Skip to content

Bump css_parser from 1.22.0 to 3.0.0 - #123

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bundler/css_parser-3.0.0
Open

Bump css_parser from 1.22.0 to 3.0.0#123
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/bundler/css_parser-3.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 10, 2026

Copy link
Copy Markdown
Contributor

Bumps css_parser from 1.22.0 to 3.0.0.

Changelog

Sourced from css_parser's changelog.

Version 3.0.0

  • Harden read_remote_file, use allow_local_network: true and allow_file_uris: true to bypass

Version 2.2.0

  • Accept CSS <number> values with an omitted integer part (e.g. .1) inside rgb()/rgba()/hsl()/hsla(). Previously RE_COLOUR_NUMERIC and RE_COLOUR_NUMERIC_ALPHA required at least one digit before the decimal point, which caused colours such as rgba(0,0,0,.1) to be silently dropped during shorthand expansion (background-color from background:, border-*-color from border:).

Version 2.1.0

  • Validate ssl when pulling files via https

Version 2.0.0

  • Drop ruby <3.2, fix a memory leak

Version v1.21.1

  • Prefer !important rules over non-!important rules in the same ruleset
  • Minor performance improvements

Version v1.21.0

  • Minor performance improvements

Version v1.20.0

  • Remove iconv conditional require

Version v1.19.1

  • Fix error when parsing values consisting of !important only

Version v1.19.0

  • Deprecate load_uri!, load_file! and load_string! positional arguments over keyword argument
  • Deprecate add_rule! (positional arguments)and add_rule_with_offsets! for add_rule! (keyword argument)
  • RuleSet initialize now takes keyword argument, positional arguments are still supported but deprecated
  • Removed OffsetAwareRuleSet, it's a RuleSet with optional attributes filename and offset
  • Improved performance of block parsing by using StringScanner
  • Improve RuleSet#parse_declarations! performance by using substring search istead of regexps
  • Fix error when parsing values consisting of !important only

Version v1.18.0

  • Drop Ruby 2.7 compatibility for parity with Premailer #149

Version v1.17.1

  • Improve security by using File.read instead of IO.read #149

Version v1.17.0

  • Added user_agent as an option to Parser #146

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code labels Jul 10, 2026
Bumps [css_parser](https://github.com/premailer/css_parser) from 1.22.0 to 3.0.0.
- [Changelog](https://github.com/premailer/css_parser/blob/master/CHANGELOG.md)
- [Commits](premailer/css_parser@v1.22.0...v3.0.0)

---
updated-dependencies:
- dependency-name: css_parser
  dependency-version: 3.0.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/bundler/css_parser-3.0.0 branch from d45591a to 810babf Compare July 24, 2026 16:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file ruby Pull requests that update ruby code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants