Skip to content

chore(deps-dev): bump the patch-dependencies group with 4 updates#6295

Merged
github-actions[bot] merged 1 commit intomainfrom
dependabot-npm_and_yarn-patch-dependencies-4afb40f346
Mar 11, 2026
Merged

chore(deps-dev): bump the patch-dependencies group with 4 updates#6295
github-actions[bot] merged 1 commit intomainfrom
dependabot-npm_and_yarn-patch-dependencies-4afb40f346

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 11, 2026 •
edited by github-actions bot
Loading

Bumps the patch-dependencies group with 4 updates: accessibility-checker, esbuild, cssnano and @types/node.

Updates accessibility-checker from 4.0.12 to 4.0.13

Release notes

Sourced from accessibility-checker's releases.

March 4, 2026

What's Changed

Cypress

Extension

Rules / engine

Dependency updates

Full Changelog: IBMa/equal-access@4.0.12...4.0.13

Commits
  • c3d7b49 Merge pull request #2482 from IBMa/archive-2026-03-04
  • d750d5e chore(archive): Create archive for Mar 4, 2026
  • ffeffec Merge pull request #2480 from IBMa/dependabot/npm_and_yarn/accessibility-chec...
  • 223602e Merge branch 'main-4.x' into dependabot/npm_and_yarn/accessibility-checker/np...
  • 54fb21e Merge pull request #2479 from IBMa/engine-sourcemap
  • f9278fc Merge branch 'main-4.x' into engine-sourcemap
  • 7dbec7f Merge pull request #2481 from IBMa/issue-2469
  • 15c2f53 If the thing covering us is empty and has no background, that's okay
  • f07d939 Ignore overlapping content that's empty
  • f03d28a build(deps): bump the npm_and_yarn group across 7 directories with 6 updates
  • Additional commits viewable in compare view

Updates esbuild from 0.27.2 to 0.27.3

Release notes

Sourced from esbuild's releases.

v0.27.3

  • Preserve URL fragments in data URLs (#4370)

    Consider the following HTML, CSS, and SVG:

    • index.html:

      <!DOCTYPE html>
<html>
  <head><link rel="stylesheet" href="icons.css"></head>
  <body><div class="triangle"></div></body>
</html>

    • icons.css:

      .triangle {
  width: 10px;
  height: 10px;
  background: currentColor;
  clip-path: url(./triangle.svg#x);
}

    • triangle.svg:

      <svg xmlns="http://www.w3.org/2000/svg">
  <defs>
    <clipPath id="x">
      <path d="M0 0H10V10Z"/>
    </clipPath>
  </defs>
</svg>

    The CSS uses a URL fragment (the #x) to reference the clipPath element in the SVG file. Previously esbuild's CSS bundler didn't preserve the URL fragment when bundling the SVG using the dataurl loader, which broke the bundled CSS. With this release, esbuild will now preserve the URL fragment in the bundled CSS:

    /* icons.css */
.triangle {
  width: 10px;
  height: 10px;
  background: currentColor;
  clip-path: url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg"><defs><clipPath id="x"><path d="M0 0H10V10Z"/></clipPath></defs></svg>#x');
}

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.27.3

  • Preserve URL fragments in data URLs (#4370)

    Consider the following HTML, CSS, and SVG:

    • index.html:

      <!DOCTYPE html>
<html>
  <head><link rel="stylesheet" href="icons.css"></head>
  <body><div class="triangle"></div></body>
</html>

    • icons.css:

      .triangle {
  width: 10px;
  height: 10px;
  background: currentColor;
  clip-path: url(./triangle.svg#x);
}

    • triangle.svg:

      <svg xmlns="http://www.w3.org/2000/svg">
  <defs>
    <clipPath id="x">
      <path d="M0 0H10V10Z"/>
    </clipPath>
  </defs>
</svg>

    The CSS uses a URL fragment (the #x) to reference the clipPath element in the SVG file. Previously esbuild's CSS bundler didn't preserve the URL fragment when bundling the SVG using the dataurl loader, which broke the bundled CSS. With this release, esbuild will now preserve the URL fragment in the bundled CSS:

    /* icons.css */
.triangle {
  width: 10px;
  height: 10px;
  background: currentColor;
  clip-path: url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg"><defs><clipPath id="x"><path d="M0 0H10V10Z"/></clipPath></defs></svg>#x');
}

... (truncated)

Commits
  • 9129e00 publish 0.27.3 to npm
  • e20e411 small fix to release notes
  • 0dc0f2d fix #4322: parse and print CSS @scope rules
  • 55fe391 update firefox css gradient support
  • 2c35297 update gradient lowering transform
  • 9209e44 Update Go to 1.25.7 (#4388)
  • e8d861b close #4374: compat table for the using feature
  • 19b8887 no longer need williamkapke/node-compat-table
  • 7e44218 the kangax/compat-table repo moved to a new url
  • 23b9338 run make update-compat-table
  • Additional commits viewable in compare view

Updates cssnano from 7.1.2 to 7.1.3

Release notes

Sourced from cssnano's releases.

v7.1.3

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.2...cssnano@7.1.3

Commits
  • b2e9903 Publish cssnano 7.1.3
  • a9f72ef chore: update development dependencies
  • 5674f7a fix(postcss-svgo: update SVGO
  • c3e537a fix: update postcss-selector-parser
  • 5b9af42 fix: update browserlist and autoprefixer
  • c0053c8 chore: add changeset
  • da88eca Optimize selector merging with WeakMap caching
  • cf4fc27 chore(deps-dev): bump diff from 8.0.2 to 8.0.3
  • a985c71 chore: update pnpm
  • 4b2a74a chore: update to ESLint 10
  • Additional commits viewable in compare view

Updates @types/node from 25.3.3 to 25.3.5

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

🔭🐙🐈 Test this branch here: https://design-system.deutschebahn.com/core-web/review/dependabot-npm_and_yarn-patch-dependencies-4afb40f346

@dependabot
chore(deps-dev): bump the patch-dependencies group with 4 updates
d66337c 
Bumps the patch-dependencies group with 4 updates: [accessibility-checker](https://github.com/IBMa/equal-access), [esbuild](https://github.com/evanw/esbuild), [cssnano](https://github.com/cssnano/cssnano) and [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).


Updates `accessibility-checker` from 4.0.12 to 4.0.13
- [Release notes](https://github.com/IBMa/equal-access/releases)
- [Changelog](https://github.com/IBMa/equal-access/blob/main-4.x/CHANGELOG.md)
- [Commits](IBMa/equal-access@4.0.12...4.0.13)

Updates `esbuild` from 0.27.2 to 0.27.3
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.27.2...v0.27.3)

Updates `cssnano` from 7.1.2 to 7.1.3
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/cssnano@7.1.2...cssnano@7.1.3)

Updates `@types/node` from 25.3.3 to 25.3.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: accessibility-checker
  dependency-version: 4.0.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-dependencies
- dependency-name: esbuild
  dependency-version: 0.27.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-dependencies
- dependency-name: cssnano
  dependency-version: 7.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-dependencies
- dependency-name: "@types/node"
  dependency-version: 25.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 11, 2026
@changeset-bot
Copy link

changeset-bot bot commented Mar 11, 2026

⚠️ No Changeset found

Latest commit: d66337c

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions github-actions bot enabled auto-merge (squash) March 11, 2026 22:57
@github-project-automation github-project-automation bot moved this from 🏗 In progress to ⏰ready for release in UX Engineering Team Backlog Mar 11, 2026
@github-actions github-actions bot merged commit 2135470 into main Mar 11, 2026
77 checks passed
@github-actions github-actions bot deleted the dependabot-npm_and_yarn-patch-dependencies-4afb40f346 branch March 11, 2026 23:20
@github-project-automation github-project-automation bot moved this from ⏰ready for release to ✅ Done in UX Engineering Team Backlog Mar 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

🏘components dependencies Pull requests that update a dependency file 🏗foundations javascript Pull requests that update Javascript code 📺showcases Changes to 1-n showcases

Projects

UX Engineering Team Backlog
Status: ✅ Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants