build(deps): bump the dependecies group across 1 directory with 6 updates

[dependabot]

Bumps the dependecies group with 6 updates in the / directory:

Package	From	To
@fortawesome/fontawesome-free	6.5.2	6.7.2
@primer/css	21.3.4	21.5.1
autoprefixer	10.4.19	10.4.20
dompurify	3.1.5	3.2.4
postcss	8.4.39	8.5.1
sass	1.77.6	1.83.4

Updates @fortawesome/fontawesome-free from 6.5.2 to 6.7.2

Release notes

Sourced from @​fortawesome/fontawesome-free's releases.

Release 6.7.2

Change log available at https://fontawesome.com/docs/changelog/

Release 6.7.1

Change log available at https://fontawesome.com/docs/changelog/

Release 6.7.0

Change log available at https://fontawesome.com/docs/changelog/

Release 6.6.0

Change log available at https://fontawesome.com/docs/changelog/

Commits

• af62053 Release 6.7.2 (#20503)
• d19ab26 Removed unnecessary 'and' from README.md for better clarity text (#20432)
• 3447c58 Release 6.7.1 (#20426)
• a03a91d Release 6.7.0 (#20418)
• 37eff7f Release 6.6.0 (#20295)
• 138f8c3 Update 000_icon_request.yml
• 05235ab Updating Icon Request Template (#20275)
• See full diff in compare view

Updates @primer/css from 21.3.4 to 21.5.1

Release notes

Sourced from @​primer/css's releases.

v21.5.1

Patch Changes

• #2727 7d4cd40 Thanks @​kawakamimoeki! - Removed .css extension from @​import and modified @​primer/primitives to be output as Sass code.

• #2728 7eaba91 Thanks @​lukasoppermann! - Update primer/primitives to allow for version 9 and 10

• #2680 1eb467e Thanks @​robinwhittleton! - Use tabular numbers in tables

v21.5.0

Minor Changes

• #2724 30d144b Thanks @​camertron! - Move prod @primer/* dependencies to dev

v21.4.0

Minor Changes

• #2691 5097430 Thanks @​dylanatsmith! - Remove background behind images in markdown-body

Patch Changes

• #2710 3017831 Thanks @​smockle! - Replace deprecated CSS properties in '.sr-only'

v21.3.6

Patch Changes

• #2624 7e62532 Thanks @​sideshowbarker! - drop “display: none” from details element contents styling

v21.3.5

Patch Changes

• #2657 b87c379 Thanks @​jonrohan! - Import primitives/index.scss in the main primer.css file.

Changelog

Sourced from @​primer/css's changelog.

21.5.1

Patch Changes

• #2727 7d4cd40 Thanks @​kawakamimoeki! - Removed .css extension from @​import and modified @​primer/primitives to be output as Sass code.

• #2728 7eaba91 Thanks @​lukasoppermann! - Update primer/primitives to allow for version 9 and 10

• #2680 1eb467e Thanks @​robinwhittleton! - Use tabular numbers in tables

21.5.0

Minor Changes

• #2724 30d144b Thanks @​camertron! - Move prod @primer/* dependencies to dev

21.4.0

Minor Changes

• #2691 5097430 Thanks @​dylanatsmith! - Remove background behind images in markdown-body

Patch Changes

• #2710 3017831 Thanks @​smockle! - Replace deprecated CSS properties in '.sr-only'

21.3.6

Patch Changes

• #2624 7e62532 Thanks @​sideshowbarker! - drop “display: none” from details element contents styling

21.3.5

Patch Changes

• #2657 b87c379 Thanks @​jonrohan! - Import primitives/index.scss in the main primer.css file.

Commits

• 13be44c Version Packages (#2730)
• 1eb467e Use tabular numbers in tables (#2680)
• 7d4cd40 Import CSS files directly into Sass (#2727)
• d91ba9c Bump the all group with 2 updates (#2732)
• 0b44d0a Bump eslint from 9.13.0 to 9.14.0 in the all group (#2731)
• 7eaba91 update primitives version to allow for 9 and 10 (#2728)
• 0cc86c8 Bump eslint from 9.12.0 to 9.13.0 in the all group (#2726)
• a3f2b01 Version Packages (#2725)
• 30d144b Move prod @primer/* dependencies to dev (#2724)
• dfc7913 Bump markdown-to-jsx from 7.2.1 to 7.5.0 in /docs (#2723)
• Additional commits viewable in compare view

Updates autoprefixer from 10.4.19 to 10.4.20

Release notes

Sourced from autoprefixer's releases.

10.4.20

• Fixed fit-content prefix for Firefox.

Changelog

Sourced from autoprefixer's changelog.

10.4.20

• Fixed fit-content prefix for Firefox.

Commits

• dae6eb4 Release 10.4.20 version
• ee43652 Fix fit-content for Firefox
• cf80824 Update dependencies
• 49d5ec6 Move to pnpm 9
• See full diff in compare view

Updates dompurify from 3.1.5 to 3.2.4

Release notes

Sourced from dompurify's releases.

DOMPurify 3.2.4

• Fixed a conditional and config dependent mXSS-style bypass reported by @​nsysean
• Added a new feature to allow specific hook removal, thanks @​davecardwell
• Added purify.js and purify.min.js to exports, thanks @​Aetherinox
• Added better logic in case no window object is president, thanks @​yehuya
• Updated some dependencies called out by dependabot
• Updated license files etc to show the correct year

DOMPurify 3.2.3

• Fixed two conditional sanitizer bypasses discovered by @​parrot409 and @​Slonser
• Updated the attribute clobbering checks to prevent future bypasses, thanks @​parrot409

DOMPurify 3.2.2

• Fixed a possible bypass in case a rather specific config for custom elements is set, thanks @​yaniv-git
• Fixed several minor issues with the type definitions, thanks again @​reduckted
• Fixed a minor issue with the types reference for trusted types, thanks @​reduckted
• Fixed a minor problem with the template detection regex on some systems, thanks @​svdb99

DOMPurify 3.2.1

• Fixed several minor issues with the type definitions, thanks @​reduckted @​ghiscoding @​asamuzaK @​MiniDigger
• Fixed an issue with non-minified dist files and order of imports, thanks @​reduckted

DOMPurify 3.2.0

• Added type declarations, thanks @​reduckted , @​philmayfield, @​aloisklink, @​ssi02014 and others
• Fixed a minor issue with the handling of hooks, thanks @​kevin-mizu

DOMPurify 3.1.7

• Fixed an issue with comment detection and possible bypasses with specific config settings, thanks @​masatokinugawa
• Fixed several smaller typos in documentation and test & build files, thanks @​christianhg
• Added better support for Angular compiler, thanks @​jeroen1602
• Added several new attributes to HTML and SVG allow-list, thanks @​Gigabyte5671 and @​Rotzbua
• Removed the foreignObject element from the list of HTML entry-points, thanks @​masatokinugawa
• Bumped several dependencies to be more up to date

DOMPurify 3.1.6

• Fixed an issue with the execution logic of attribute hooks to prevent bypasses, thanks @​kevin-mizu
• Fixed an issue with element removal leading to uncaught errors through DOM Clobbering, thanks @​realansgar
• Fixed a minor problem with the bower file pointing to the wrong dist path
• Fixed several minor typos in docs, comments and comment blocks, thanks @​Rotzbua
• Updated several development dependencies

Commits

• ec29e65 Merge pull request #1062 from cure53/main
• 1c1b183 chore: Preparing 3.2.4 release
• d18ffcb fix: Changed the template literal regex to avoid a config-dependent bypass
• 0d64d2b Merge pull request #1060 from yehuya/initializeTestImprovements
• 9ad7933 tests: DOMPurify custom window tests improvements
• 72760ca Merge pull request #1059 from yehuya/fixMissingWindowElement
• bc72d44 Fix tests
• 363a89d fix: handle undefined Element in DOMPurify initialization
• f41b45d Update LICENSE
• b25bf26 Update README.md
• Additional commits viewable in compare view

Updates postcss from 8.4.39 to 8.5.1

Release notes

Sourced from postcss's releases.

8.5.1

• Fixed backwards compatibility for complex cases (by @​romainmenke).

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@​romainmenke during his work on Stylelint added Input#document in additional to Input#css.

root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"

Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

• Tidelift with a Spotify-like subscription model supporting all projects from your lock file.
• Direct donations at GitHub Sponsors or Open Collective.

8.4.49

• Fixed custom syntax without source.offset (by @​romainmenke).

8.4.48

• Fixed position calculation in error/warnings methods (by @​romainmenke).

8.4.47

• Removed debug code.

8.4.46

• Fixed Cannot read properties of undefined (reading 'before').

8.4.45

• Removed unnecessary fix which could lead to infinite loop.

8.4.44

• Another way to fix markClean is not a function error.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.1

• Fixed backwards compatibility for complex cases (by @​romainmenke).

8.5 “Duke Alloces”

• Added Input#document for sources like CSS-in-JS or HTML (by @​romainmenke).

8.4.49

• Fixed custom syntax without source.offset (by @​romainmenke).

8.4.48

• Fixed position calculation in error/warnings methods (by @​romainmenke).

8.4.47

• Removed debug code.

8.4.46

• Fixed Cannot read properties of undefined (reading 'before').

8.4.45

• Removed unnecessary fix which could lead to infinite loop.

8.4.44

• Another way to fix markClean is not a function error.

8.4.43

• Fixed markClean is not a function error.

8.4.42

• Fixed CSS syntax error on long minified files (by @​varpstar).

8.4.41

• Fixed types (by @​nex3 and @​querkmachine).
• Cleaned up RegExps (by @​bluwy).

8.4.40

• Moved to getter/setter in nodes types to help Sass team (by @​nex3).

Commits

• 7b02c75 Release 8.5.1 version
• 4c15339 Update dependencies
• 7efe91e Improve backwards compat for Input#document (#2000)
• 6873270 Release 8.5 version
• 4223bb9 Fix 80 columns limit
• 80e2401 Add Input#document (#1996)
• 6f86879 Update dependencies
• 85cbbec Fix pnpm version on CI
• 76caa57 Update dependencies
• 46ff246 Move to pnpm 10
• Additional commits viewable in compare view

Updates sass from 1.77.6 to 1.83.4

Release notes

Sourced from sass's releases.

Dart Sass 1.83.4

To install Sass 1.83.4, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.83.3

To install Sass 1.83.3, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.83.2

To install Sass 1.83.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• Properly display deprecation IDs for the JS Sass API.

• Don't display deprecation IDs for user-defined deprecations.

See the full changelog for changes in earlier releases.

Dart Sass 1.83.1

To install Sass 1.83.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• Fix a bug where --quiet-deps would get deactivated for @content blocks, even when those blocks were entirely contained within dependencies.

• Include deprecation IDs in deprecation warnings to make it easier to determine what to pass to --silence-deprecation or --fatal-deprecation.

... (truncated)

Changelog

Sourced from sass's changelog.

1.83.4

• No user-visible changes.

1.83.3

• No user-visible changes.

1.83.2

• Properly display deprecation IDs for the JS Sass API.

• Don't display deprecation IDs for user-defined deprecations.

1.83.1

• Fix a bug where --quiet-deps would get deactivated for @content blocks, even when those blocks were entirely contained within dependencies.

• Include deprecation IDs in deprecation warnings to make it easier to determine what to pass to --silence-deprecation or --fatal-deprecation.

1.83.0

• Allow trailing commas in all argument and parameter lists.

1.82.0

Command-Line Interface

• Improve --watch mode reliability when making multiple changes at once, such as checking out a different Git branch.

• Parse the calc-size() function as a calculation now that it's supported in some browsers.

Dart API

• Add a SassCalculation.calcSize() function.

1.81.1

• No user-visible changes.

1.81.0

• Fix a few cases where deprecation warnings weren't being emitted for global built-in functions whose names overlap with CSS calculations.

• Add support for the CSS round() calculation with a single argument, as long

... (truncated)

Commits

• 89a5394 Fix more bugs in the sass-parser release process (#2491)
• 46686ed Merge pull request #2490 from sass/sass-parser-release
• 1261767 Use a file: dependency for local Sass development
• 173f39b Use the Dart Sass version for the sass-parser dependency
• ddb14b2 Fix deprecation ID displays in JS mode (#2483)
• b12b508 Compile sass-parser before deploying (#2489)
• b19b57f Merge pull request #2478 from sass/if
• 23ff19d Merge branch 'main' into if
• 8818d93 Properly override the sass-parser dependency on sass during release (#2487)
• adb7016 Merge pull request #2488 from sass/sdk-formatter
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.