Skip to content

chore(deps): bump svgo from 2.8.0 to 2.8.2#1509

Merged
tyler-dane merged 1 commit intomainfrom
dependabot/npm_and_yarn/svgo-2.8.2
Mar 5, 2026
Merged

chore(deps): bump svgo from 2.8.0 to 2.8.2#1509
tyler-dane merged 1 commit intomainfrom
dependabot/npm_and_yarn/svgo-2.8.2

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 5, 2026

Bumps svgo from 2.8.0 to 2.8.2.

Release notes

Sourced from svgo's releases.

v2.8.2

This is effectively just a re-release of SVGO v2.8.1, but with *.test.js files omitted. It seems something was wrong with the configuration in the v2.8.0 tag and I hadn't noticed it included a few extra files. 😅

We'll deprecate v2.8.1, and I'll include the change log here.

What's Changed

Dependencies

  • Migrates from our unsupported fork of sax (@​trysound/sax) to the upstream version of sax (sax).

Bug Fixes

  • No longer throws error when encountering comments in DTD.

Metrics

Before and after of the browser bundle of each respective version:

v2.8.0 v2.8.2 Delta
svgo.browser.js 587.2 kB 589.2 kB ⬆️ 2 kB

Support

SVGO v2 is not officially supported, please consider upgrading to SVGO v4 instead. We've backported this fix as there are security implications, but there is no commitment to do this for more complex changes in future.

Consider reading our Migration Guide from v2 to v3 and Migration Guide from v3 to v4 which should ease the process.

v2.8.1

Deprecated

This release left *.test.js files in the package, which have been omitted in v2.8.2. Sorry for the noise!

What's Changed

Dependencies

  • Migrates from our unsupported fork of sax (@​trysound/sax) to the upstream version of sax (sax).

Bug Fixes

  • No longer throws error when encountering comments in DTD.

Metrics

Before and after of the browser bundle of each respective version:

v2.8.0 v2.8.1 Delta

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by sethiii, a new releaser for svgo since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [svgo](https://github.com/svg/svgo) from 2.8.0 to 2.8.2.
- [Release notes](https://github.com/svg/svgo/releases)
- [Commits](svg/svgo@v2.8.0...v2.8.2)

---
updated-dependencies:
- dependency-name: svgo
  dependency-version: 2.8.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 5, 2026
@tyler-dane tyler-dane merged commit 58f0658 into main Mar 5, 2026
2 of 3 checks passed
@tyler-dane tyler-dane deleted the dependabot/npm_and_yarn/svgo-2.8.2 branch March 5, 2026 16:41
tyler-dane pushed a commit that referenced this pull request Mar 7, 2026
Bumps [svgo](https://github.com/svg/svgo) from 2.8.0 to 2.8.2.
- [Release notes](https://github.com/svg/svgo/releases)
- [Commits](svg/svgo@v2.8.0...v2.8.2)

---
updated-dependencies:
- dependency-name: svgo
  dependency-version: 2.8.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
tyler-dane added a commit that referenced this pull request Mar 7, 2026
…ve code clarity (#1504)

* refactor(event): streamline event controller error handling and improve code clarity

- Removed try/catch blocks in the create, delete, and update methods of the EventController, replacing them with promise-based error handling using `res.promise()`.
- Added comprehensive JSDoc comments to the EventController class, detailing the purpose and functionality of the methods, particularly regarding error routing through the centralized error handler.
- This refactor enhances code readability and maintains consistent error management across event operations.

* chore(dependencies): update yarn.lock and package.json for @InQuirer packages

- Added new dependencies for @InQuirer packages in yarn.lock, including @inquirer/ansi, @inquirer/checkbox, @inquirer/confirm, and others, to enhance user interaction capabilities.
- Updated package.json to include @inquirer/prompts version 8.3.0, ensuring the latest features and improvements are available for user prompts.
- This update improves the project's dependency management and ensures compatibility with the latest inquirer functionalities.

* feat(gcal): enhance Google error handling and add tests for token validation

- Introduced the `isGoogleError` utility to identify GaxiosError-like objects, improving error detection for Google API responses.
- Updated `isInvalidGoogleToken` to handle both string and numeric error codes, ensuring robust validation of invalid tokens.
- Added comprehensive tests for various Google error scenarios, including handling of GaxiosError-like structures and numeric error codes.
- This enhancement improves error management and user feedback during Google Calendar synchronization processes.

* feat(auth): refactor authentication state management and introduce Google revocation handling

- Updated imports to streamline the authentication state utilities, moving from common utils to dedicated auth state utilities.
- Implemented new in-memory state management for Google authentication revocation, allowing for better handling of user sessions without persisting unnecessary data.
- Added comprehensive tests for the new Google authentication state utilities, ensuring robust functionality for revocation and session management.
- Enhanced existing components and hooks to utilize the new state management, improving overall code clarity and maintainability.

* refactor(auth): update authentication state utilities and improve Google handling

- Refactored imports to transition from common utility paths to dedicated authentication state utilities for better organization.
- Introduced a new `clearAuthenticationState` function to manage user logout processes effectively.
- Enhanced tests to cover the new Google authentication state utilities and ensure robust functionality.
- Updated various components and hooks to utilize the revised authentication state management, improving code clarity and maintainability.

* feat(auth): enhance Google Calendar connection logic and testing

- Integrated Google revocation handling into the `useConnectGoogle` hook, ensuring that the calendar connection status reflects both authentication and revocation state.
- Updated tests to cover scenarios where Google is revoked, improving the robustness of the authentication flow.
- Mocked Google authentication state in tests to isolate and validate behavior effectively.

* feat(user): add reconnectGoogleCredentials method and enhance tests

- Implemented the `reconnectGoogleCredentials` method to update user Google credentials and last login timestamp.
- Enhanced tests for the `UserService` to cover the new functionality, ensuring proper updates to user data in the database.
- Updated the `pruneGoogleData` test to reflect changes in how Google refresh tokens are handled.

* feat(auth): implement reconnectGoogleForSession method and add related tests

- Introduced the `reconnectGoogleForSession` method in `CompassAuthService` to handle the reconnection of Google accounts for users, utilizing a new schema for parameter validation.
- Added comprehensive tests for the `CompassAuthService` to ensure the correct functionality of the Google reconnection process, including user metadata updates and calendar sync operations.
- Enhanced error handling and validation for Google user credentials during the reconnection process, improving overall robustness.

* feat(auth): restructure Google authentication services and enhance testing

- Refactored Google authentication service imports to a dedicated directory for improved organization.
- Introduced a new `GoogleAuthService` to encapsulate Google client logic, enhancing modularity and maintainability.
- Added comprehensive tests for the new Google authentication methods, ensuring robust handling of user sessions and error scenarios.
- Updated various components to utilize the new service structure, improving code clarity and reducing redundancy.

* feat(sync): enhance Google refresh token handling and add related tests

- Updated the `createUser` method in `UserDriver` to conditionally remove the Google refresh token based on options, simulating revoked token scenarios.
- Introduced a new error for missing refresh tokens and added a corresponding test case in `SyncController` to handle this scenario.
- Refactored the `handleGoogleNotification` method to utilize the new missing refresh token handling logic, improving error management during Google API interactions.
- Enhanced tests in `sync.controller.test.ts` to cover cases where the refresh token is missing, ensuring robust handling of user notifications and data pruning.

* feat(websocket): implement Google token status check on connection and enhance user metadata

- Added a new method `checkGoogleTokenStatus` in the WebSocket server to check if a user has a revoked Google token upon connection.
- Emitted a `GOOGLE_REVOKED` event when a user has a Google ID but no refresh token.
- Updated the user metadata service to enrich metadata with a `hasRefreshToken` field based on the user's Google token status.
- Enhanced tests for the WebSocket server and user metadata service to cover new scenarios related to Google token handling.

* feat(sync): improve Google notification handling and enhance tests

- Updated the `handleGoogleNotification` method to ignore notifications when no watch record is found, returning a status of "IGNORED" instead of throwing an error.
- Introduced a new private method `handleMissingSyncToken` to manage cases where the sync token is missing, improving error handling and logging.
- Added tests in `sync.controller.test.ts` to cover scenarios for ignoring notifications and ensuring no duplicate restarts occur when an import is already running.
- Enhanced the `SyncService` to clean up stale watch records and handle missing refresh tokens more effectively, ensuring robust synchronization processes.
- Updated user service tests to verify the correct behavior when restarting Google Calendar sync and handling partial watch states.

* fix(auth): update Google Calendar sync handling to be fire-and-forget

- Modified the `CompassAuthService` to handle Google Calendar sync as a fire-and-forget operation, preventing potential transaction timeouts.
- Added error logging for cases where the calendar sync fails, improving visibility into issues during the sync process.

* chore(deps): bump immutable from 5.1.4 to 5.1.5 (#1508)

Bumps [immutable](https://github.com/immutable-js/immutable-js) from 5.1.4 to 5.1.5.
- [Release notes](https://github.com/immutable-js/immutable-js/releases)
- [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md)
- [Commits](immutable-js/immutable-js@v5.1.4...v5.1.5)

---
updated-dependencies:
- dependency-name: immutable
  dependency-version: 5.1.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump svgo from 2.8.0 to 2.8.2 (#1509)

Bumps [svgo](https://github.com/svg/svgo) from 2.8.0 to 2.8.2.
- [Release notes](https://github.com/svg/svgo/releases)
- [Commits](svg/svgo@v2.8.0...v2.8.2)

---
updated-dependencies:
- dependency-name: svgo
  dependency-version: 2.8.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump tar from 7.5.9 to 7.5.10 (#1510)

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.9 to 7.5.10.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.9...v7.5.10)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.10
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* docs(config): add cursor cloud instructions (#1511)

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Tyler Dane <tyler-dane@users.noreply.github.com>

* test: cleanup test warnings and lint errors (#1505)

* test(UserProvider): mock window.location for login toast test

* test(UserProvider): improve PostHog mocking and cleanup test setup

* test(useIsMobile): wrap viewport change simulation in act for proper updates

* docs(testing): update guidelines to use `act` from React for avoiding warnings

* test(adapter): add console log and warn spies for better logging control

* fix(eslint): adjust unbound-method rules for TypeScript and Jest

* test: cleanup logging and remove migrated count from logs

* test(AuthenticatedLayout): refactor tests to use renderWithMemoryRouter for better routing handling

* test(SignUpForm, ForgotPasswordForm): wrap user interactions in act for better async handling

* docs(testing): document warning-free test patterns (#1515)

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Tyler Dane <tyler-dane@users.noreply.github.com>

* docs(docs): remove stale waitlist references (#1514)

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Tyler Dane <tyler-dane@users.noreply.github.com>

* ci: fix flakey shortcut e2e test (#1513)

* test(web): stabilize someday keyboard form opening

Co-authored-by: Tyler Dane <tyler-dane@users.noreply.github.com>

* fix(web): stabilize someday w shortcut draft flow

Co-authored-by: Tyler Dane <tyler-dane@users.noreply.github.com>

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Tyler Dane <tyler-dane@users.noreply.github.com>

* fix(auth): improve error handling for Google Calendar sync restart

- Updated the `CompassAuthService` to log errors when restarting Google Calendar sync fails, enhancing visibility into potential issues.
- Changed the sync restart method to handle errors gracefully without interrupting the flow.

* Delete yarn.lock

* Add yarn.lock file with dependency resolutions

* test(useSaveEventForm): enhance event slice mocks with action requests

- Updated the test mocks for `getWeekEventsSlice` and `getDayEventsSlice` to include action request functions, improving the accuracy of the test environment.

* feat(auth): enhance Google Calendar sync error handling and add tests

- Introduced a new method in `CompassAuthService` to handle Google Calendar sync restarts in the background, improving error logging without disrupting the flow.
- Added a test case to verify the behavior when persisting reconnect state, even if the background sync fails, ensuring robustness in the service.

* chore: lint fixes

* fix(constants): update environment variable access syntax

- Changed the access method for the `TZ` environment variable from dot notation to bracket notation for consistency with other environment variables in the `processEnv` object.

* refactor(init): enhance module aliasing with type safety

- Introduced a type definition for the alias API to improve type safety when adding module aliases in the initialization file.

* test(promise.middleware): add unit tests for promise middleware functionality

- Created a new test file for the promise middleware, implementing tests to verify response handling for NO_CONTENT status and preserving response bodies for other payloads.
- Utilized Jest for mocking request and response objects to ensure accurate testing of middleware behavior.

* refactor(promise.middleware): improve response handling and type safety

- Enhanced the `sendResponse` function to better handle responses, including specific handling for NO_CONTENT status.
- Introduced type guards to ensure proper type checking for response payloads, improving overall type safety and clarity in the middleware logic.

* test(useSaveEventForm): update event slice mocks to include action requests

- Enhanced the test mocks for `getCurrentMonthEventsSlice` by adding action request functions, improving the accuracy and completeness of the test environment.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Tyler Dane <tyler-dane@users.noreply.github.com>
Co-authored-by: cursor[bot] <206951365+cursor[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant