Skip to content

chore: bump cssnano from 8.0.2 to 9.9.0 - #2829

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/cssnano-9.1.1
Open

dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/cssnano-9.1.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps cssnano from 8.0.2 to 9.9.0.

Release notes

Sourced from cssnano's releases.

v9.9.0

What's Changed

  • cssnano now ships its presets and plugins in a single package, so installing it adds one cssnano package to your dependency tree instead of about thirty, and you have fewer packages to review in audits and lockfile updates.

    preset: 'lite' and preset: 'advanced' now work without installing another package. An installed preset package still takes precedence over the built-in one and prints a one-time CSSNANO_INSTALLED_PRESET warning; pass the imported preset function to keep it without the warning. Full names such as cssnano-preset-default fall back to the built-in preset when no package is installed. Projects that require cssnano-preset-default directly must declare it as a dependency, or switch to preset: ['default', {...}]. overrides and resolutions that pin an individual plugin no longer apply.

v9.8.0

Feature Changes

  • feat(postcss-normalize-url): stop rewriting URLs

    The plugin only changes the url() token (unquoting, whitespace, escaping) and keeps the URL byte-identical. It no longer removes dot segments or duplicate slashes, decodes percent-escapes, removes default ports or strips the trailing dot of host names, because these are not equivalent for every server or bundler. It keeps whitespace inside a quoted @namespace URL as well, because the namespace name is an identifier compared character by character rather than a URL that gets fetched.

  • feat(cssnano-preset-default): remove postcss-svgo from the preset

    The presets no longer run postcss-svgo; run it before cssnano or optimize SVG assets with the SVGO cli instead. A svgo option is now ignored. The output changes for CSS with inline SVG data URIs, and for CSS with URLs that postcss-normalize-url used to rewrite (see the postcss-normalize-url changeset).

Patch Changes

  • Always convert between cm and mm, and convert q to cm or mm, since metric units relate by exact decimal factors. q is never the output unit.

v9.7.0

What's Changed

New Features

  • feat(postcss-minify-params): drop a min-* or max-* already implied in another range in the same media query

Patch Changes

  • fix(postcss-merge-rules): merge at-rules separated by unrelated rules

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@9.6.0...cssnano@9.7.0

v9.6.0

What's Changed

New Features

  • feat(postcss-merge-longhand): merge row-gap/column-gap, overscroll-behavior-x/-y, flex-direction/flex-wrap, column-rule-* and equal overflow-x/-y into their shorthands when every target supports them

Bug Fixes

  • refactor: remove cssesc dependency

  • fix: improve escape handling in selectors

... (truncated)

Commits
  • a1f4561 Publish cssnano 9.9.0
  • e548b3c test: attempt to load file paths correctly on Windows
  • cd4980f feat: warn when overriding built-in presets and update docs
  • aa6750a fix(mutation): count unapplied mutations as errored, not killed
  • b24b88d refactor(cssnano): fold utils, stylehacks, plugins and presets into cssnano
  • b947c7b docs: reword autoprefixer mentions
  • 3b08f09 Publich cssnano-preset-advanced 10.0.0
  • e2de02b feat!(cssnano-preset-advanced): remove autoprefixer and css-declaration-sorter
  • c1019e8 docs: use default astro output directory
  • af46c61 docs: website copy tweaks
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 1, 2026
@vercel

vercel Bot commented Oct 1, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
docsify-preview Ready Ready Preview Oct 21, 2026 1:14am UTC

@dependabot dependabot Bot changed the title chore: bump cssnano from 8.0.2 to 9.1.1 chore: bump cssnano from 8.0.2 to 9.4.0 Oct 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/cssnano-9.1.1 branch from 2d78cab to 1452923 Compare October 12, 2026 03:10
@dependabot dependabot Bot changed the title chore: bump cssnano from 8.0.2 to 9.4.0 chore: bump cssnano from 8.0.2 to 9.5.0 Oct 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/cssnano-9.1.1 branch from 1452923 to 3a74168 Compare October 13, 2026 07:13
@dependabot dependabot Bot changed the title chore: bump cssnano from 8.0.2 to 9.5.0 chore: bump cssnano from 8.0.2 to 9.8.0 Oct 17, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/cssnano-9.1.1 branch from 3a74168 to 1d71135 Compare October 17, 2026 06:56
Bumps [cssnano](https://github.com/cssnano/cssnano) from 8.0.2 to 9.9.0.
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/cssnano@8.0.2...cssnano@9.9.0)

---
updated-dependencies:
- dependency-name: cssnano
  dependency-version: 9.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore: bump cssnano from 8.0.2 to 9.8.0 chore: bump cssnano from 8.0.2 to 9.9.0 Oct 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/cssnano-9.1.1 branch from 1d71135 to 0a13061 Compare October 21, 2026 01:12

This branch was successfully deployed

1 active deployment
Preview — 0a130614 Deployed Oct 21, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants