Skip to content

Bump cssnano from 9.6.0 to 9.8.0 - #788

Merged
github-actions[bot] merged 1 commit into
Currentfrom
dependabot/npm_and_yarn/cssnano-9.8.0
Oct 15, 2026
Merged

github-actions[bot] merged 1 commit into
Currentfrom
dependabot/npm_and_yarn/cssnano-9.8.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026 •

Copy link
Copy Markdown
Contributor

Bumps cssnano from 9.6.0 to 9.8.0.

Release notes

Sourced from cssnano's releases.

v9.8.0

Feature Changes

  • feat(postcss-normalize-url): stop rewriting URLs

    The plugin only changes the url() token (unquoting, whitespace, escaping) and keeps the URL byte-identical. It no longer removes dot segments or duplicate slashes, decodes percent-escapes, removes default ports or strips the trailing dot of host names, because these are not equivalent for every server or bundler. It keeps whitespace inside a quoted @namespace URL as well, because the namespace name is an identifier compared character by character rather than a URL that gets fetched.

  • feat(cssnano-preset-default): remove postcss-svgo from the preset

    The presets no longer run postcss-svgo; run it before cssnano or optimize SVG assets with the SVGO cli instead. A svgo option is now ignored. The output changes for CSS with inline SVG data URIs, and for CSS with URLs that postcss-normalize-url used to rewrite (see the postcss-normalize-url changeset).

Patch Changes

  • Always convert between cm and mm, and convert q to cm or mm, since metric units relate by exact decimal factors. q is never the output unit.

v9.7.0

What's Changed

New Features

  • feat(postcss-minify-params): drop a min-* or max-* already implied in another range in the same media query

Patch Changes

  • fix(postcss-merge-rules): merge at-rules separated by unrelated rules

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@9.6.0...cssnano@9.7.0

Commits
  • 72a19c9 Publish cssnano 9.8.0
  • 2fdb87b chore: correct SVGO case
  • 3e3a689 docs: update normalize-url changeset
  • fbd1855 chore: add extra allocations rule to AGENTS.md
  • 9c53162 docs: rename files
  • 4a2866a feat(cssnano-preset-default): remove svgo from default preset
  • 34d8dee feat(postcss-svgo): add the configFile option to read svgo.config.js
  • 78cc61f feat(postcss-normalize-url): only make url() token syntax changes
  • 51f4bce fix(postcss-convert-values): format disabled time, angle and frequency units
  • 3d32ee0 feat(postcss-convert-values): always perform exact conversions
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 15, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​cssnano@​9.6.0 ⏵ 9.8.09910069100 +1100

View full report

Bumps [cssnano](https://github.com/cssnano/cssnano) from 9.6.0 to 9.8.0.
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/cssnano@9.6.0...cssnano@9.8.0)

---
updated-dependencies:
- dependency-name: cssnano
  dependency-version: 9.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/cssnano-9.8.0 branch from 790297a to 3680e4d Compare October 15, 2026 21:55
@github-actions
github-actions Bot merged commit d7300a7 into Current Oct 15, 2026
6 of 11 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/cssnano-9.8.0 branch October 15, 2026 21:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Development

Successfully merging this pull request may close these issues.

1 participant