap v3.3.6

3.3.5

Fix for standalone Compass extension compatibility. #914

Framework version: Bootstrap v3.3.5

3.3.4

No Sass-specific changes.

Framework version: Bootstrap v3.3.4

3.3.3

This is a re-packaged release of 3.3.2.1 (v3.3.2+1).

Versions are now strictly semver. The PATCH version may be ahead of the upstream.

Framework version: Bootstrap v3.3.2.

3.3.2.1

... (truncated)

Commits

• 6b0ca50 Bump to 3.4.3 (npm only)
• 62dd931 rake convert[v3.4.1]
• 96917c6 replace_division: balance parens
• e2ecd03 Bump to 3.4.2 (npm only)
• 0512858 package.json: node-sass -> sass
• 3c6cbc0 rake convert[v3.4.1]
• 2f38fa5 handle math.div
• See full diff in compare view

Updates got from 14.4.5 to 14.4.6

Release notes

Sourced from got's releases.

v14.4.6

• Fix timeout error firing even though it's cancelled (#2399) 7a92064

sindresorhus/got@v14.4.5...v14.4.6

Commits

• 383a3ff 14.4.6
• 4020916 Readme tweaks
• 7a92064 Fix timeout error firing even though it's cancelled (#2399)
• f997bcb Meta tweaks
• See full diff in compare view

Updates gry from 6.1.0 to 6.1.1

Release notes

Sourced from gry's releases.

6.1.1

 - Update the documentation.

• Add the GitHub Sponsors link. 

As always, I am very grateful to those supporting my projects! You can do that by donating via PayPal or via GitHub Sponsors.

Thank you very much! ❤️

Commits

• 13c5b2e ⬆️ 6.1.1 🎉
• See full diff in compare view

Updates postcss from 8.4.49 to 8.5.0

Release notes

Sourced from postcss's releases.

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@​romainmenke during his work on Stylelint added Input#document in additional to Input#css.

root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"

Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

• Tidelift with a Spotify-like subscription model supporting all projects from your lock file.
• Direct donations at GitHub Sponsors or Open Collective.

Changelog

Sourced from postcss's changelog.

Change Log

This project adheres to Semantic Versioning.

8.5.2

• Fixed end position of rules with semicolon (by @​romainmenke).

8.5.1

• Fixed backwards compatibility for complex cases (by @​romainmenke).

8.5 “Duke Alloces”

• Added Input#document for sources like CSS-in-JS or HTML (by @​romainmenke).

Commits

• 6873270 Release 8.5 version
• 4223bb9 Fix 80 columns limit
• 80e2401 Add Input#document (#1996)
• 6f86879 Update dependencies
• 85cbbec Fix pnpm version on CI
• 76caa57 Update dependencies
• 46ff246 Move to pnpm 10
• 99da2f2 Fix the documentation for RuleRaws.ownSemicolon (#1994)
• 4493eed Pins nanoid to ^3.3.8 (#1992)
• 2acd7c7 Bump nanoid from 3.3.7 to 3.3.8 (#1989)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @lucydodo.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[lucydodo]

@dependabot merge