Skip to content

chore(deps): Bump the prod group with 3 updates#391

Merged
jgerigmeyer merged 2 commits intomainfrom
dependabot/npm_and_yarn/prod-0011aef14d
Apr 1, 2026
Merged

chore(deps): Bump the prod group with 3 updates#391
jgerigmeyer merged 2 commits intomainfrom
dependabot/npm_and_yarn/prod-0011aef14d

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 1, 2026

Bumps the prod group with 3 updates: @floating-ui/dom, css-tree and nanoid.

Updates @floating-ui/dom from 1.7.5 to 1.7.6

Release notes

Sourced from @​floating-ui/dom's releases.

@​floating-ui/dom@​1.7.6

Patch Changes

  • fix(types): ensure Platform type contains detectOverflow type
  • perf: bundle and runtime improvements
  • feat(autoUpdate): allow not passing a floating element
  • Update dependencies: @floating-ui/utils@0.2.11, @floating-ui/core@1.7.5
Changelog

Sourced from @​floating-ui/dom's changelog.

1.7.6

Patch Changes

  • fix(types): ensure Platform type contains detectOverflow type
  • perf: bundle and runtime improvements
  • feat(autoUpdate): allow not passing a floating element
  • Update dependencies: @floating-ui/utils@0.2.11, @floating-ui/core@1.7.5
Commits

Updates css-tree from 3.1.0 to 3.2.1

Release notes

Sourced from css-tree's releases.

3.2.1

  • Fixed parsing of nested function in a group in definition syntax (#358)

3.2.0

  • Added "sideEffects": false in package.json
  • Added list option to the parse() method to specify whether the parser should produce a List (by default, list: true) or an array (list: false) for node's children (e.g., SelectorList, Block, etc.)
  • Added support for Functional Notation in definition syntax (for now by wrapping function arguments into an implicit group when necessary, see #292)
  • Added support for stacked multipliers {A}? and {A,B}? according to spec in definition syntax parsing (#346)
  • Added math functions support in syntax matching (e.g., min(), max(), etc.) (#344)
  • Added onToken option to the parse() method, which can be either an array or a function:
    • When the value is an array, it is populated with objects { type, start, end } (token type, and its start and end offsets).
    • When the value is a function, it accepts type, start, end, and index parameters, and is invoked with a token API as this, enabling advanced token handling (see onToken). For example, the following demonstrates checking if all block tokens have matching pairs:
      parse(css, {
          onToken(type, start, end, index) {
              if (this.isBlockOpenerTokenType(type)) {
                  if (this.getBlockPairTokenIndex(index) === -1) {
                      console.warn('No closing pair for', this.getTokenValue(index), this.getRangeLocation(start, end));
                  }
              } else if (this.isBlockCloserTokenType(type)) {
                  if (this.getBlockPairTokenIndex(index) === -1) {
                      console.warn('No opening pair for', this.getTokenValue(index), this.getRangeLocation(start, end));
                  }
              }
          }
      });
  • Extended TokenStream with the following methods:
    • getTokenEnd(tokenIndex) – returns the token's end offset by index, complementing getTokenStart(tokenIndex)
    • getTokenType(tokenIndex) – returns the token's type by index
    • isBlockOpenerTokenType(tokenType) – returns true for <function-token>, <(-token>, <[-token>, and <{-token>
    • isBlockCloserTokenType(tokenType) – returns true for <)-token>, <]-token>, and <}-token>
    • getBlockTokenPairIndex(tokenIndex) – returns the index of the pair token for a block, or -1 if no pair exists
  • Changed generate() to not auto insert whitespaces between tokens for raw values (#356)
  • Fixed fork() to extend node definitions instead of overriding them. For example, fork({ node: { Dimension: { generate() { /* ... */ } } } }) will now update only the generate() method on the Dimension node, while inheriting all other properties from the previous syntax definition.
  • Bumped mdn/data to 2.27.1 and various fixes in syntaxes
Changelog

Sourced from css-tree's changelog.

3.2.1 (March 5, 2026)

  • Fixed parsing of nested function in a group in definition syntax (#358)

3.2.0 (March 4, 2026)

  • Added "sideEffects": false in package.json
  • Added list option to the parse() method to specify whether the parser should produce a List (by default, list: true) or an array (list: false) for node's children (e.g., SelectorList, Block, etc.)
  • Added support for Functional Notation in definition syntax (for now by wrapping function arguments into an implicit group when necessary, see #292)
  • Added support for stacked multipliers {A}? and {A,B}? according to spec in definition syntax parsing (#346)
  • Added math functions support in syntax matching (e.g., min(), max(), etc.) (#344)
  • Added onToken option to the parse() method, which can be either an array or a function:
    • When the value is an array, it is populated with objects { type, start, end } (token type, and its start and end offsets).
    • When the value is a function, it accepts type, start, end, and index parameters, and is invoked with a token API as this, enabling advanced token handling (see onToken). For example, the following demonstrates checking if all block tokens have matching pairs:
      parse(css, {
          onToken(type, start, end, index) {
              if (this.isBlockOpenerTokenType(type)) {
                  if (this.getBlockPairTokenIndex(index) === -1) {
                      console.warn('No closing pair for', this.getTokenValue(index), this.getRangeLocation(start, end));
                  }
              } else if (this.isBlockCloserTokenType(type)) {
                  if (this.getBlockPairTokenIndex(index) === -1) {
                      console.warn('No opening pair for', this.getTokenValue(index), this.getRangeLocation(start, end));
                  }
              }
          }
      });
  • Extended TokenStream with the following methods:
    • getTokenEnd(tokenIndex) – returns the token's end offset by index, complementing getTokenStart(tokenIndex)
    • getTokenType(tokenIndex) – returns the token's type by index
    • isBlockOpenerTokenType(tokenType) – returns true for <function-token>, <(-token>, <[-token>, and <{-token>
    • isBlockCloserTokenType(tokenType) – returns true for <)-token>, <]-token>, and <}-token>
    • getBlockTokenPairIndex(tokenIndex) – returns the index of the pair token for a block, or -1 if no pair exists
  • Changed generate() to not auto insert whitespaces between tokens for raw values (#356)
  • Fixed fork() to extend node definitions instead of overriding them. For example, fork({ node: { Dimension: { generate() { /* ... */ } } } }) will now update only the generate() method on the Dimension node, while inheriting all other properties from the previous syntax definition.
  • Bumped mdn/data to 2.27.1 and various fixes in syntaxes
Commits

Updates nanoid from 5.1.6 to 5.1.7

Release notes

Sourced from nanoid's releases.

5.1.7

Changelog

Sourced from nanoid's changelog.

5.1.7

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod group with 3 updates: [@floating-ui/dom](https://github.com/floating-ui/floating-ui/tree/HEAD/packages/dom), [css-tree](https://github.com/csstree/csstree) and [nanoid](https://github.com/ai/nanoid).


Updates `@floating-ui/dom` from 1.7.5 to 1.7.6
- [Release notes](https://github.com/floating-ui/floating-ui/releases)
- [Changelog](https://github.com/floating-ui/floating-ui/blob/master/packages/dom/CHANGELOG.md)
- [Commits](https://github.com/floating-ui/floating-ui/commits/@floating-ui/dom@1.7.6/packages/dom)

Updates `css-tree` from 3.1.0 to 3.2.1
- [Release notes](https://github.com/csstree/csstree/releases)
- [Changelog](https://github.com/csstree/csstree/blob/master/CHANGELOG.md)
- [Commits](csstree/csstree@v3.1.0...v3.2.1)

Updates `nanoid` from 5.1.6 to 5.1.7
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@5.1.6...5.1.7)

---
updated-dependencies:
- dependency-name: "@floating-ui/dom"
  dependency-version: 1.7.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod
- dependency-name: css-tree
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod
- dependency-name: nanoid
  dependency-version: 5.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 1, 2026
@netlify
Copy link
Copy Markdown

netlify Bot commented Apr 1, 2026

Deploy Preview for anchor-polyfill ready!

Name Link
🔨 Latest commit cb33d9e
🔍 Latest deploy log https://app.netlify.com/projects/anchor-polyfill/deploys/69cd29503cf95d00098d2cf5
😎 Deploy Preview https://deploy-preview-391--anchor-polyfill.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify
Copy link
Copy Markdown

netlify Bot commented Apr 1, 2026

Deploy Preview for anchor-position-wpt canceled.

Name Link
🔨 Latest commit cb33d9e
🔍 Latest deploy log https://app.netlify.com/projects/anchor-position-wpt/deploys/69cd295074418d000824de79

@jgerigmeyer jgerigmeyer merged commit 134ad9d into main Apr 1, 2026
13 checks passed
@jgerigmeyer jgerigmeyer deleted the dependabot/npm_and_yarn/prod-0011aef14d branch April 1, 2026 14:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant