chore(deps): update [dev] minor and patch dependencies for gatsby-plugin-image

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/babel__core (source)	^7.1.12 -> ^7.20.5
@types/babel__traverse (source)	^7.11.1 -> ^7.20.6
@types/node (source)	^14.10.2 -> ^14.18.63
@types/prop-types (source)	^15.7.3 -> ^15.7.13
@types/react (source)	^17.0.40 -> ^17.0.83
@types/react-dom (source)	^17.0.13 -> ^17.0.25
cssnano	^4.1.10 -> ^4.1.11
do-sync (source)	^3.0.18 -> ^3.1.1
microbundle	^0.15.0 -> ^0.15.1
postcss (source)	^8.2.9 -> ^8.4.49
terser (source)	^5.3.8 -> ^5.36.0

---

Release Notes

cssnano/cssnano (cssnano)

v4.1.11

Compare Source

4.1.11

Bug Fixes

• fix CVE-2021-28092

developit/microbundle (microbundle)

v0.15.1

Compare Source

Patch Changes

• cebafa1 #​961 Thanks @​zyrong! - Fix for when multiple entries reference different CSS, only the CSS referenced by the first entry will be packaged

• 9a4e2b2 #​954 Thanks @​rschristian! - Bumps Node target to v12

• 4ad4b76 #​967 Thanks @​agilgur5! - deps: upgrade rpt2 to latest v0.32.0 to fix monorepos

• 6018e58 #​956 Thanks @​rschristian! - Silences warnings when using Node builtins with the 'node:...' protocol on imports. Warnings related to bare usage of these builtins were already silenced.

• 88241dd #​968 Thanks @​PeterBurner! - deps: upgrade babel-plugin-transform-async-to-promises to latest v0.8.18 to fix #​565

• e72377a #​964 Thanks @​rschristian! - Fixes filename generation for es & modern outputs. Both 'jsnext:main' and 'esmodule' were incorrectly ignored.

postcss/postcss (postcss)

v8.4.49

Compare Source

• Fixed custom syntax without source.offset (by @​romainmenke).

v8.4.48

Compare Source

• Fixed position calculation in error/warnings methods (by @​romainmenke).

v8.4.47

Compare Source

• Removed debug code.

v8.4.46

Compare Source

• Fixed Cannot read properties of undefined (reading 'before').

v8.4.45

Compare Source

• Removed unnecessary fix which could lead to infinite loop.

v8.4.44

Compare Source

• Another way to fix markClean is not a function error.

v8.4.43

Compare Source

• Fixed markClean is not a function error.

v8.4.42

Compare Source

• Fixed CSS syntax error on long minified files (by @​varpstar).

v8.4.41

Compare Source

• Fixed types (by @​nex3 and @​querkmachine).
• Cleaned up RegExps (by @​bluwy).

v8.4.40

Compare Source

• Moved to getter/setter in nodes types to help Sass team (by @​nex3).

v8.4.39

Compare Source

• Fixed CssSyntaxError types (by @​romainmenke).

v8.4.38

Compare Source

• Fixed endIndex: 0 in errors and warnings (by @​romainmenke).

v8.4.37

Compare Source

• Fixed original.column are not numbers error in another case.

v8.4.36

Compare Source

• Fixed original.column are not numbers error on broken previous source map.

v8.4.35

Compare Source

• Avoid ! in node.parent.nodes type.
• Allow to pass undefined to node adding method to simplify types.

v8.4.34

Compare Source

• Fixed AtRule#nodes type (by Tim Weißenfels).
• Cleaned up code (by Dmitry Kirillov).

v8.4.33

Compare Source

• Fixed NoWorkResult behavior difference with normal mode (by Romain Menke).
• Fixed NoWorkResult usage conditions (by @​ahmdammarr).

v8.4.32

Compare Source

• Fixed postcss().process() types (by Andrew Ferreira).

v8.4.31

Compare Source

• Fixed \r parsing to fix CVE-2023-44270.

v8.4.30

Compare Source

• Improved source map performance (by Romain Menke).

v8.4.29

Compare Source

• Fixed Node#source.offset (by Ido Rosenthal).
• Fixed docs (by Christian Oliff).

v8.4.28

Compare Source

• Fixed Root.source.end for better source map (by Romain Menke).
• Fixed Result.root types when process() has no parser.

v8.4.27

Compare Source

• Fixed Container clone methods types.

v8.4.26

Compare Source

• Fixed clone methods types.

v8.4.25

Compare Source

• Improve stringify performance (by Romain Menke).
• Fixed docs (by @​vikaskaliramna07).

v8.4.24

Compare Source

• Fixed Plugin types.

v8.4.23

Compare Source

• Fixed warnings in TypeDoc.

v8.4.22

Compare Source

• Fixed TypeScript support with node16 (by Remco Haszing).

v8.4.21

Compare Source

• Fixed Input#error types (by Aleks Hudochenkov).

v8.4.20

Compare Source

• Fixed source map generation for childless at-rules like @layer.

v8.4.19

Compare Source

• Fixed whitespace preserving after AST transformations (by Romain Menke).

v8.4.18

Compare Source

• Fixed an error on absolute: true with empty sourceContent (by Rene Haas).

v8.4.17

Compare Source

• Fixed Node.before() unexpected behavior (by Romain Menke).
• Added TOC to docs (by Mikhail Dedov).

v8.4.16

Compare Source

• Fixed Root AST migration.

v8.4.15

Compare Source

• Fixed AST normalization after using custom parser with old PostCSS AST.

v8.4.14

Compare Source

• Print “old plugin API” warning only if plugin was used (by @​zardoy).

v8.4.13

Compare Source

• Fixed append() error after using .parent (by Jordan Pittman).

v8.4.12

Compare Source

• Fixed package.funding to have same value between all PostCSS packages.

v8.4.11

Compare Source

• Fixed Declaration#raws.value type.

v8.4.10

Compare Source

• Fixed package.funding URL format.

v8.4.9

Compare Source

• Fixed package.funding (by Álvaro Mondéjar).

v8.4.8

Compare Source

• Fixed end position in empty Custom Properties.

v8.4.7

Compare Source

• Fixed Node#warn() type (by Masafumi Koba).
• Fixed comment removal in values after ,.

v8.4.6

Compare Source

• Prevented comment removing when it change meaning of CSS.
• Fixed parsing space in last semicolon-less CSS Custom Properties.
• Fixed comment cleaning in CSS Custom Properties with space.
• Fixed throwing an error on .root access for plugin-less case.

v8.4.5

Compare Source

• Fixed raws types to make object extendable (by James Garbutt).
• Moved from Yarn 1 to pnpm.

v8.4.4

Compare Source

• Fixed absolute path in source map on zero plugins mode.

v8.4.3

Compare Source

• Fixed this.css.replace is not a function error.

v8.4.2

Compare Source

• Fixed Node#source.offset (by Ido Rosenthal).
• Fixed docs (by Christian Oliff).

v8.4.1

Compare Source

• Fixed whitespace preserving after AST transformations (by Romain Menke).

v8.4.0: 8.4 “President Camio”

Compare Source

PostCSS 8.4 brought ranges for warnings and errors, smaller node_modules size, lazy parsing to avoid PostCSS does nothing warning, and TypeScript fixes.

Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

• Tidelift with a Spotify-like subscription model supporting all projects from your lock file.
• Direct donations in PostCSS & Autoprefixer Open Collective.

Rages for Errors and Warnings

@​adalinesimonian, the author of amazing Stylelint extension for VS Code, added ranges to errors and warnings.

result.warn(msg, { index })           // One character warning at index
result.warn(msg, { endIndex })        // Starts at node start, ends at endIndex
result.warn(msg, { index, endIndex }) // Starts at index, ends at endIndex
result.warn(msg, { start })           // Starts at start, ends at node end
result.warn(msg, { end })             // Starts at node start, ends at end
result.warn(msg, { start, end })      // Starts at start, ends at end
result.warn(msg, { word })            // Starts at word location, ends at word index + length

It will improve DX in the IDE extension.

Lazy Parsing

Previously, we found that many tools run PostCSS even if the developer didn’t pass any PostCSS plugins. Parsing is the most expensive step in CSS processing. It led to a waste of resources without any reason.

We tried to resolve the problem by adding a PostCSS does nothing warning. But it didn’t force tool authors to be more careful with user’s resources.

If PostCSS sees that tool call it without passing plugins (or changing parser/stringifier), PostCSS will not parse CSS (until toll will call Result#root). In 8.4, @​bogdan0083 (with the help of @​WilhelmYakunin) tries to solve the problem in another way. It allows us to save resources and remove the PostCSS does nothing warning.

// No plugins, we do not parse CSS
let result = await postcss().process(css, { from  })
result.css  // Is the same string passed to process()
result.map  // Special 1-to-1 source map
result.root // CSS will parsed only here

Install Size Reduction

With ≈60M weekly downloads, PostCSS has responsibility for the world’s resource spending.

Together with @​7rulnik we reduced source-map-js size. It is transitive dependency of PostCSS.

In 8.4, we moved to a fixed version of source-map-js, which reduced the postcss size in your node_modules from ≈1 MB to 0.3 MB. With the huge popularity of PostCSS, it will free a lot of resources on our CIs.

Migration from Jest to uvu

@​kimoofey refactored all tests from the popular Jest framework to small and fast uvu.

It will not affect end-users. However, it reduced our node_modules size by 33 MB and made tests twice faster (yarn install & yarn unit: 24 → 13 seconds).

TypeScript Fixes

• Added Processor types.
• Added Stringifier types (by @​43081j).
• Fixed types Root and Document in result values (by @​43081j).
• Fixed Node#walkRules() types (by @​hudochenkov).

Other Changes

• Fixed docs (by @​paulshryock).

terser/terser (terser)

v5.36.0

Compare Source

• Support import attributes with syntax

v5.35.0

Compare Source

• Ensure parent directory exists when using --output on CLI (#​1530)

v5.34.1

Compare Source

• bump the rollup devDependency to disable CVE warnings (Terser was not affected)

v5.34.0

Compare Source

• internal: stop assigning properties to objects they don't belong in
• internal: run compress tests in parallel
• drop_console: emit an empty function if the return value of console.METHOD(...) may be called.

v5.33.0

Compare Source

• reduce_vars improved when dealing with hoisted function definitions (#​1544)

v5.32.0

Compare Source

• import("module") can now be input and output from ESTree AST (#​1557)
• BigInt literals can now be input and output from ESTree AST (#​1555)
• typeof an object or array (typeof {} and typeof []) can now be statically evaluated. (#​1546)

v5.31.6

Compare Source

• Retain side effects in a case when the expression is a sequence (comma) expression

v5.31.5

Compare Source

• Revert v5.31.4, which created mysterious issues #​1548, #​1549

v5.31.4

Compare Source

• drop_unused: drop classes which only have side effects in the extends part

v5.31.3

Compare Source

• drop_unused: drop unused parameters from IIFEs in some more situations.

v5.31.2

Compare Source

• drop_unused: scan variables in self-referential class declarations that contain side effects.
• Don't add parens to arrow function when it's the default for an argument (#​1540)
• Update domprops (#​1538)

v5.31.1

Compare Source

• Allow drop-unused to drop the whole assignment (not just the assigned name) in more situations, in order to avoid duplication of long strings.

v5.31.0

Compare Source

• Sync up property mangler exceptions with current contents of Firefox and Chrome environments
• Add more webcomponent properties to property mangler exceptions (#​1525)
• Drop non-nullish constants in ...spreads in objects (#​1141)

v5.30.4

Compare Source

• Fix parsing #private in ... when next to other operators

v5.30.3

Compare Source

• Fix precedence of #private in ... operator

v5.30.2

Compare Source

• Avoid optimizations inside computed keys, because they can cause js-engine-specific bugs.

v5.30.1

Compare Source

• Removed useless \ escapes for non-ascii characters
• Make modern identifier characters quoted for older environments (#​1512)

v5.30.0

Compare Source

• Improve removal of classes referring to themselves

v5.29.2

Compare Source

• Make sure 'computed_props' creates string keys
• Take into account the evaluated size when inlining

v5.29.1

Compare Source

• fix optimisation of all-bits mask check

v5.29.0

Compare Source

• Re-releases previously reverted 5.28.0
• Fix crash while optimizing some bitwise ops
• (internal) Remove needless wrapper for from_moz (#​1499)

v5.28.1

Compare Source

(hotfix release)

• Reverts v5.28.0

v5.28.0

Compare Source

• Optimise redundant or shrinkable bitwise operations (|, ^, &, >>, <<)
• Evaluate some BigInt math operations

v5.27.2

Compare Source

• Recognise this as a reference to the surrounding class in drop_unused. Closes #​1472

v5.27.1

Compare Source

• Fixed case where collapse_vars inlines await expressions into non-async functions.

v5.27.0

Compare Source

• Created minify_sync() alternative to minify() since there's no async code left.

v5.26.0

Compare Source

• Do not take the /*#__PURE__*/ annotation into account when the side_effects compress option is off.
• The preserve_annotations option now automatically opts annotation comments in, instead of requiring the comments option to be configured for this.
• Refuse to parse empty parenthesized expressions (())

v5.25.0

Compare Source

• Regex properties added to reserved property mangler (#​1471)
• pure_new option added to drop unused new expressions.

v5.24.0

Compare Source

• Improve formatting performance in V8 by keeping a small work string and a large output string

v5.23.0

Compare Source

• When top_retain will keep a variable assignment around, inline the assignee when it's shorter than the name (#​1434)
• Remove empty class static {} blocks.

v5.22.0

Compare Source

• Do not unsafely shorten expressions like a?.toString() when they're conditional.
• Avoid running drop_unused in nodes that aren't scopes. Fixes a rare crash.
• When 'module' is enabled, assume strict mode when figuring out scopes.

v5.21.0

Compare Source

• Do not inline functions that would be retained in the toplevel (as this would cause code duplication).
• Fix precedence of arrow function and ternary operator when formatting output.

v5.20.0

Compare Source

• Passing minify() zero files will now throw a clean exception (#​1450)
• drop_console supports passing in an array of console.* method names (#​1445)
• New DOM properties from the WebGPU API have been added for use in the property mangler (#​1436)
• Internal code simplification (#​1437)

v5.19.4

Compare Source

• Prevent creating very deeply nested ternaries from a long list of if..return
• Prevent inlining classes into other functions, to avoid constructors being compared.

v5.19.3

Compare Source

• Fix side effect detection of optional?.chains.
• Add roundRect to domprops.js (#​1426)

v5.19.2

Compare Source

• fix performance hit from avoiding HTML comments in the output

v5.19.1

Compare Source

• Better avoid outputting </script> and HTML comments.
• Fix unused variables in class static blocks not being dropped correctly.
• Fix sourcemap names of methods that are async or static

v5.19.0

Compare Source

• Allow /*@​__MANGLE_PROP__*/ annotation in object.property, in addition to property declarations.

v5.18.2

Compare Source

• Stop using recursion in hoisted defuns fix.

v5.18.1

Compare Source

• Fix major performance issue caused by hoisted defuns' scopes bugfix.

v5.18.0

Compare Source

• Add new /*@​__MANGLE_PROP__*/ annotation, to mark properties that should be mangled.

v5.17.7

Compare Source

• Update some dependencies
• Add consistent sorting for v RegExp flag
• Add inert DOM attribute to domprops

v5.17.6

Compare Source

• Fixes to mozilla AST input and output, for class properties, private properties and static blocks
• Fix outputting a shorthand property in quotes when safari10 and ecma=2015 options are enabled
• configurable and enumerable, used in Object.defineProperty, added to domprops (#​1393)

v5.17.5

Compare Source

• Take into account the non-deferred bits of a class, such as static properties, while dropping unused code.

v5.17.4

Compare Source

• Fix crash when trying to negate a class (!class{})
• Avoid outputting comments between yield/await and its argument
• Fix detection of left-hand-side of assignment, to avoid optimizing it like any other expression in some edge cases

v5.17.3

Compare Source

• Fix issue with trimming a static class property's contents accessing the class as this.

v5.17.2

Compare Source

• Be less conservative when detecting use-before-definition of var in hoisted functions.
• Support unusual (but perfectly valid) initializers of for-in and for-of loops.
• Fix issue where hoisted function would be dropped if it was after a continue statement

v5.17.1

Compare Source

• Fix evaluating .length when the source array might've been mutated

v5.17.0

Compare Source

• Drop vestigial = undefined default argument in IIFE calls (#​1366)
• Evaluate known arrays' .length property when statically determinable
• Add @__KEY__ annotation to mangle string literals (#​1365)

v5.16.9

Compare Source

• Fix parentheses in output of optional chains (a?.b) (#​1374)
• More documentation on source maps (#​1368)
• New lhs_constants option, allowing to stop Terser from swapping comparison operands (#​1361)

v5.16.8

Compare Source

• Become even less conservative around function definitions for reduce_vars
• Fix parsing context of import.meta expressions such that method calls are allowed

v5.16.6

Compare Source

• Become less conservative with analyzing function definitions for reduce_vars
• Parse import.meta as a real AST node and not an object.property

v5.16.5

Compare Source

• Correctly handle AST transform functions that mutate children arrays
• Don't mutate the options object passed to Terser (#​1342)
• Do not treat BigInt like a number

v5.16.4

Compare Source

• Keep (defaultArg = undefined) => ..., because default args don't count for function length
• Prevent inlining variables into ?. optional chains
• Avoid removing unused arguments while transforming
• Optimize iterating AST node lists
• Make sure catch and finally aren't children of try in the AST
• Use modern unicode property escapes (\p{...}) to parse identifiers when available

v5.16.3

Compare Source

• Ensure function definitions, don't assume the values of variables defined after them.

v5.16.2

Compare Source

• Fix sourcemaps with non-ascii characters (#​1318)
• Support string module name and export * as (#​1336)
• Do not move let out of for initializers, as it can change scoping
• Fix a corner case that would generate the invalid syntax if (something) let x ("let" in braceless if body)
• Knowledge of more native object properties (#​1330)
• Got rid of Travis (#​1323)
• Added semi-secret asObject sourcemap option to typescript defs (#​1321)

v5.16.1

Compare Source

• Properly handle references in destructurings (const { [reference]: val } = ...)
• Allow parsing of .#privatefield in nested classes
• Do not evaluate operations that return large strings if that would make the output code larger
• Make collapse_vars handle block scope correctly
• Internal improvements: Typos (#​1311), more tests, small-scale refactoring

v5.16.0

Compare Source

• Disallow private fields in object bodies (#​1011)
• Parse #privatefield in object (#​1279)
• Compress #privatefield in object

v5.15.1

Compare Source

• Fixed missing parentheses around optional chains
• Avoid bare let or const as the bodies of if statements (#​1253)
• Small internal fixes (#​1271)
• Avoid inlining a class twice and creating two equivalent but !== classes.

v5.15.0

Compare Source

• Basic support for ES2022 class static initializer blocks.
• Add AudioWorkletNode constructor options to domprops list (#​1230)
• Make identity function inliner not inline id(...expandedArgs)

---

Configuration

📅 Schedule: Branch creation - "before 7am on the first day of the month" in timezone GMT, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.