v2 from 2.20.10 to 2.20.18 #217

New issue

Closed

opened 2026-09-29 13:00:28 +00:00 by slurdge · 0 comments

slurdge commented

2026-09-29 13:00:28 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/slurdge/goeland/pull/202
Author: @dependabot[bot]
Created: 2/26/2024
Status: ❌ Closed

Base: master ← Head: dependabot/go_modules/github.com/tdewolff/minify/v2-2.20.18

📝 Commits (1)

f966d81 chore(deps): bump github.com/tdewolff/minify/v2 from 2.20.10 to 2.20.18

📊 Changes

2 files changed (+11 additions, -10 deletions)

View changed files

📝 go.mod (+3 -3)
📝 go.sum (+8 -7)

📄 Description

Bumps github.com/tdewolff/minify/v2 from 2.20.10 to 2.20.18.

Release notes

Sourced from github.com/tdewolff/minify/v2's releases.

v2.20.18

cmd: fix --watch functionality, fixes tdewolff/minify#672

v2.20.17

cmd: output statistics now have fixed length, removing dependency on go-humanize

cmd: choose newest atime/mtime to preserve timestamps when using --bundle; allow setting preserve with --bundle; add warnings when ownership/permissions differ between input files when using --bundle; see tdewolff/minify#671

cmd: don't preserve parent directories for --bundle, see tdewolff/minify#671

HTML: keep original attribute quote for all attributes, fixes tdewolff/minify#670

JS: fix precedence of OptionalChaining expression

JS: fix parsing of 'export default expr' where expression can only be an assignment expression

v2.20.16

cmd: revert to report error when specified file has no extension for a minifier

JS: fix memory bug with bang-comments

v2.20.15

Fix ResponseWriter to not minify if there is no supported RequestURI extension or supported Content-Type header, fixes tdewolff/minify#660

JS: fix parsing of comments in expressions and keep all bang-comments at the top of the statement list, fixes tdewolff/minify#664

cmd: fix printing an error when writing to directory but it doesn't exist

cmd: add Debug logging class, don't print error when can't infer mimetype from input but is excluded by --exclude

cmd: update argp package with some fixes

v2.20.14

Update tdewolff/parse: revert ignoring error in lexer of identifier after number to be on the safe side (it should be caught by the parser nonetheless)

v2.20.13

JS: update tdewolff/parse and fix tdewolff/minify#656

HTML: rename KeepConditionalComments => KeepSpecialComments, fixes tdewolff/minify#657

JS: support parsing binary/octal/hexadecimal integers with big int suffix, fixes https://redirect.github.com/tdewolff/parse/issues/116

JS: fix parsing of for/for-of/for-in regarding LHSExpr vs Expr

JS: fix parsing of semicolon after import() CallExpression

v2.20.12

JS: fix escaping of single/double/backtick quotes in strings when encoded as unicode escape literal, fixes tdewolff/minify#654

v2.20.11

HTML: fix whitespace after and , see tdewolff/minify#611

JS: fix converting \n and \r to unicode in string and template literals tdewolff/minify#653

Commits

1508f98 Fix --watch functionality, fixes #672
a8e2179 Merge branch 'master' of github.com:tdewolff/minify
c39145f Fix security of JS dependency
a585a49 Merge pull request #655 from tdewolff/dependabot/npm_and_yarn/bindings/js/nod...
8690ba5 Merge pull request #668 from tdewolff/dependabot/github_actions/golangci/gola...
f503673 Merge pull request #667 from tdewolff/dependabot/github_actions/pypa/cibuildw...
a72c2ec HTML: keep original attribute quote for all attributes, fixes #670
c754bf5 cmd: don't preserve parent directories for --bundle, see #671
6b9175d cmd: choose newest atime/mtime to preserve timestamps when using --bundle; al...
f27fd34 cmd: output statistics now have fixed length, removing dependency on go-humanize
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/slurdge/goeland/pull/202 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 2/26/2024 **Status:** ❌ Closed **Base:** `master` ← **Head:** `dependabot/go_modules/github.com/tdewolff/minify/v2-2.20.18` --- ### 📝 Commits (1) - [`f966d81`](https://github.com/slurdge/goeland/commit/f966d816f50416265c4e318454c4c1258f6d4a4d) chore(deps): bump github.com/tdewolff/minify/v2 from 2.20.10 to 2.20.18 ### 📊 Changes **2 files changed** (+11 additions, -10 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+3 -3) 📝 `go.sum` (+8 -7) </details> ### 📄 Description Bumps [github.com/tdewolff/minify/v2](https://github.com/tdewolff/minify) from 2.20.10 to 2.20.18. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tdewolff/minify/releases">github.com/tdewolff/minify/v2's releases</a>.</em></p> <blockquote> <h2>v2.20.18</h2> <ul> <li><a href="https://github.com/tdewolff/minify/commit/1508f98414a1b1398639d8fe38816e99da51859e">cmd: fix --watch functionality,</a> <a href="https://github.com/tdewolff/minify/commit/1508f98414a1b1398639d8fe38816e99da51859e">fixes</a> <a href="https://redirect.github.com/tdewolff/minify/issues/672">tdewolff/minify#672</a></li> </ul> <h2>v2.20.17</h2> <ul> <li><a href="https://github.com/tdewolff/minify/commit/f27fd34c5315594bcb80c2d3f75b617925415d32">cmd: output statistics now have fixed length, removing dependency on go-humanize</a></li> <li><a href="https://github.com/tdewolff/minify/commit/6b9175d2baee924112fab94ff601547d7fb99bbf">cmd: choose newest atime/mtime to preserve timestamps when using --bundle; allow setting preserve with --bundle; add warnings when ownership/permissions differ between input files when using --bundle; see</a> <a href="https://redirect.github.com/tdewolff/minify/issues/671">tdewolff/minify#671</a></li> <li><a href="https://github.com/tdewolff/minify/commit/c754bf52bd6cf6ea65ce52d88204e37aebd0228d">cmd: don't preserve parent directories for --bundle, see</a> <a href="https://redirect.github.com/tdewolff/minify/issues/671">tdewolff/minify#671</a></li> <li><a href="https://github.com/tdewolff/minify/commit/a72c2ec610988130ae82e34cea4466a06a16457c">HTML: keep original attribute quote for all attributes,</a> <a href="https://github.com/tdewolff/minify/commit/a72c2ec610988130ae82e34cea4466a06a16457c">fixes</a> <a href="https://redirect.github.com/tdewolff/minify/issues/670">tdewolff/minify#670</a></li> <li><a href="https://github.com/tdewolff/parse/commit/3b2a162fdb5403e0e8fd3e120da653375f970265">JS: fix precedence of OptionalChaining expression</a></li> <li><a href="https://github.com/tdewolff/parse/commit/3381c44c56c03890f434f45d0ecca109ffe6a24b">JS: fix parsing of 'export default expr' where expression can only be an assignment expression</a></li> </ul> <h2>v2.20.16</h2> <ul> <li><a href="https://github.com/tdewolff/minify/commit/b082f0427cff58d2bd8cba3c38c9a1bbc3da79a5">cmd: revert to report error when specified file has no extension for a minifier</a></li> <li><a href="https://github.com/tdewolff/minify/commit/577ab958a3172d8fceb2e1b36ab7b18aeb675f03">JS: fix memory bug with bang-comments</a></li> </ul> <h2>v2.20.15</h2> <ul> <li><a href="https://github.com/tdewolff/minify/commit/f9aa0ad0c35a277f044a0c72b99db68bc4c66d36">Fix ResponseWriter to not minify if there is no supported RequestURI extension or supported Content-Type header, fixes</a> <a href="https://redirect.github.com/tdewolff/minify/issues/660">tdewolff/minify#660</a></li> <li><a href="https://github.com/tdewolff/minify/commit/d3022691eef0ee5fb68f34222167acdbc88abb7e">JS: fix parsing of comments in expressions and keep all bang-comments at the top of the statement list, fixes</a> <a href="https://redirect.github.com/tdewolff/minify/issues/664">tdewolff/minify#664</a></li> <li><a href="https://github.com/tdewolff/minify/commit/8b9a65f91bb850c2c425b74dc4f962adba525334">cmd: fix printing an error when writing to directory but it doesn't exist</a></li> <li><a href="https://github.com/tdewolff/minify/commit/fcf5661e818c9275fd45370d94e94d7eec08b45e">cmd: add Debug logging class, don't print error when can't infer mimetype from input but is excluded by --exclude</a></li> <li>cmd: update argp package with some fixes</li> </ul> <h2>v2.20.14</h2> <ul> <li>Update tdewolff/parse: revert ignoring error in lexer of identifier after number to be on the safe side (it should be caught by the parser nonetheless)</li> </ul> <h2>v2.20.13</h2> <ul> <li><a href="https://github.com/tdewolff/minify/commit/7846cd72acd7b05a58764e41ecfbff35d03639a7">JS: update tdewolff/parse and</a> <a href="https://github.com/tdewolff/minify/commit/7846cd72acd7b05a58764e41ecfbff35d03639a7">fix</a> <a href="https://redirect.github.com/tdewolff/minify/issues/656">tdewolff/minify#656</a></li> <li><a href="https://github.com/tdewolff/minify/commit/342cbc1974162db0ad3327f7a42a623b2cd3ebbc">HTML: rename KeepConditionalComments => KeepSpecialComments,</a> <a href="https://github.com/tdewolff/minify/commit/342cbc1974162db0ad3327f7a42a623b2cd3ebbc">fixes</a> <a href="https://redirect.github.com/tdewolff/minify/issues/657">tdewolff/minify#657</a></li> <li><a href="https://github.com/tdewolff/parse/commit/3ced090ab4691ceab5450646553f61b7bfe29713">JS: support parsing binary/octal/hexadecimal integers with big int suffix, fixes https://redirect.github.com/tdewolff/parse/issues/116</a></li> <li><a href="https://github.com/tdewolff/parse/commit/64705f80a24aebbe0b23a8424376b2a7612372a7">JS: fix parsing of for/for-of/for-in regarding LHSExpr vs Expr</a></li> <li><a href="https://github.com/tdewolff/parse/commit/202ca9629ad7eca246cb0c7e03761754d5dfdcf9">JS: fix parsing of semicolon after import() CallExpression</a></li> </ul> <h2>v2.20.12</h2> <p><a href="https://github.com/tdewolff/minify/commit/6b459730bc91d5e1add4728d2583dcc449b6278e">JS: fix escaping of single/double/backtick quotes in strings when encoded as unicode escape literal, fixes</a> <a href="https://redirect.github.com/tdewolff/minify/issues/654">tdewolff/minify#654</a></p> <h2>v2.20.11</h2> <ul> <li><a href="https://github.com/tdewolff/minify/commit/91a4f4b19a72580be4509ea9e9c47406671ff92c">HTML: fix whitespace after  and , see</a> <a href="https://redirect.github.com/tdewolff/minify/issues/611">tdewolff/minify#611</a></li> <li><a href="https://github.com/tdewolff/minify/commit/55d52d2cdf701ddaeff2483569946a1d1e72cf6f">JS: fix converting \n and \r to unicode in string and template literals</a> <a href="https://redirect.github.com/tdewolff/minify/issues/653">tdewolff/minify#653</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tdewolff/minify/commit/1508f98414a1b1398639d8fe38816e99da51859e"><code>1508f98</code></a> Fix --watch functionality, fixes <a href="https://redirect.github.com/tdewolff/minify/issues/672">#672</a></li> <li><a href="https://github.com/tdewolff/minify/commit/a8e217982e3e6597390813995e93b737a4d4f346"><code>a8e2179</code></a> Merge branch 'master' of github.com:tdewolff/minify</li> <li><a href="https://github.com/tdewolff/minify/commit/c39145f2acae1831fbce2cf44e88b4cb3ad56f0b"><code>c39145f</code></a> Fix security of JS dependency</li> <li><a href="https://github.com/tdewolff/minify/commit/a585a4978a9f5deea06ada5b28ad9d95e3d5f729"><code>a585a49</code></a> Merge pull request <a href="https://redirect.github.com/tdewolff/minify/issues/655">#655</a> from tdewolff/dependabot/npm_and_yarn/bindings/js/nod...</li> <li><a href="https://github.com/tdewolff/minify/commit/8690ba5f4b9f79a992bc3fbcd9287ef7572426b1"><code>8690ba5</code></a> Merge pull request <a href="https://redirect.github.com/tdewolff/minify/issues/668">#668</a> from tdewolff/dependabot/github_actions/golangci/gola...</li> <li><a href="https://github.com/tdewolff/minify/commit/f50367345d0a55bf9eec3b351eb8678d87b147e8"><code>f503673</code></a> Merge pull request <a href="https://redirect.github.com/tdewolff/minify/issues/667">#667</a> from tdewolff/dependabot/github_actions/pypa/cibuildw...</li> <li><a href="https://github.com/tdewolff/minify/commit/a72c2ec610988130ae82e34cea4466a06a16457c"><code>a72c2ec</code></a> HTML: keep original attribute quote for all attributes, fixes <a href="https://redirect.github.com/tdewolff/minify/issues/670">#670</a></li> <li><a href="https://github.com/tdewolff/minify/commit/c754bf52bd6cf6ea65ce52d88204e37aebd0228d"><code>c754bf5</code></a> cmd: don't preserve parent directories for --bundle, see <a href="https://redirect.github.com/tdewolff/minify/issues/671">#671</a></li> <li><a href="https://github.com/tdewolff/minify/commit/6b9175d2baee924112fab94ff601547d7fb99bbf"><code>6b9175d</code></a> cmd: choose newest atime/mtime to preserve timestamps when using --bundle; al...</li> <li><a href="https://github.com/tdewolff/minify/commit/f27fd34c5315594bcb80c2d3f75b617925415d32"><code>f27fd34</code></a> cmd: output statistics now have fixed length, removing dependency on go-humanize</li> <li>Additional commits viewable in <a href="https://github.com/tdewolff/minify/compare/v2.20.10...v2.20.18">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/tdewolff/minify/v2&package-manager=go_modules&previous-version=2.20.10&new-version=2.20.18)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>