less4j
less4j copied to clipboard
Less language is an extension of css and less4j compiles it into regular css. Less adds several dynamic features into css: variables, expressions, nested rules, and so on. Less was designed to be comp...
Bumps [gson](https://github.com/google/gson) from 2.5 to 2.8.9. Release notes Sourced from gson's releases. Gson 2.8.9 Make OSGi bundle's dependency on sun.misc optional (#1993). Deprecate Gson.excluder() exposing internal Excluder class (#1986). Prevent...
Bumps [protobuf-java](https://github.com/protocolbuffers/protobuf) from 2.5.0 to 3.16.1. Release notes Sourced from protobuf-java's releases. Protocol Buffers v3.16.1 Java Improve performance characteristics of UnknownFieldSet parsing (#9371) Protocol Buffers v3.16.0 C++ Fix compiler warnings...
We have been using less4j in our workflow for years and it works perfectly for our use-case. From time to time we run into incompatibilities with newer CSS/Less constructs, but...
Bumps commons-io from 2.3 to 2.7. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...
Bumps [junit](https://github.com/junit-team/junit4) from 4.11 to 4.13.1. Release notes Sourced from junit's releases. JUnit 4.13.1 Please refer to the release notes for details. JUnit 4.13 Please refer to the release notes...
Bumps commons-beanutils from 1.8.3 to 1.9.2. [](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...
Specifically do you know if this LESS update is included in the current version of less4j? ``` If you are using the semantic-ui-less package with versions of LESS before 3.5...
commons-beanutils 1.8.3 depends on commons-collections 3.2.1. There is a high severity security vulnerability with commons-collections 3.2.1 - see https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-6420#VulnChangeHistoryDiv The latest release of commons-beanutils, 1.9.3-RC1, depends on commons-collections 3.2.2 which...
Less4j depends on commons-beanutils:commons-beanutils:1.8.3 which has a vulnerqbility s reported by the NVD. At the moment, there is no released version of commons-beanutils that is not vulnerable. This is related...