v2 from 2.19.10 to 2.20.7 #194

New issue

Closed

opened 2026-09-29 13:00:16 +00:00 by slurdge · 0 comments

slurdge commented

2026-09-29 13:00:16 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/slurdge/goeland/pull/177
Author: @dependabot[bot]
Created: 11/20/2023
Status: ❌ Closed

Base: master ← Head: dependabot/go_modules/github.com/tdewolff/minify/v2-2.20.7

📝 Commits (1)

73f1af4 chore(deps): bump github.com/tdewolff/minify/v2 from 2.19.10 to 2.20.7

📊 Changes

2 files changed (+11 additions, -12 deletions)

View changed files

📝 go.mod (+3 -3)
📝 go.sum (+8 -9)

📄 Description

Bumps github.com/tdewolff/minify/v2 from 2.19.10 to 2.20.7.

Release notes

Sourced from github.com/tdewolff/minify/v2's releases.

v2.20.7

JS: fix parsing of empty for-loop, fixes tdewolff/minify#636

v2.20.6

JS: fix merging of var decls when moving to a hoisted decl, fixes tdewolff/minify#634

JS: fix parsing invalid PrivateIdentifiers

v2.20.5

HTML: fix bug when parsing inline JavaScript, fixes tdewolff/minify#631

HTML: don't minify in style/script if it contains templates, see tdewolff/minify#621

HTML: disable lowercasing attribute values; the effect is almost negligible and problems can arise when combining with CSS or JS, fixes https://redirect.github.com/tdewolff/minify/issues/620

v2.20.4

Update Python release

v2.20.3

Update JavaScript and Python packages

v2.20.2

HTML: support Go templates, fixes tdewolff/minify#35

HTML: update attribute traits, see tdewolff/minify#620

cmd: fix bug in argp, fixes tdewolff/minify#624

Update Python and JS workflows

v2.20.1

JS: allow return in class/object methods, fixes tdewolff/minify#623

JS: support 'PrivateIdentifier in ShiftExpression'

Fix Python binding

v2.20.0

Update Python binding to use CFFI thanks to @pydsigner

JS: fix bug in var decl merging with for-in statements

JS: improve var hoisting when redeclaring the same variable

JS: remove import statement with empty named imports

JS: merge expression stmt with for initializer

JS: support ECMAVersion < 2015 for template literals, fixes tdewolff/minify#621

And many JS fixes from https://github.com/tdewolff/parse/releases/tag/v2.7.0

Commits

be084bb JS: fix parsing of empty for-loop, fixes #636
ae44b29 Merge branch 'master' of github.com:tdewolff/minify
36dd545 Fix Docker version tag in workflow, see #625
82f2e91 Merge pull request #635 from tdewolff/dependabot/npm_and_yarn/bindings/js/nod...
5cfb4a6 Bump node-gyp from 10.0.0 to 10.0.1 in /bindings/js
036acf0 Update tdewolff/parse; fix parsing invalid JS privateIdentifiers
7ecf36b Remove CodeCoverage due to many failures
45e2243 Add failing Python test, see #535
309aa59 Merge branch 'master' of github.com:tdewolff/minify
931ec3e JS: fix merging of var decls when moving to a hoisted decl, fixes #634
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/slurdge/goeland/pull/177 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 11/20/2023 **Status:** ❌ Closed **Base:** `master` ← **Head:** `dependabot/go_modules/github.com/tdewolff/minify/v2-2.20.7` --- ### 📝 Commits (1) - [`73f1af4`](https://github.com/slurdge/goeland/commit/73f1af49ff2192173bb4783e8d7f37a781c303f0) chore(deps): bump github.com/tdewolff/minify/v2 from 2.19.10 to 2.20.7 ### 📊 Changes **2 files changed** (+11 additions, -12 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+3 -3) 📝 `go.sum` (+8 -9) </details> ### 📄 Description Bumps [github.com/tdewolff/minify/v2](https://github.com/tdewolff/minify) from 2.19.10 to 2.20.7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tdewolff/minify/releases">github.com/tdewolff/minify/v2's releases</a>.</em></p> <blockquote> <h2>v2.20.7</h2> <ul> <li><a href="https://github.com/tdewolff/minify/commit/be084bb11b53852ae0b8147585b210bed1f85a85">JS: fix parsing of empty for-loop,</a> <a href="https://github.com/tdewolff/minify/commit/be084bb11b53852ae0b8147585b210bed1f85a85">fixes</a> <a href="https://redirect.github.com/tdewolff/minify/issues/636">tdewolff/minify#636</a></li> </ul> <h2>v2.20.6</h2> <ul> <li><a href="https://github.com/tdewolff/minify/commit/931ec3eee37887222e694a381ebb8ef1b23701e3">JS: fix merging of var decls when moving to a hoisted decl,</a> <a href="https://github.com/tdewolff/minify/commit/931ec3eee37887222e694a381ebb8ef1b23701e3">fixes</a> <a href="https://redirect.github.com/tdewolff/minify/issues/634">tdewolff/minify#634</a></li> <li><a href="https://github.com/tdewolff/minify/commit/036acf01a364ca8e0acb0445f444c70b6c06dc8c">JS: fix parsing invalid PrivateIdentifiers</a></li> </ul> <h2>v2.20.5</h2> <ul> <li><a href="https://github.com/tdewolff/minify/commit/652758d3b44a37df82937834bb90ece46d4ccf8e">HTML: fix bug when parsing inline JavaScript,</a> <a href="https://github.com/tdewolff/minify/commit/652758d3b44a37df82937834bb90ece46d4ccf8e">fixes</a> <a href="https://redirect.github.com/tdewolff/minify/issues/631">tdewolff/minify#631</a></li> <li><a href="https://github.com/tdewolff/minify/commit/47e6152becdfd561256dec30279940d93c79ae1f">HTML: don't minify in style/script if it contains templates, see</a> <a href="https://redirect.github.com/tdewolff/minify/issues/621">tdewolff/minify#621</a></li> <li><a href="https://github.com/tdewolff/minify/commit/797d80c286ec5d4f0883ec8bead71b9295551ad9">HTML: disable lowercasing attribute values; the effect is almost negligible and problems can arise when combining with CSS or JS, fixes https://redirect.github.com/tdewolff/minify/issues/620</a></li> </ul> <h2>v2.20.4</h2> <p>Update Python release</p> <h2>v2.20.3</h2> <p>Update JavaScript and Python packages</p> <h2>v2.20.2</h2> <ul> <li><a href="https://github.com/tdewolff/minify/commit/24bb939069496d63166652f528033bd3f792fb89">HTML: support Go templates,</a> <a href="https://github.com/tdewolff/minify/commit/24bb939069496d63166652f528033bd3f792fb89">fixes</a> <a href="https://redirect.github.com/tdewolff/minify/issues/35">tdewolff/minify#35</a></li> <li><a href="https://github.com/tdewolff/minify/commit/cb84f810c28e8b55a6dafa619cdec71ee82a247f">HTML: update attribute traits, see</a> <a href="https://redirect.github.com/tdewolff/minify/issues/620">tdewolff/minify#620</a></li> <li><a href="https://github.com/tdewolff/minify/commit/b7fc5ae022859ac6d226249f724388887b907377">cmd: fix bug in argp,</a> <a href="https://github.com/tdewolff/minify/commit/b7fc5ae022859ac6d226249f724388887b907377">fixes</a> <a href="https://redirect.github.com/tdewolff/minify/issues/624">tdewolff/minify#624</a></li> <li>Update Python and JS workflows</li> </ul> <h2>v2.20.1</h2> <ul> <li><a href="https://github.com/tdewolff/minify/commit/dcff8a93cbe497ac7a078116deafddcb916b2a86">JS: allow return in class/object methods,</a> <a href="https://github.com/tdewolff/minify/commit/dcff8a93cbe497ac7a078116deafddcb916b2a86">fixes</a> <a href="https://redirect.github.com/tdewolff/minify/issues/623">tdewolff/minify#623</a></li> <li><a href="https://github.com/tdewolff/parse/commit/66f42357330ea10b9d14fa9bb331db692e46c1a7">JS: support 'PrivateIdentifier in ShiftExpression'</a></li> <li>Fix Python binding</li> </ul> <h2>v2.20.0</h2> <ul> <li>Update Python binding to use CFFI thanks to <a href="https://github.com/pydsigner"><code>@pydsigner</code></a></li> <li><a href="https://github.com/tdewolff/minify/commit/8e38b17be28586a095631b6677aeeedd70f4641d">JS: fix bug in var decl merging with for-in statements</a></li> <li><a href="https://github.com/tdewolff/minify/commit/61a4bb831795ab7de73f4c395a014b69bd2ac1c5">JS: improve var hoisting when redeclaring the same variable</a></li> <li><a href="https://github.com/tdewolff/minify/commit/19c34c5b8d132f56212908ae22d233f8f035cd59">JS: remove import statement with empty named imports</a></li> <li><a href="https://github.com/tdewolff/minify/commit/1d7174f9241362f515ddf450da5f4fa713c1e2b4">JS: merge expression stmt with for initializer</a></li> <li><a href="https://github.com/tdewolff/minify/commit/08752f695de0510bbd97919f25b0ce4afd338de6">JS: support ECMAVersion < 2015 for template literals,</a> <a href="https://github.com/tdewolff/minify/commit/08752f695de0510bbd97919f25b0ce4afd338de6">fixes</a> <a href="https://redirect.github.com/tdewolff/minify/issues/621">tdewolff/minify#621</a></li> </ul> <p>And many JS fixes from <a href="https://github.com/tdewolff/parse/releases/tag/v2.7.0">https://github.com/tdewolff/parse/releases/tag/v2.7.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tdewolff/minify/commit/be084bb11b53852ae0b8147585b210bed1f85a85"><code>be084bb</code></a> JS: fix parsing of empty for-loop, fixes <a href="https://redirect.github.com/tdewolff/minify/issues/636">#636</a></li> <li><a href="https://github.com/tdewolff/minify/commit/ae44b2906f4067e7f812c4c790cc970e4168aa85"><code>ae44b29</code></a> Merge branch 'master' of github.com:tdewolff/minify</li> <li><a href="https://github.com/tdewolff/minify/commit/36dd545d77db92ed212463dafa1dc7f788965955"><code>36dd545</code></a> Fix Docker version tag in workflow, see <a href="https://redirect.github.com/tdewolff/minify/issues/625">#625</a></li> <li><a href="https://github.com/tdewolff/minify/commit/82f2e913b5ba019a84ab28a4de2aadf2c288fc49"><code>82f2e91</code></a> Merge pull request <a href="https://redirect.github.com/tdewolff/minify/issues/635">#635</a> from tdewolff/dependabot/npm_and_yarn/bindings/js/nod...</li> <li><a href="https://github.com/tdewolff/minify/commit/5cfb4a62ece65aff93c3b7627e13cb40cb5a11d7"><code>5cfb4a6</code></a> Bump node-gyp from 10.0.0 to 10.0.1 in /bindings/js</li> <li><a href="https://github.com/tdewolff/minify/commit/036acf01a364ca8e0acb0445f444c70b6c06dc8c"><code>036acf0</code></a> Update tdewolff/parse; fix parsing invalid JS privateIdentifiers</li> <li><a href="https://github.com/tdewolff/minify/commit/7ecf36b96af950ae61ab7da9bca007fc9decea50"><code>7ecf36b</code></a> Remove CodeCoverage due to many failures</li> <li><a href="https://github.com/tdewolff/minify/commit/45e2243d924327efdd089212f4a97c8a896ee111"><code>45e2243</code></a> Add failing Python test, see <a href="https://redirect.github.com/tdewolff/minify/issues/535">#535</a></li> <li><a href="https://github.com/tdewolff/minify/commit/309aa596238716565265d885cc54aa7524615eda"><code>309aa59</code></a> Merge branch 'master' of github.com:tdewolff/minify</li> <li><a href="https://github.com/tdewolff/minify/commit/931ec3eee37887222e694a381ebb8ef1b23701e3"><code>931ec3e</code></a> JS: fix merging of var decls when moving to a hoisted decl, fixes <a href="https://redirect.github.com/tdewolff/minify/issues/634">#634</a></li> <li>Additional commits viewable in <a href="https://github.com/tdewolff/minify/compare/v2.19.10...v2.20.7">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/tdewolff/minify/v2&package-manager=go_modules&previous-version=2.19.10&new-version=2.20.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>