Skip to content

chore(deps-dev): bump svgo from 3.3.4 to 4.0.2 in /client#8512

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/client/svgo-4.0.2
Open

chore(deps-dev): bump svgo from 3.3.4 to 4.0.2 in /client#8512
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/client/svgo-4.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

Bumps svgo from 3.3.4 to 4.0.2.

Release notes

Sourced from svgo's releases.

v4.0.2

What's Changed

Security

Bug Fixes

Performance

Other Changes

v4.0.1

What's Changed

Dependencies

  • Sets minimum version of sax (XML parser) to v1.5.0, which improves built-in guards against entity expansion.

Bug Fixes

Performance

Other Changes

  • Plugins no longer include if they are enabled or disabled by default, as this was written inconsistently. The --show-plugins argument appends the presets a plugin is in to the end of the line. By @​viralcodex in svg/svgo#2174
  • Plugin/preset types to enforce the name start with preset- if it is a preset (collection of plugins). By @​SethFalco in svg/svgo#2178

Metrics

Before and after of the browser bundle of each respective version:

| | v4.0.0 | v4.0.1 | Delta |

... (truncated)

Commits
  • b2309cf chore: sync version with api
  • f529cfc Merge commit from fork
  • 581fe68 performance: speed up mergePath child node removal (#2216)
  • eb4c8b6 docs(removeAttributesBySelector): properly document and check types (#2215)
  • 6fd5872 fix(convertColors): skip convertCase on css custom properties (#2213)
  • 7414f73 fix: properly parse negative (or +) arc radii (#2205)
  • a8c19aa fix: only call encodeSVGDatauri once and add test case (#2053)
  • 65548f4 fix(convertPathData): properly handle consecutive t commands (#2156)
  • a41a7c1 fix(convertPathData): introducing isSafeToRemove (#2164)
  • 38625dd test: handle charm icons (#2203)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added Dependencies Pull requests that update a dependency file JavaScript Pull requests that update JavaScript code labels Jul 23, 2026
@adi-herwana-nus

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot dependabot Bot changed the title chore(deps-dev): bump svgo from 4.0.1 to 4.0.2 in /client chore(deps-dev): bump svgo from 3.3.4 to 4.0.2 in /client Jul 26, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/client/svgo-4.0.2 branch from 6bedd99 to 2a7d560 Compare July 26, 2026 00:07
@adi-herwana-nus

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [svgo](https://github.com/svg/svgo) from 3.3.4 to 4.0.2.
- [Release notes](https://github.com/svg/svgo/releases)
- [Commits](svg/svgo@v3.3.4...v4.0.2)

---
updated-dependencies:
- dependency-name: svgo
  dependency-version: 4.0.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/client/svgo-4.0.2 branch from 2a7d560 to 08aefab Compare July 26, 2026 00:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies Pull requests that update a dependency file JavaScript Pull requests that update JavaScript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant