[Snyk] Upgrade @parcel/transformer-css from 2.0.0-alpha.3 to 2.3.2 #32
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade @parcel/transformer-css from 2.0.0-alpha.3 to 2.3.2.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: @parcel/transformer-css
This fixes an issue with auto installing node builtins where the npm package has the same name as the node builtin itself. See #7697.
Followup release to v2.3.0 to improve the error message shown when auto install is disabled (e.g. in CI environments) and a node polyfill is needed. This may occur for example when using automated dependency upgrade bots like renovate/dependabot.
This also fixes a bug where auto install did not work correctly in some cases, and pins all parcel dependency versions so that it is easier to pin parcel to a specific version in your project.
This release reduces the number of npm dependencies needed by Parcel by over 60%. This builds upon previous work in 2.2.0, so combined Parcel now installs over 70% fewer dependencies! This is accomplished by:
buffer
,stream
, etc.). These are rarely used but account for a large number of installed dependencies. Now, when you use one of these, or a dependency in your project does, it'll be installed into your project on demand.We will continue reducing Parcel's footprint in future releases by further reducing our use of dependency-heavy ecosystems such as PostCSS as we replace them with Rust-based equivalents.
Other changes
@ swc/helpers
in non-module scripts - DetailsFixed
@ parcel/css
. Now Parcel has default modern browser targets. - DetailsAdded
@ parcel/transformer-css-experimental
plugin, which is powered by @ parcel/css - DetailsFixed
node-forge
to 1.0.0 to fix security vulnerabilityChangelog
Changelog
New Contributors
https://github.com/parcel-bundler/parcel/blob/v2/CHANGELOG.md#201---2021-11-08
New Contributors 😍
Commit messages
Package name: @parcel/transformer-css
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:![](https://camo.githubusercontent.com/5f26ef198ecdf05110352b33d1a84ab67a52fe7bc2554e8a2cfe2a6d2ba24c5b/68747470733a2f2f6170692e7365676d656e742e696f2f76312f706978656c2f747261636b3f646174613d65794a33636d6c305a55746c65534936496e4a79576d785a634564485932527954485a7362306c596430645563566734576b4652546e4e434f5545774969776959573576626e6c746233567a535751694f694a6a596a55794d3255304e4330334e4749774c54526b4e324d744f446331596930314e6a41345a5451314d57457a4f5467694c434a6c646d567564434936496c425349485a705a58646c5a434973496e42796233426c636e52705a584d694f6e736963484a4a5a434936496d4e694e54497a5a5451304c546330596a41744e475133597930344e7a56694c5455324d44686c4e44557859544d354f434a3966513d3d)
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs