Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 16, 2025

Bumps reffy from 19.2.4 to 20.0.0.

Changelog

Sourced from reffy's changelog.

v20.0.0 - 2025-10-15

Breaking changes

Version 20.0.0 updates the cssmerge post-processing step to move nested at-rules to the root atrules level. The nested at-rules are scoped to the parent at-rule(s) through the for property. This change is breaking in the sense that there were no at-rule at the root level scoped to another at-rule in previous versions. Only known scoped at-rules for now in web specifications are those defined for @font-feature-values.

You may consider version 20 to be a minor version bump if you do not use the cssmerge post-processing step, or if you do not process at-rules in any way.

Dependency bumps

  • Bump respec from 35.5.1 to 35.6.0 (#1957)
  • Bump puppeteer from 24.23.0 to 24.25.0 (#1961)
  • Bump web-specs from 3.67.0 to 3.68.0 (#1960)

v19.0.0 - 2025-06-13

Breaking changes

Version 18.8.0 introduced a new cssmerge post-processing step to consolidate CSS extracts into a single file. Version 19 changes the structure of the consolidated file a bit. Breaking changes are:

  • [CSS post-processing] Unwrap type names (breaking) (#1862)
  • [CSS post-processing] Use syntax for syntaxes (breaking) (#1861)
  • [CSS post-processing] Merge scopes when possible (breaking) (#1858)

In other words, unless you had already adopted the cssmerge post-processing step, you may consider version 19 to be a minor version bump.

Dependency bumps

  • Bump rollup from 4.42.0 to 4.43.0 (#1856)
  • Bump respec from 35.4.0 to 35.4.1 (#1860)
  • Bump brace-expansion from 2.0.1 to 2.0.2 (#1857)
  • Bump puppeteer from 24.10.0 to 24.10.1 (#1863)

v18.0.0 - 2024-11-29

Breaking change

  • Bump minimal supported version of Node.js from v20.12.1 to v20.18.1 (#1717)

Required by dependency on Undici, although note this dependency is only for tests (devDependencies in package.json).

Dependency bumps

  • Bump undici from 6.21.0 to 7.0.0 (#1716)
  • Bump puppeteer from 23.8.0 to 23.9.0 (#1711)
  • Bump rollup from 4.26.0 to 4.27.4 (#1713)
  • Bump respec from 35.1.2 to 35.2.0 (#1714)
  • Bump web-specs from 3.26.0 to 3.28.0 (#1715)
  • Bump cross-spawn from 7.0.3 to 7.0.6 (#1710)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [reffy](https://github.com/w3c/reffy) from 19.2.4 to 20.0.0.
- [Changelog](https://github.com/w3c/reffy/blob/main/CHANGELOG.md)
- [Commits](https://github.com/w3c/reffy/commits)

---
updated-dependencies:
- dependency-name: reffy
  dependency-version: 20.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 16, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 16, 2025

Superseded by #1704.

@dependabot dependabot bot closed this Oct 16, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/reffy-20.0.0 branch October 16, 2025 10:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants