Skip to content

chore(deps-dev): bump svgo from 1.3.2 to 4.0.2 in the npm_and_yarn group across 1 directory - #60

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-d6a942a26f
Open

chore(deps-dev): bump svgo from 1.3.2 to 4.0.2 in the npm_and_yarn group across 1 directory#60
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-d6a942a26f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 1 update in the / directory: svgo.

Updates svgo from 1.3.2 to 4.0.2

Release notes

Sourced from svgo's releases.

v4.0.2

What's Changed

Security

Bug Fixes

Performance

Other Changes

v4.0.1

What's Changed

Dependencies

  • Sets minimum version of sax (XML parser) to v1.5.0, which improves built-in guards against entity expansion.

Bug Fixes

Performance

Other Changes

  • Plugins no longer include if they are enabled or disabled by default, as this was written inconsistently. The --show-plugins argument appends the presets a plugin is in to the end of the line. By @鈥媣iralcodex in svg/svgo#2174
  • Plugin/preset types to enforce the name start with preset- if it is a preset (collection of plugins). By @鈥婼ethFalco in svg/svgo#2178

Metrics

Before and after of the browser bundle of each respective version:

| | v4.0.0 | v4.0.1 | Delta |

... (truncated)

Commits
  • b2309cf chore: sync version with api
  • f529cfc Merge commit from fork
  • 581fe68 performance: speed up mergePath child node removal (#2216)
  • eb4c8b6 docs(removeAttributesBySelector): properly document and check types (#2215)
  • 6fd5872 fix(convertColors): skip convertCase on css custom properties (#2213)
  • 7414f73 fix: properly parse negative (or +) arc radii (#2205)
  • a8c19aa fix: only call encodeSVGDatauri once and add test case (#2053)
  • 65548f4 fix(convertPathData): properly handle consecutive t commands (#2156)
  • a41a7c1 fix(convertPathData): introducing isSafeToRemove (#2164)
  • 38625dd test: handle charm icons (#2203)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by sethiii, a new releaser for svgo since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-d6a942a26f branch from a51dbc8 to 7bfce92 Compare August 9, 2026 06:11
Bumps the npm_and_yarn group with 1 update in the / directory: [svgo](https://github.com/svg/svgo).


Updates `svgo` from 1.3.2 to 4.0.2
- [Release notes](https://github.com/svg/svgo/releases)
- [Commits](svg/svgo@v1.3.2...v4.0.2)

---
updated-dependencies:
- dependency-name: svgo
  dependency-version: 4.0.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-d6a942a26f branch from 7bfce92 to 94c1457 Compare August 9, 2026 07:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants