[Snyk] Upgrade @fullhuman/postcss-purgecss from 4.0.3 to 5.0.0

[Benjamin-KY]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @fullhuman/postcss-purgecss from 4.0.3 to 5.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 5 versions ahead of your current version.
• The recommended version was released 6 months ago, on 2022-09-13.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	265/1000 Why? CVSS 5.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @fullhuman/postcss-purgecss

• 5.0.0 - 2022-09-13
  

  Bug Fixes

  • add safelist variables to postcss-purgecss #840 (c822058)
  • gulp-purgecss: support skippedContentGlobs option #853 (b72de77)
  • Purgecss webpack plugin/only filter fix (#933) (f8e4c2c)
  • purgecss-webpack-plugin: add sourcemap support #409 (b3f73ed)
  • purgecss-webpack-plugin: export as named export as well as default (#821) (a6a2c8e)
  • wrong path import (4f3ddd0)

  Features

  • add source map support #526 (f2a9c5a)
  • gulp-purgecss: add support for gulp-sourcemaps #257 (55c26d2)
  • postcss-purgecss: load options from purgecss config (4de3bd8)
  • purgecss-webpack-plugin: load config file automatically #767 (726faaa)

  BREAKING CHANGES

  • purgecss-webpack-plugin: drop webpack 4 support

  What's Changed (generated commit list minus dependabot)

  • build(deps): update dependencies
  • build(deps-dev): update dev dependencies
  • fix(purgecss-webpack-plugin): export as named export as well as default by @ G-Rath in #821
  • Guide for Hugo by @ zwbetz-gh in #918
  • add github-actions to dependabot by @ coliff in #934
  • Purgecss webpack plugin/only filter fix by @ mefu in #933

  New Contributors

  • @ G-Rath made their first contribution in #821
  • @ zwbetz-gh made their first contribution in #918
  • @ mefu made their first contribution in #933

  Full Changelog: v4.1.3...v5.0.0

• 4.1.3 - 2021-11-29
  

  v4.1.3

• 4.1.2 - 2021-11-29
  

  v4.1.2

• 4.1.1 - 2021-11-28
  

  v4.1.1

• 4.1.0 - 2021-11-28
  Read more
• 4.0.3 - 2021-03-20
  

  v4.0.3

from @fullhuman/postcss-purgecss GitHub release notes

Commit messages

Package name: @fullhuman/postcss-purgecss

• 3b98734 build:5.0.0
• 2c3768e build(deps-dev): bump @ vuepress/plugin-search (custom-components gradio-app/gradio#985)
• 433fdac build(deps-dev): bump @ typescript-eslint/parser from 5.32.0 to 5.36.2 (indentation fix gradio-app/gradio#993)
• a4acb8b build(deps-dev): bump rollup from 2.77.2 to 2.79.0 (ensure dataframe updates as expected gradio-app/gradio#981)
• c22624a build(deps-dev): bump @ typescript-eslint/eslint-plugin (update-components gradio-app/gradio#986)
• 8445aa1 build(deps-dev): bump lerna from 5.1.6 to 5.5.0 ([Blocks] Improve default labels for form components gradio-app/gradio#982)
• 58eef23 build(deps-dev): bump @ vuepress/plugin-search (Cleaning up Launchable() gradio-app/gradio#968)
• e7579d1 build(deps-dev): bump vuepress from 2.0.0-beta.48 to 2.0.0-beta.49 (New Blocks Demo: neural instrument cloning gradio-app/gradio#975)
• b624550 build(deps): bump actions/setup-node from 1 to 3 (Reset to default on gradio.Slider gradio-app/gradio#937)
• 6a76d7a build(deps-dev): bump @ types/node from 18.6.3 to 18.6.4 (Missing Multiple Outputs gradio-app/gradio#974)
• e11fd64 build(deps-dev): bump eslint from 8.19.0 to 8.21.0 (fix i18n and some tweaks gradio-app/gradio#966)
• 8b47f3d build(deps-dev): bump @ typescript-eslint/eslint-plugin (Issue #785: add footer gradio-app/gradio#972)
• 0c21ceb build(deps-dev): bump @ typescript-eslint/parser from 5.31.0 to 5.32.0 (Add huggingface_hub client library gradio-app/gradio#973)
• 7d21ec3 build(deps): bump terser from 5.14.1 to 5.14.2 (Add Conditional Inputs gradio-app/gradio#961)
• 08b06c1 build(deps-dev): bump ts-node from 10.8.2 to 10.9.1 (commit changes again, after the rebase gradio-app/gradio#970)
• 969ed6c build(deps-dev): bump @ typescript-eslint/parser from 5.30.5 to 5.31.0 (add jinja2 to reqs gradio-app/gradio#969)
• 082cdeb build(deps-dev): bump @ types/node from 17.0.45 to 18.6.3 (Fix #944 gradio-app/gradio#971)
• 2de4d59 build(deps-dev): bump lerna from 4.0.0 to 5.1.6 (tabbed-interface-rewritten gradio-app/gradio#958)
• 39e066d build(deps): bump actions/stale from 4 to 5 (Typeable value on gradio.Slider gradio-app/gradio#936)
• f942eb7 build(deps): bump plugin-error from 1.0.1 to 2.0.0 ([Brainstorming] Reporting Hugging Face Spaces with Gradio Flagging gradio-app/gradio#957)
• f3a2c03 build(deps): bump glob from 7.2.3 to 8.0.3 (Add context or further explanation to any input field gradio-app/gradio#959)
• 837f42b build(deps): bump actions/checkout from 1 to 3 (Add better default labels to form elements gradio-app/gradio#935)
• 6b1201b build: remove css from list of files to format
• f8e4c2c fix: Purgecss webpack plugin/only filter fix ([blocks-dev] i18n is broken in blocks-dev gradio-app/gradio#933)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs