Portfolio icon indicating copy to clipboard operation
Portfolio copied to clipboard

build(deps): bump bootstrap from 5.3.3 to 5.3.5

Open dependabot[bot] opened this issue 6 months ago • 3 comments

Bumps bootstrap from 5.3.3 to 5.3.5.

Release notes

Sourced from bootstrap's releases.

v5.3.5

Hot fix for a regression from upstream in Autoprefixer.

What's Changed

Full Changelog: https://github.com/twbs/bootstrap/compare/v5.3.4...v5.3.5

v5.3.4

Changes

  • #40888: Dependabot: switch to grouped updates

🚀 Features

  • #41299: Typo fixed
  • #41187: Docs: mention removal of util.js in migration guide
  • #41228: Docs: Simplify ids for checks, radios and switches
  • #41150: Update fixtureId to FIXTURE_ID for consistency
  • #40965: Docs: Use <article> element for example cards
  • #40932: Docs: add ngx-bootstrap to JavaScript frameworks list
  • #40790: Docs: Drop .grid where it shouldn't be used
  • #40821: Docs: precise how to add new .order-* classes in 'Layout > Columns'
  • #40914: Docs: drop useless .justify-content-start class in homepage
  • #40876: Remove unneeded flexbug workaround
  • #40870: Docs: Update modal min-height inline style
  • #40844: Docs: Remove mention about Safari's limited support flexbox gap
  • #40620: Docs: minor accessibility improvements for Examples
  • #40619: Docs: Fix a minor accessibility issue (checkout example missing h1)
  • #40577: Docs: Add main element to Cheatsheet Examples
  • #39815: Docs: drop unused .bi-exclamation-triangle-fill class
  • #40507: Docs: HTTPS link to ikons iconset
  • #39777: Docs: fix Reddit URL to avoid redirection
  • #39697: refactor(accordion): merge selectors for border-radius rule

🎨 CSS

  • #41336: Fix modal and offcanvas header collapse
  • #41126: Fix display issues of close button in contextual light and dark modes
  • #40695: Fix light mode carousel in dark mode
  • #41004: Add workarounds for postcss-values-parser error (negative values in calc())
  • #41013: Align floating labels with form-select sizes
  • #40931: Fix: correct typo in background-blend-mode value
  • #40900: Remove unnecessary duplicated CSS class name
  • #40876: Remove unneeded flexbug workaround
  • #40844: Docs: Remove mention about Safari's limited support flexbox gap
  • #40623: Fix use of declarations after nested rules (deprecated in Sass 1.77.7)
  • #39720: Floating labels: Fix max-width and background-color

... (truncated)

Commits
  • 85f2353 Bump to v5.3.5 (#41348)
  • b1e16bd Fix floating labels rendering on Firefox
  • 51581ed Release v5.3.4 (#40656)
  • eed621d Build(deps-dev): Bump the development-dependencies group across 1 directory w...
  • 253db02 Add active scale effect to animate-img (#40878)
  • ed2bf13 Fix null modal-content-color in modal.scss (#39977)
  • 51e7519 Quick fix for masthead banner icon spacing
  • e304e6a Reintroduce #35759 and adding a guard rail on the active state
  • 881ed59 Add .border-circle and .border-pill to the radius size part of the docume...
  • ed25368 [Docs] Remove some unnecessary Twitter references/examples (#41174)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependabot[bot] avatar May 05 '25 04:05 dependabot[bot]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
portfolio ❌ Failed (Inspect) May 5, 2025 4:43am

vercel[bot] avatar May 05 '25 04:05 vercel[bot]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedbootstrap@​5.3.3 ⏵ 5.3.510010010086100

View full report

socket-security[bot] avatar May 05 '25 04:05 socket-security[bot]

A newer version of bootstrap exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

dependabot[bot] avatar May 06 '25 04:05 dependabot[bot]

Long time nobody showed activity here. We will add the "Stale Label" to your PR.

github-actions[bot] avatar Jul 05 '25 21:07 github-actions[bot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot[bot] avatar Jul 12 '25 21:07 dependabot[bot]