Bump cssnano from 7.1.9 to 8.0.2

[dependabot]

Bumps cssnano from 7.1.9 to 8.0.2.

Release notes

Sourced from cssnano's releases.

v8.0.2

What's Changed

• perf(postcss-unique-selectors): add fast paths for the common cases by @​dkryaklin in cssnano/cssnano#1813
• perf(postcss-discard-duplicates): bucket rules by selector by @​dkryaklin in cssnano/cssnano#1815
• perf(postcss-merge-longhand): skip processors with no relevant decls by @​dkryaklin in cssnano/cssnano#1814
• Include postcss-discard-overridden types in package by @​itosa-kazu in cssnano/cssnano#1817
• fix: preserve apostrophes in svg data uris by @​pupuking723 in cssnano/cssnano#1819

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.1...cssnano@8.0.2

v8.0.1

What's Changed

• fix(postcss-minify-selectors): reject :is() fold when divergent middle contains a combinator under a non-empty prefix (closes #1786) by @​dkryaklin in cssnano/cssnano#1798
• fix(postcss-minify-selectors): tighten :is() fold acceptance to a strict allowlist by @​dkryaklin in cssnano/cssnano#1799

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.0...cssnano@8.0.1

v8.0.0

What's Changed

• Move declaration sorter to advanced preset by @​ludofischer and @​Goodwine in cssnano/cssnano#1793
• Drop node 20 by @​ludofischer in cssnano/cssnano#1794

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.9...cssnano@8.0.0

Commits

• 185e1c7 Publish cssnano 8.0.2
• 2ce8c2d chore: update the postcs peer dependency
• 99bd9c1 docs: update website dependencies
• 2ca8d4a chore: update development deps
• b245a0b fix: update caniuse-api
• 3bf3f4d chore: update postcss-selector-parser
• 7343c87 fix: preserve apostrophes in svg data uris (#1819)
• 964b9db chore(util): add benchmark + cpuprofile tooling (#1812)
• 54a8db2 Include postcss-discard-overridden types in package
• e0e39ae perf(postcss-merge-longhand): skip processors with no relevant decls
• Additional commits viewable in compare view

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​cssnano@​8.0.2

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm css-tree is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: ? → npm/cssnano@8.0.2 → npm/css-tree@3.2.1 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/css-tree@3.2.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report