Skip to content

Bump svgo from 3.3.2 to 3.3.4 - #8457

Open
renovate-pagopa[bot] wants to merge 1 commit into
masterfrom
renovate/svgo-to-3.3.4
Open

Bump svgo from 3.3.2 to 3.3.4#8457
renovate-pagopa[bot] wants to merge 1 commit into
masterfrom
renovate/svgo-to-3.3.4

Conversation

@renovate-pagopa

@renovate-pagopa renovate-pagopa Bot commented Aug 14, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
svgo (source) 3.3.23.3.4 age confidence

For further information on security, please refer to the Confluence page link


Release Notes

svg/svgo (svgo)

v3.3.4

Compare Source

What's Changed

Security

Support

SVGO v3 is not officially supported, please consider upgrading to SVGO v4 instead. We've backported this fix as there are security implications, but there is no commitment to do this for more complex changes in future.

Consider reading our Migration Guide from v3 to v4 which should ease the process.

v3.3.3

Compare Source

What's Changed

Dependencies
  • Migrates from our unsupported fork of sax (@​trysound/sax) to the upstream version of sax (sax).
Bug Fixes
  • No longer throws error when encountering comments in DTD.

Metrics

Before and after of the browser bundle of each respective version:

v3.3.2 v3.3.3 Delta
svgo.browser.js 910.9 kB 912.9 kB ⬆️ 2 kB

Support

SVGO v3 is not officially supported, please consider upgrading to SVGO v4 instead. We've backported this fix as there are security implications, but there is no commitment to do this for more complex changes in future.

Consider reading our Migration Guide from v3 to v4 which should ease the process.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@github-actions

Copy link
Copy Markdown
Contributor

PR Title Validation for conventional commit type

PR title is invalid.
It must follow the format type(context): description.

Valid types:

  • feat
  • fix
  • docs
  • style
  • refactor
  • perf
  • test
  • build
  • ci
  • chore
  • revert

@github-actions

Copy link
Copy Markdown
Contributor

Jira Pull Request Link

❌ It seems this Pull Request has no issues that refers to Jira!!!
Please check it out.

@codecov

codecov Bot commented Aug 14, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 63.79%. Comparing base (9e83e7a) to head (bc8660d).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##           master    #8457   +/-   ##
=======================================
  Coverage   63.79%   63.79%           
=======================================
  Files        1978     1978           
  Lines       37598    37598           
  Branches     6360     6360           
=======================================
+ Hits        23985    23986    +1     
  Misses      12235    12235           
+ Partials     1378     1377    -1     

see 1 file with indirect coverage changes


Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ca3373f...bc8660d. Read the comment docs.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants