-
-
Notifications
You must be signed in to change notification settings - Fork 215
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
refactor: update to cssnano 5. #357
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -224,7 +224,7 @@ export default (options = {}) => { | |
let { code, codeFileName, map, mapFileName } = getExtracted() | ||
// Perform cssnano on the extracted file | ||
if (postcssLoaderOptions.minimize) { | ||
const cssOptions = postcssLoaderOptions.minimize | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. According to the README (https://github.com/egoist/rollup-plugin-postcss#minimize) |
||
const cssOptions = {} | ||
cssOptions.from = codeFileName | ||
if (sourceMap === 'inline') { | ||
cssOptions.map = { inline: true } | ||
|
@@ -233,7 +233,7 @@ export default (options = {}) => { | |
cssOptions.to = codeFileName | ||
} | ||
|
||
const result = await require('cssnano').process(code, cssOptions) | ||
const result = await require('cssnano')(postcssLoaderOptions.minimize).process(code, cssOptions) | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. With cssnano 5, you need to call |
||
code = result.css | ||
|
||
if (sourceMap === true && result.map && result.map.toString) { | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please update to enforce at least version
8.2.10
to avoid vulnerability as per https://www.npmjs.com/advisories/1693There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It should not make much difference as the
^
in front of the version number should let you update to the latest postcss version anyway. In any case it would be better to do it in a separate PR since this one also updates cssnano which is potentially more breaking than bumping postcss version.