Skip to content

chore(deps-dev): bump svgo from 3.0.2 to 3.3.3 in /projects/elements#1

Closed
dependabot[bot] wants to merge 1896 commits intomainfrom
dependabot/npm_and_yarn/projects/elements/svgo-3.3.3
Closed

chore(deps-dev): bump svgo from 3.0.2 to 3.3.3 in /projects/elements#1
dependabot[bot] wants to merge 1896 commits intomainfrom
dependabot/npm_and_yarn/projects/elements/svgo-3.3.3

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 1, 2026

Bumps svgo from 3.0.2 to 3.3.3.

Release notes

Sourced from svgo's releases.

v3.3.3

What's Changed

Dependencies

  • Migrates from our unsupported fork of sax (@​trysound/sax) to the upstream version of sax (sax).

Bug Fixes

  • No longer throws error when encountering comments in DTD.

Metrics

Before and after of the browser bundle of each respective version:

v3.3.2 v3.3.3 Delta
svgo.browser.js 910.9 kB 912.9 kB ⬆️ 2 kB

Support

SVGO v3 is not officially supported, please consider upgrading to SVGO v4 instead. We've backported this fix as there are security implications, but there is no commitment to do this for more complex changes in future.

Consider reading our Migration Guide from v3 to v4 which should ease the process.

v3.3.2

Notice

An update on what happened with v3.3.0 and v3.3.1. While we have retained CJS support, the migration to ESM has changed the acceptable ways to import SVGO, in ways that users depended on before. This effectively made SVGO v3 a breaking change.

Rather than resolve or workaround these differences, we've opted to release SVGO v3.3.2, which is effectively a revert to v3.2.0, and deprecate versions v3.3.0 and v3.3.1. We'll then proceed to work on releasing v4 which will document the breaking changes, and feature further breaking changes that were slated for v4, like disabling removeViewBox by default.

Before the v4.0.0 release, I'll put more focus on testing and use release candidates, just to make the release go smoothly! 👍🏽

Sorry for the headache, and thank you for your patience.

v3.3.1

Notice

SVGO v3.3.0, which was meant to migrate to ESM without breaking CJS support, unfortunately broke CJS projects. There was a mistake with exports, so the loadConfig function wasn't available in the CJS bundle and lead to issues for many users.

Thanks to everyone who raised the issue, and to @​nuintun who submitted a pull request to resolve it so quickly.

I apologize for letting that breaking change through, and will aim to do better. Namely, by adding more tests to cover our exports, and any other public interface in general for each distribution of SVGO, so this doesn't happen again.

SVGO v3.3.1 should resolve the issue for CJS projects, but if you encounter anything else, do let us know by opening an issue on GitHub.

v3.3.0

Deprecated

... (truncated)

Commits
  • bbab162 deps: upgrade to sax v1.5.0
  • c4dc2be chore: increment version to v3.3.2
  • 252b28c chore: increment version to 3.2.0 (#1919)
  • 8644cf3 feat(convertPathData): convert c to q (#1892)
  • 2661dac fix(convertTransform): fix scale and rotate on skew + refactors (#1916)
  • f6a2ca2 chore: improve jest tests with more precise assertions (#1912)
  • db05c57 chore: Use idiomatic Jest patterns to assert exceptions (#1909)
  • 433dcef refactor(convertPaths): clean up plugin (#1913)
  • f238d6a feat(convertPathData): allow converting q to t in more cases (#1889)
  • 967d2f1 deps: update css-tree and clean ts-ignores (#1911)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by sethiii, a new releaser for svgo since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

coryrylan and others added 30 commits December 12, 2025 12:42
- rename story files
- fix api table max-height bug
- add missing context/descriptions for labs projects

Signed-off-by: Cory Rylan <crylan@nvidia.com>
Signed-off-by: Cory Rylan <crylan@nvidia.com>
Signed-off-by: Cory Rylan <crylan@nvidia.com>
- fixes issue where search index would index incorrectly or map ids incorrectly
- fixes schema validation issues

Signed-off-by: Cory Rylan <crylan@nvidia.com>
Signed-off-by: Cory Rylan <crylan@nvidia.com>
- fixes issue with firefox throwing error causing position fallback to not run
- fixes issue with dialog not centering properly width default width
- fixes issue with popover triggers missing the source target element from toggle events
- fixes minor failing a11y lighthouse test in docs

Signed-off-by: Cory Rylan <crylan@nvidia.com>
Signed-off-by: Cory Rylan <crylan@nvidia.com>
Signed-off-by: Cory Rylan <crylan@nvidia.com>
Signed-off-by: Cory Rylan <crylan@nvidia.com>
Signed-off-by: Cory Rylan <crylan@nvidia.com>
- prevent dialog overflow of window
- auto enable overflow of dialog content
- improve default padding when not using the dialog header and footer components

closes #192

related #191

Signed-off-by: Cory Rylan <crylan@nvidia.com>
- Introduced the @nve/create package to facilitate the creation of new Elements projects using `npm init @nve`.
- Added necessary configuration files including package.json, README.md, and TypeScript configurations.
- Integrated with existing CI/CD processes and updated relevant documentation to include the new package.

Signed-off-by: Cory Rylan <crylan@nvidia.com>
Signed-off-by: Cory Rylan <crylan@nvidia.com>
semantic-release-bot and others added 22 commits March 12, 2026 19:16
Signed-off-by: Cory Rylan <crylan@nvidia.com>
Signed-off-by: Cory Rylan <crylan@nvidia.com>
- Added a test to `global.utils.test.ts` to verify `getEnv` returns 'development' for localhost.
- Renamed the describe block in `i18n.service.test.ts` from 'GlobalStateService' to 'I18nService'.
- Updated `log.service.test.ts` to mock console methods and added tests for logging behavior and event dispatching.
- Enhanced `transition.service.test.ts` with additional tests for `disable` method and speculation rules management.
- Modified `log.service.ts` to improve the dispatch method for logging events.

Signed-off-by: Cory Rylan <crylan@nvidia.com>
Signed-off-by: John Yanarella <jyanarella@nvidia.com>
- Added new utility functions: `applySlotContentStates`, `getActiveElement`, `focusElementTimeout`, and `isSimpleFocusable`.
- Improved existing functions: `appendRootNodeStyle` now deduplicates styles, and `getElementUpdate` handles non-configurable properties.
- Expanded test coverage for event handling, focus management, and object utilities, including new tests for `createLightDismiss` and `isObject` functions.
- Refactored `deepMerge` to preserve class instances and improved version parsing logic

Signed-off-by: Cory Rylan <crylan@nvidia.com>
Signed-off-by: Cory Rylan <crylan@nvidia.com>
• Adds ‘orientation: vertical | horizontal’ property
• Vertical slider styled via ‘writing-mode: vertical-lr’ and ‘direction: rtl’ per the workaround
• Tests, documentation examples, and updated visual baselines updated and checked.
• Lighthouse limits bumped
Signed-off-by: John Yanarella <jyanarella@nvidia.com>
- Added new rules to `.vale.ini` for handling wordiness and passive voice in TypeScript files.
- Introduced `SummaryImplementation` style to prevent implementation details in summaries.
- Added a new script `setup-env.sh` for environment setup during session start.

Signed-off-by: Cory Rylan <crylan@nvidia.com>
- Revised summaries in various example files for clarity and conciseness.
- Enhanced error handling in example shortcodes to throw errors instead of logging to the console.
- Updated documentation references to align with new example names.

Signed-off-by: Cory Rylan <crylan@nvidia.com>
Signed-off-by: Cory Rylan <crylan@nvidia.com>
- Updated: pnpm-workspace.yaml with kept projects
- Updated: .npmrc to use public npm registry
- Updated: .gitignore to ignore generated files
- Removed: internal package dependencies from kept projects

Signed-off-by: Cory Rylan <crylan@nvidia.com>
SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES
SPDX-License-Identifier: Apache-2.0
Signed-off-by: Cory Rylan <crylan@nvidia.com>
Signed-off-by: Cory Rylan <crylan@nvidia.com>
Signed-off-by: Cory Rylan <crylan@nvidia.com>
Bumps [svgo](https://github.com/svg/svgo) from 3.0.2 to 3.3.3.
- [Release notes](https://github.com/svg/svgo/releases)
- [Commits](svg/svgo@v3.0.2...v3.3.3)

---
updated-dependencies:
- dependency-name: svgo
  dependency-version: 3.3.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 1, 2026
@coryrylan coryrylan closed this Apr 2, 2026
@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Apr 2, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/projects/elements/svgo-3.3.3 branch April 2, 2026 21:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants