flare
flare copied to clipboard
chore(deps): bump github.com/tdewolff/minify/v2 from 2.20.16 to 2.20.18
Bumps github.com/tdewolff/minify/v2 from 2.20.16 to 2.20.18.
Release notes
Sourced from github.com/tdewolff/minify/v2's releases.
v2.20.18
v2.20.17
- cmd: output statistics now have fixed length, removing dependency on go-humanize
- cmd: choose newest atime/mtime to preserve timestamps when using --bundle; allow setting preserve with --bundle; add warnings when ownership/permissions differ between input files when using --bundle; see tdewolff/minify#671
- cmd: don't preserve parent directories for --bundle, see tdewolff/minify#671
- HTML: keep original attribute quote for all attributes, fixes tdewolff/minify#670
- JS: fix precedence of OptionalChaining expression
- JS: fix parsing of 'export default expr' where expression can only be an assignment expression
Commits
1508f98Fix --watch functionality, fixes #672a8e2179Merge branch 'master' of github.com:tdewolff/minifyc39145fFix security of JS dependencya585a49Merge pull request #655 from tdewolff/dependabot/npm_and_yarn/bindings/js/nod...8690ba5Merge pull request #668 from tdewolff/dependabot/github_actions/golangci/gola...f503673Merge pull request #667 from tdewolff/dependabot/github_actions/pypa/cibuildw...a72c2ecHTML: keep original attribute quote for all attributes, fixes #670c754bf5cmd: don't preserve parent directories for --bundle, see #6716b9175dcmd: choose newest atime/mtime to preserve timestamps when using --bundle; al...f27fd34cmd: output statistics now have fixed length, removing dependency on go-humanize- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency -
@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)