Skip to content

Bump cssnano from 9.8.0 to 9.9.0 - #794

Merged
github-actions[bot] merged 1 commit into
Currentfrom
dependabot/npm_and_yarn/cssnano-9.9.0
Oct 19, 2026
Merged

github-actions[bot] merged 1 commit into
Currentfrom
dependabot/npm_and_yarn/cssnano-9.9.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Bumps cssnano from 9.8.0 to 9.9.0.

Release notes

Sourced from cssnano's releases.

v9.9.0

What's Changed

  • cssnano now ships its presets and plugins in a single package, so installing it adds one cssnano package to your dependency tree instead of about thirty, and you have fewer packages to review in audits and lockfile updates.

    preset: 'lite' and preset: 'advanced' now work without installing another package. An installed preset package still takes precedence over the built-in one and prints a one-time CSSNANO_INSTALLED_PRESET warning; pass the imported preset function to keep it without the warning. Full names such as cssnano-preset-default fall back to the built-in preset when no package is installed. Projects that require cssnano-preset-default directly must declare it as a dependency, or switch to preset: ['default', {...}]. overrides and resolutions that pin an individual plugin no longer apply.

Commits
  • a1f4561 Publish cssnano 9.9.0
  • e548b3c test: attempt to load file paths correctly on Windows
  • cd4980f feat: warn when overriding built-in presets and update docs
  • aa6750a fix(mutation): count unapplied mutations as errored, not killed
  • b24b88d refactor(cssnano): fold utils, stylehacks, plugins and presets into cssnano
  • b947c7b docs: reword autoprefixer mentions
  • 3b08f09 Publich cssnano-preset-advanced 10.0.0
  • e2de02b feat!(cssnano-preset-advanced): remove autoprefixer and css-declaration-sorter
  • c1019e8 docs: use default astro output directory
  • af46c61 docs: website copy tweaks
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 19, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​cssnano@​9.8.0 ⏵ 9.9.099 +110079 +10100 +180 -19

View full report

Bumps [cssnano](https://github.com/cssnano/cssnano) from 9.8.0 to 9.9.0.
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/[email protected]@9.9.0)

---
updated-dependencies:
- dependency-name: cssnano
  dependency-version: 9.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/cssnano-9.9.0 branch from 8c3caf4 to f93a6a0 Compare October 19, 2026 21:56
@github-actions
github-actions Bot merged commit 38f3c66 into Current Oct 19, 2026
6 of 11 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/cssnano-9.9.0 branch October 19, 2026 21:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Development

Successfully merging this pull request may close these issues.

1 participant