Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 24, 2024

Bumps wikimedia/css-sanitizer from 3.0.2 to 5.4.0.

Changelog

Sourced from wikimedia/css-sanitizer's changelog.

css-sanitizer 5.4.0 (2024-10-30)

  • Add support for :dir() pseudo-class

  • Add support for CSS Logical 1 properties and values

  • code: Use explicit nullable type on parameter arguments

  • build: Phan must ignore EmptyIterator type in UnorderedGroup

  • build: Updating composer dependencies

  • build: Updating mediawiki/mediawiki-codesniffer to 44.0.0

  • build: Allow wikimedia/scopedcallback 5.0.0

  • build: Allow wikimedia/testing-access-wrapper 3.0.0

  • build: Remove use of $PHPUNIT_ARGS

css-sanitizer 5.3.0 (2024-04-18)

  • Harden security by disallowing CSS custom properties for border-color
  • Add support for fallback values for CSS custom properties in color attributes.

css-sanitizer 5.2.0 (2024-04-03)

  • Add support for CSS custom properties in color attributes
  • [build] Bump dependencies

css-sanitizer 5.1.0 (2024-02-21)

  • Drop support for wikimedia/utfnormal 2.x
  • Change use of AtEase to at operator
  • Support @​media (prefers-color-scheme:...) rule
  • [build] Bump dependencies

css-sanitizer 5.0.0 (2023-08-29)

  • Drop support for PHP < 7.4
  • Support wikimedia/utfnormal ^4.0.0
  • [build] Bump dependencies

css-sanitizer 4.0.1 (2022-07-09)

  • Allow wikimedia/scoped-callback 4.0.0

css-sanitizer 4.0.0 (2022-07-03)

  • Update for new versions of various standards
  • Add return types to inbuilt interfaces
  • [build] Bump dependencies
Commits
  • 7d0a15d Release css-sanitizer v5.4.0
  • 4cecbe9 build: Allow wikimedia/testing-access-wrapper 3.0.0
  • 4b7b8ad composer.json: Allow wikimedia/scopedcallback 5.0.0
  • 5f09df3 Use explicit nullable type on parameter arguments
  • b968d87 build: Remove use of $PHPUNIT_ARGS
  • d5e1d99 Merge "Add history log for the two recently added features"
  • a28eec0 Add history log for the two recently added features
  • 67128cb Merge "Add CSS Logical 1 Properties support"
  • 4d7981e Add CSS Logical 1 Properties support
  • ce8a4b8 build: Updating mediawiki/mediawiki-codesniffer to 44.0.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Nov 24, 2024
Bumps [wikimedia/css-sanitizer](https://github.com/wikimedia/css-sanitizer) from 3.0.2 to 5.4.0.
- [Changelog](https://github.com/wikimedia/css-sanitizer/blob/master/HISTORY.md)
- [Commits](wikimedia/css-sanitizer@v3.0.2...v5.4.0)

---
updated-dependencies:
- dependency-name: wikimedia/css-sanitizer
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/composer/wikimedia/css-sanitizer-5.4.0 branch from 7b29ccc to fe2470d Compare November 30, 2024 10:09
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jan 27, 2025

Superseded by #457.

@dependabot dependabot bot closed this Jan 27, 2025
@dependabot dependabot bot deleted the dependabot/composer/wikimedia/css-sanitizer-5.4.0 branch January 27, 2025 22:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant