Update npm non-major dependencies

[renovate]

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

---

This PR contains the following updates:

Package	Change	Age	Confidence
@pattern-lab/cli (source)	5.15.0 -> 5.17.0
@pattern-lab/engine-handlebars (source)	5.14.3 -> 5.16.4
@pattern-lab/starterkit-handlebars-vanilla	1.4.2 -> 1.4.3
autoprefixer	10.3.7 -> 10.4.21
bootstrap-datepicker	1.9.0 -> 1.10.1
clean-css-cli	5.4.1 -> 5.6.3
clipboard (source)	2.0.8 -> 2.0.11
concurrently	6.3.0 -> 6.5.1
jquery-ui (source)	1.13.2 -> 1.14.1
postcss-cli	9.0.1 -> 9.1.0
sass	1.42.1 -> 1.93.2
yargs (source)	17.2.1 -> 17.7.2

---

Release Notes

pattern-lab/patternlab-node (@​pattern-lab/cli)

v5.17.0

Compare Source

Features

• engine-twig: add custom twing extensions (#​1435) (c32a45c), closes #​1230 #​1230
• integrate @​hadl/patternlab-plugin-pattern-wrap into core (#​1433) (414e038), closes #​1432 #​1432

5.16.4 (2022-09-23)

Bug Fixes

• code scanning alert (#​1442) (749a3e7)
• div isn't allowed in button elements (#​1438) (e5c6950)
• twig logo is rendered as "NaN" (#​1434) (ab6b133), closes #​1407

5.16.2 (2022-02-07)

Bug Fixes

• transformed asset types is ignored (#​1426) (8cbe189), closes #​1339

Features

• remove sandbox attribute from iframe (#​1422) (4335660)

5.16.1 (2022-01-29)

Note: Version bump only for package patternlab-node-main

v5.16.4

Compare Source

Bug Fixes

• code scanning alert (#​1442) (749a3e7)
• div isn't allowed in button elements (#​1438) (e5c6950)
• twig logo is rendered as "NaN" (#​1434) (ab6b133), closes #​1407

v5.16.2

Compare Source

Bug Fixes

• transformed asset types is ignored (#​1426) (8cbe189), closes #​1339

Features

• remove sandbox attribute from iframe (#​1422) (4335660)

v5.16.1

Compare Source

Note: Version bump only for package patternlab-node-main

v5.15.5

Compare Source

Bug Fixes

• corrected some github urls (#​1388) (7f37e9d)

Features

• define initial viewport (#​1386) (6fa630e)

v5.15.2

Compare Source

Bug Fixes

• core: Subgroup cannot be hidden (#​1368) (3ce13ab)

v5.15.1

Compare Source

Bug Fixes

• docs: use "UIKits" instead of "StyleguideKits" (#​1345) (a2885ea)
• initialize: updating no-emit-webpack-plugin dependency #​1348 (#​1349) (a884897)
• node16: prevent warning on installation process (#​1352) (d58e4c6)

Features

• added https description to the docs (#​1355) (4118f74)

Reverts

• Revert "refactor: optimized engines directory retrieval (#​1359)" (#​1363) (a275d36), closes #​1359 #​1363

pattern-lab/starterkit-handlebars-vanilla (@​pattern-lab/starterkit-handlebars-vanilla)

v1.4.3

Compare Source

postcss/autoprefixer (autoprefixer)

v10.4.21

Compare Source

• Fixed old -moz- prefix for :placeholder-shown (by @​Marukome0743).

v10.4.20

Compare Source

• Fixed fit-content prefix for Firefox.

v10.4.19

Compare Source

• Removed end value has mixed support, consider using flex-end warning
  since end/start now have good support.

v10.4.18

Compare Source

• Fixed removing -webkit-box-orient on -webkit-line-clamp (@​Goodwine).

v10.4.17

Compare Source

• Fixed user-select: contain prefixes.

v10.4.16

Compare Source

• Improved performance (by Romain Menke).
• Fixed docs (by Christian Oliff).

v10.4.15

Compare Source

• Fixed ::backdrop prefixes (by 一丝).
• Fixed docs (by Christian Oliff).

v10.4.14

Compare Source

• Improved startup time and reduced JS bundle size (by Kārlis Gaņģis).

v10.4.13

Compare Source

• Fixed missed prefixes on vendor prefixes in name of CSS Custom Property.

v10.4.12

Compare Source

• Fixed support of unit-less zero angle in backgrounds (by 一丝).

v10.4.11

Compare Source

• Fixed text-decoration prefixes by moving to MDN data (by Romain Menke).

v10.4.10

Compare Source

• Fixed unicode-bidi prefixes by moving to MDN data.

v10.4.9

Compare Source

• Fixed css-unicode-bidi issue from latest Can I Use.

v10.4.8

Compare Source

• Do not print color-adjust warning if print-color-adjust also is in rule.

v10.4.7

Compare Source

• Fixed print-color-adjust support in Firefox.

v10.4.6

Compare Source

• Fixed print-color-adjust support.

v10.4.5

Compare Source

• Fixed NaN in grid (by @​SukkaW).

v10.4.4

Compare Source

• Fixed package.funding to have same value between all PostCSS packages.

v10.4.3

Compare Source

• Fixed package.funding (by Álvaro Mondéjar).

v10.4.2

Compare Source

• Fixed old -moz- prefix for :placeholder-shown (by @​Marukome0743).

v10.4.1

Compare Source

• Removed end value has mixed support, consider using flex-end warning
  since end/start now have good support.

v10.4.0: 10.4 “ǃke e꞉ ǀxarra ǁke”

Compare Source

In Autoprefixer 10.4 @​lukewarlow added :autofill support:

input:-webkit-autofill {
  background-color: red;
}

input:autofill {
  background-color: red;
}

uxsolutions/bootstrap-datepicker (bootstrap-datepicker)

v1.10.1

Compare Source

What's Changed

• Update screenshots by @​vsn4ik in #​2489
• fix: allow any HTML element as inline container by @​ocarreterom in #​2491
• Correct issues with date range by @​johnnyRose in #​2482
• Update Puppeteer by @​vsn4ik in #​2498
• Update jQuery for test by @​vsn4ik in #​2499
• introduce en-US locale by @​simonmulser in #​2503
• Create bootstrap-datepicker.mar.js by @​pimplesushant in #​2382
• Add setting to allow explicit setting of isInline by @​lukeburden in #​2247
• fixed german localization for weekdays. by @​landlockedsurfer in #​2496
• [CVE-2019-11358] Fix vuln jquery <3.4.0 by @​t-mdo in #​2511
• Bulgarian locale fix by @​sunhater in #​2507
• Add snippets section to readme file by @​Azaret in #​2504
• Bump jquery from 3.4.1 to 3.5.0 by @​dependabot[bot] in #​2557
• Updated deprecated $.isArray and $.isFunction for jQuery 3 by @​taskinoz in #​2579
• todayHighlight defaults table entry wrong by @​dataxpress in #​2547
• docs: Fix simple typo, millenium -> millennium by @​timgates42 in #​2590
• Create bootstrap-datepicker.ar-DZ.js by @​infosrabah in #​2536
• Update bootstrap-datepicker.ca.js by @​jmontane in #​2577
• Update bootstrap-datepicker.id.js by @​ardeman in #​2591
• Update bootstrap-datepicker.zh-TW.js by @​JaySkyworker in #​2526
• Fix Finnish monthShort translations as 3 letter invalid by @​RGunning in #​2387
• Bump ini from 1.3.5 to 1.3.7 by @​dependabot[bot] in #​2601
• Switch from travis-ci to github actions by @​acrobat in #​2608
• Bump bl from 1.2.2 to 1.2.3 by @​dependabot[bot] in #​2607
• Fix translation of month of January for Ukrainian localization by @​YegorPo in #​2653
• Bump hosted-git-info from 2.7.1 to 2.8.9 by @​dependabot[bot] in #​2619
• Bump qs from 6.4.0 to 6.4.1 by @​dependabot[bot] in #​2670
• Bump i from 0.3.6 to 0.3.7 by @​dependabot[bot] in #​2639
• Bump ws from 6.2.1 to 6.2.2 by @​dependabot[bot] in #​2622
• Prepare 1.10.0 release by @​acrobat in #​2681

New Contributors

• @​ocarreterom made their first contribution in #​2491
• @​johnnyRose made their first contribution in #​2482
• @​simonmulser made their first contribution in #​2503
• @​pimplesushant made their first contribution in #​2382
• @​lukeburden made their first contribution in #​2247
• @​landlockedsurfer made their first contribution in #​2496
• @​t-mdo made their first contribution in #​2511
• @​sunhater made their first contribution in #​2507
• @​dependabot[bot] made their first contribution in #​2557
• @​taskinoz made their first contribution in #​2579
• @​dataxpress made their first contribution in #​2547
• @​timgates42 made their first contribution in #​2590
• @​infosrabah made their first contribution in #​2536
• @​jmontane made their first contribution in #​2577
• @​ardeman made their first contribution in #​2591
• @​JaySkyworker made their first contribution in #​2526
• @​YegorPo made their first contribution in #​2653

Full Changelog: uxsolutions/bootstrap-datepicker@v1.9.0...1.10.1

Also try to fix #​2713 🙂

v1.10.0: 1.10.0

Compare Source

Changelog: uxsolutions/bootstrap-datepicker@v1.9.0...v1.10.0

clean-css/clean-css-cli (clean-css-cli)

v5.6.3

Compare Source

==================

• Bumps clean-css dependency to 5.3.3

v5.6.2

Compare Source

==================

• Bumps clean-css dependency to 5.3.2

v5.6.1

Compare Source

==================

• Bumps clean-css dependency to 5.3.1.

v5.6.0

Compare Source

==================

• Bumps clean-css dependency to 5.3.0.

v5.5.2

Compare Source

==================

• Bumps clean-css dependency to 5.2.4.

v5.5.1

Compare Source

==================

• Bumps clean-css dependency to 5.2.3.

v5.5.0

Compare Source

==================

• Adds a new --watch switch, which makes CLI re-run optimizations when watched file(s) change.

v5.4.2

Compare Source

==================

• Bumps clean-css dependency to 5.2.2.

zenorocha/clipboard.js (clipboard)

v2.0.11: Fixes & DX Enhancements

Compare Source

• Fix type for copy function #​795
• Remove blurring behavior after copy action invoke #​807
• Support more HTML input types #​808

v2.0.10: Fixes and Docs Updates

Compare Source

• Fix Event API issue returning a function instead of a string in the Event.Action property
• Update docs to make it easier to track Event API
• Update tests to cover Event.Action property

v2.0.9

Compare Source

• Add new API methos .cut and .copy
• Improve code internals

open-cli-tools/concurrently (concurrently)

v6.5.1

Compare Source

• Fix command names when using npm wildcard (#​148, #​165, #​211, #​212)

v6.5.0

Compare Source

• Add support for configuring via environment variables that start with CONCURRENTLY_ prefix (#​289)
• Add --timings flag to show when each process started and stopped, and how long they ran for (#​291, #​295)

v6.4.0

Compare Source

• Add --hide flag to hide the output of specified commands (#​138, #​173)

jquery/jquery-ui (jquery-ui)

v1.14.1: jQuery UI 1.14.1 released

Compare Source

https://blog.jqueryui.com/2024/10/jquery-ui-1-14-1-released/

v1.14.0: jQuery UI 1.14.0 released

Compare Source

https://blog.jqueryui.com/2024/08/jquery-ui-1-14-0-released/

v1.13.3: jQuery UI 1.13.3 released

Compare Source

https://blog.jqueryui.com/2024/04/jquery-ui-1-13-3-released/

postcss/postcss-cli (postcss-cli)

v9.1.0

Compare Source

• Don't write to files if they're unchanged (#​320, #​417)

v9.0.2

Compare Source

• Switch to picocolors (#​409)
• Remove test files from npm package

sass/dart-sass (sass)

v1.93.2

Compare Source

• No user-visible changes.

JavaScript API

• Fix another error in the release process for @sass/types.

v1.93.1

Compare Source

• No user-visible changes.

JavaScript API

• Fix an error in the release process for @sass/types.

v1.93.0

Compare Source

• Fix a crash when a style rule contains a nested @import, and the loaded file
  @uses a user-defined module as well as @includes a top-level mixin which
  emits top-level declarations.

JavaScript API

• Release a @sass/types package which contains the type annotations used by
  both the sass and sass-embedded package without any additional code or
  dependencies.

v1.92.1

Compare Source

• Fix a bug where variable definitions from one imported, forwarded module
  would not be passed as implicit configuration to a later imported, forwarded
  module.

v1.92.0

Compare Source

• Breaking change: Emit declarations, childless at-rules, and comments in
  the order they appear in the source even when they're interleaved with nested
  rules. This obsoletes the mixed-decls deprecation.

• Breaking change: The function name type() is now fully reserved for the
  plain CSS function. This means that @function definitions with the name
  type will produce errors, while function calls will be parsed as special
  function strings.

• Configuring private variables using @use ... with, @forward ... with, and
  meta.load-css(..., $with: ...) is now deprecated. Private variables were
  always intended to be fully encapsulated within the module that defines them,
  and this helps enforce that encapsulation.

• Fix a bug where @extend rules loaded through a mixture of @import and
  @use rules could fail to apply correctly.

Command-Line Interface

• In --watch mode, delete the source map when the associated source file is
  deleted.

v1.91.0

Compare Source

• Potentially breaking change: meta.inspect() (as well as other systems
  that use it such as @debug and certain error messages) now emits numbers
  with as high precision as is available instead of rounding to the nearest
  1e⁻¹⁰ as we do when serializing to CSS. This better fits the purpose of
  meta.inspect(), which is to provide full information about the structure of
  a Sass value.

• Passing a rest argument ($arg...) before a positional or named argument when
  calling a function or mixin is now deprecated. This was always outside the
  specified syntax, but it was historically treated the same as passing the rest
  argument at the end of the argument list whether or not that matched the
  visual order of the arguments.

v1.90.0

Compare Source

• Allow a @forwarded module to be loaded with a configuration when that module
  has already been loaded with a different configuration and the module
  doesn't define any variables that would have been configured anyway.

v1.89.2

Compare Source

Embedded Host

• Fixed a compilation error caused by an outdated buf dependency.

v1.89.1

Compare Source

• No user-visible changes.

v1.89.0

Compare Source

• Allow the Node package importer to load files even when there are multiple
  potential resolutions, as long as those resolutions all point to the same
  file.

v1.88.0

Compare Source

• Allow custom properties with empty values (such as --var:;).

• Fix a bug when calculating source spans for interpolations.

Dart and JS APIs

• Potentially breaking bug fix: Throw an error when passing a function or
  mixin object from one compilation to another.

Dart API

• Deprecate passing a relative URL to compileString() and related functions.

v1.87.0

Compare Source

• Potentially breaking bug fix: When a plain CSS file with a top-level
  nesting selector & is loaded into a nested Sass context via
  meta.load-css() or @import, Sass now emits plain CSS nesting rather than
  incorrectly combining it with the parent selector using a descendant
  combinator.

v1.86.3

Compare Source

• Fix a bug introduced in 1.86.1 where Sass fails to resolve paths starting with
  a .. segment.

v1.86.2

Compare Source

• No user-visible changes.

v1.86.1

Compare Source

• Improve the performance of file: URL case canonicalization on Windows and
  Mac OS.

v1.86.0

Compare Source

• Add support for % as an expression in its own right. It will still be parsed
  as the modulo operator when between two other expressions, but in any other
  context it will be an expression whose value is the unquoted string %.

• Consider attr() to be a special number function that can be used as a
  channel in color functions.

• Deprecate user-defined functions named type() so that we can eventually
  support the new CSS type() function.

Dart API

• Increase the minimum Dart SDK to 3.6.0.

v1.85.1

Compare Source

• Fix a bug where global Sass functions whose names overlap with CSS math
  functions could incorrectly be treated as CSS math functions even though they
  used Sass-only features, causing compilation failures. For example,
  round(-$var / 2) previously threw an error but now works as intended.

v1.85.0

Compare Source

• No longer fully trim redundant selectors generated by @extend. This caused
  unacceptable performance issues for certain heavy users of @extend. We'll
  try to find a more performant way to accomplish it in the future.

v1.84.0

Compare Source

• Allow newlines in whitespace in the indented syntax.

• Potentially breaking bug fix: Selectors with unmatched brackets now always
  produce a parser error. Previously, some edge cases like [foo#{"]:is(bar"}) {a: b} would compile without error, but this was an unintentional bug.

• Fix a bug in which various Color Level 4 functions weren't allowed in plain
  CSS.

• Fix the error message for @extend without a selector and possibly other
  parsing edge-cases in contexts that allow interpolation.

Embedded Host

• Fixed the implementation of the SassBoolean type to adhere to the spec,
  now using a class instead of an interface.

v1.83.4

Compare Source

• No user-visible changes.

v1.83.3

Compare Source

• No user-visible changes.

v1.83.2

Compare Source

• Properly display deprecation IDs for the JS Sass API.

• Don't display deprecation IDs for user-defined deprecations.

v1.83.1

Compare Source

• Fix a bug where --quiet-deps would get deactivated for @content blocks,
  even when those blocks were entirely contained within dependencies.

• Include deprecation IDs in deprecation warnings to make it easier to determine
  what to pass to --silence-deprecation or --fatal-deprecation.

v1.83.0

Compare Source

• Allow trailing commas in all argument and parameter lists.

v1.82.0

Compare Source

Command-Line Interface

• Improve --watch mode reliability when making multiple changes at once, such
  as checking out a different Git branch.

• Parse the calc-size() function as a calculation now that it's supported in
  some browsers.

Dart API

• Add a SassCalculation.calcSize() function.

v1.81.1

Compare Source

• No user-visible changes.

v1.81.0

Compare Source

• Fix a few cases where deprecation warnings weren't being emitted for global
  built-in functions whose names overlap with CSS calculations.

• Add support for the CSS round() calculation with a single argument, as long
  as that argument might be a unitless number.

v1.80.7

Compare Source

Embedded Host

• Don't treat 0 as undefined for the green and blue channels in the
  LegacyColor constructor.

v1.80.6

Compare Source

Command-Line Interface

• Make @parcel/watcher an optional dependency so this can still be installed
  on operating systems where it's unavailable.

v1.80.5

Compare Source

Embedded Host

• Don't produce phantom @import deprecations when using an importer with the
  legacy API.

v1.80.4

Compare Source

• No user-visible changes.

v1.80.3

Compare Source

• Fix a bug where @import url("...") would crash in plain CSS files.

• Improve consistency of how warnings are emitted by different parts of the
  compiler. This should result in minimal user-visible changes, but different
  types of warnings should now respond more reliably to flags like --quiet,
  --verbose, and --silence-deprecation.

v1.80.2

Compare Source

• Fix a bug where deprecation warnings were incorrectly emitted for the
  plain-CSS invert() function.

v1.80.1

Compare Source

• Fix a bug where repeated deprecation warnings were not automatically limited.

v1.80.0

Compare Source

• @import is now officially deprecated, as are global built-in functions that
  are available within built-in modules. See the Sass blog post for more
  details on the deprecation process.

Embedded Host

• Fix an error that would sometimes occur when deprecation warnings were
  emitted when using a custom importer with the legacy API.

v1.79.6

Compare Source

• Fix a bug where Sass would add an extra */ after loud comments with
  whitespace after an explicit */ in the indented syntax.

• Potentially breaking bug fix: Adding text after an explicit */ in the
  indented syntax is now an error, rather than silently generating invalid CSS.

Embedded Host

• Properly export the SassBoolean type.

v1.79.5

Compare Source

• Changes to how selector.unify() and @extend combine selectors:

  • The relative order of pseudo-classes (like :hover) and pseudo-elements
    (like ::before) within each original selector is now preserved when
    they're combined.

  • Pseudo selectors are now consistently placed at the end of the combined
    selector, regardless of which selector they came from. Previously, this
    reordering only applied to pseudo-selectors in the second selector.

• Tweak the color transformation matrices for OKLab and OKLCH to match the
  newer, more accurate values in the CSS spec.

• Fix a slight inaccuracy case when converting to srgb-linear and
  display-p3.

• Potentially breaking bug fix: math.unit() now wraps multiple denominator
  units in parentheses. For example, px/(em*em) instead of px/em*em.

Command-Line Interface

• Use @parcel/watcher to watch the filesystem when running from JavaScript and
  not using --poll. This should mitigate more frequent failures users have
  been seeing since version 4.0.0 of Chokidar, our previous watching tool, was
  released.

JS API

• Fix SassColor.interpolate() to allow an undefined options parameter, as
  the types indicate.

Embedded Sass

• Properly pass missing color channel values to and from custom functions.

v1.79.4

Compare Source

JS API

• Fix a bug where passing green or blue to color.change() for legacy
  colors would fail.

v1.79.3

Compare Source

• Update the $channel parameter in the suggested replacement for
  color.red(), color.green(), color.blue(), color.hue(),
  color.saturation(), color.lightness(), color.whiteness(), and
  color.blackness() to use a quoted string.

v1.79.2

Compare Source

• Add a $space parameter to the suggested replacement for color.red(),
  color.green(), color.blue(), color.hue(), color.saturation(),
  color.lightness(), color.whiteness(), and color.blackness().

• Update deprecation warnings for the legacy JS API to include a link to
  relevant documentation.

v1.79.1

Compare Source

• No user-visible changes.

v1.79.0

Compare Source

• Breaking change: Passing a number with unit % to the $alpha parameter
  of color.change(), color.adjust(), change-color(), and adjust-color()
  is now interpreted as a percentage, instead of ignoring the unit. For example,
  color.change(red, $alpha: 50%) now returns rgb(255 0 0 / 0.5).

• Potentially breaking compatibility fix: Sass no longer rounds RGB channels
  to the nearest integer. This means that, for example, rgb(0 0 1) != rgb(0 0 0.6). This matches the latest version of the CSS spec and browser behavior.

• Potentially breaking compatibility fix: Passing large positive or negative
  values to color.adjust() can now cause a color's channels to go outside that
  color's gamut. In most cases this will currently be clipped by the browser and
  end up showing the same color as before, but once browsers implement gamut
  mapping it may produce a different result.

• Add support for CSS Color Level 4 [color spaces]. Each color value now tracks
  its color space along with the values of each channel in that color space.
  There are two general principles

---

Configuration

📅 Schedule: Branch creation - "before 07:00 on Thursday" in timezone Europe/Oslo, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.