Bump braces, grunt-stylelint, qunitjs, stylelint and stylelint-order in /xwiki-platform-core/xwiki-platform-bootstrap/src/main

[dependabot]

Bumps braces to 3.0.3 and updates ancestor dependencies braces, grunt-stylelint, qunitjs, stylelint and stylelint-order. These dependencies need to be updated together.

Updates braces from 2.3.2 to 3.0.3

Changelog

Sourced from braces's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

• Changelogs are for humans, not machines.
• There should be an entry for every single version.
• The same types of changes should be grouped.
• Versions and sections should be linkable.
• The latest version comes first.
• The release date of each versions is displayed.
• Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

• Added for new features.
• Changed for changes in existing functionality.
• Deprecated for soon-to-be removed features.
• Removed for now removed features.
• Fixed for any bug fixes.
• Security in case of vulnerabilities.

[3.0.0] - 2018-04-08

v3.0 is a complete refactor, resulting in a faster, smaller codebase, with fewer deps, and a more accurate parser and compiler.

Breaking Changes

• The undocumented .makeRe method was removed
• Require Node.js >= 8.3

Non-breaking changes

• Caching was removed

Commits

• See full diff in compare view

Updates grunt-stylelint from 0.10.1 to 0.20.1

Release notes

Sourced from grunt-stylelint's releases.

v0.20.0 / 2024-05-03

• Drop Node.js 16 support (James D. Forrester)
• Switch to stylelint 16.x (in CommonJS mode) (James D. Forrester)
• build: Upgrade eslint-config-wikimedia to 0.27.0 (James D. Forrester)
• build: Upgrade grunt-contrib-nodeunit to d73c0771a pre-release for security issues (James D. Forrester)

v0.19.0 / 2023-07-12

• Raise stylelint requirement from 14.x to 15.x (James D. Forrester)
• build: Drop Node.js version 12.x and 14.x, update to '16.x, 18.x' (James D. Forrester)

v0.18.0 / 2022-03-29

• Update stylelint to 14.5.0 (Виктор Виктор)
• build: Bump stylelint-less from ^1.0.3 to ^1.0.5 (James D. Forrester)
• build: Add codeql code scanning tool to CI (James D. Forrester)

v0.17.0 / 2021-10-22

• Drop Node 10 support (James D. Forrester)
• Require stylelint 14.0.0, up from 13.8.0 (James D. Forrester)
• build: Bump various devDependencies to latest (James D. Forrester)

v0.16.0 / 2020-11-19

• Drop Node 8 support (Ed Sanders)
• Require stylelint 13.8.0, up from 13.3.2 (Ed Sanders, James D. Forrester)
• Upgrade chalk dependency from ^3.0.0 to ^4.1.0 (Ed Sanders)
• Pass through --fix to stylelint options (Ed Sanders)
• README: Fix label of 'fix' option, copy-pasted as 'syntax' (i alarmed alien)

v0.15.0 / 2020-04-15

• Require stylelint 13.3.2, up from 13.2.0 (James D. Forrester)
• Upgrade chalk dependency from ^2.4.2 to ^3.0.0 (James D. Forrester)
• build: Replace Travis with GitHub Actions (James D. Forrester)
• build: Bump devDependencies to latest (James D. Forrester)

v0.14.0 / 2020-02-14

• Require stylelint 13.2.0, up from 12.0.0 (James D. Forrester)
• build: Upgrade grunt-contrib-nodeunit from 2.0.0 to 2.1.0 for security issue (James D. Forrester)

v0.13.0 / 2019-09-11

• Bump stylelint dependency from ^11.0.0 to ^12.0.0 (Lars Laade)
• build: Replace handlebars in sub-dependencies for npm audit's happiness (James D. Forrester)

v0.12.0 / 2019-10-21

• Bump stylelint dependency from ^10.0.0 to ^11.0.0 (Nathan Woltman)
• build: Upgrade eslint-config-wikimedia from 0.13.1 to 0.14.3 (James D. Forrester)

v0.11.1 / 2019-07-31

• Don't break but short-circuit when no files are passed in (James D. Forrester)

v0.11.0 / 2019-04-30

• Bump stylelint dependency from ^9.0.0 to ^10.0.0 (Nathan Woltman)

... (truncated)

Changelog

Sourced from grunt-stylelint's changelog.

grunt-stylelint Release History

v0.20.0 / 2024-05-03

• Drop Node.js 16 support (James D. Forrester)
• Switch to stylelint 16.x (in CommonJS mode) (James D. Forrester)
• build: Upgrade eslint-config-wikimedia to 0.27.0 (James D. Forrester)
• build: Upgrade grunt-contrib-nodeunit to d73c0771a pre-release for security issues (James D. Forrester)

v0.19.0 / 2023-07-12

• Raise stylelint requirement from 14.x to 15.x (James D. Forrester)
• build: Drop Node.js version 12.x and 14.x, update to '16.x, 18.x' (James D. Forrester)

v0.18.0 / 2022-03-29

• Update stylelint to 14.5.0 (Виктор Виктор)
• build: Bump stylelint-less from ^1.0.3 to ^1.0.5 (James D. Forrester)
• build: Add codeql code scanning tool to CI (James D. Forrester)

v0.17.0 / 2021-10-21

• Drop Node 10 support (James D. Forrester)
• Require stylelint 14.0.0, up from 13.8.0 (James D. Forrester)
• build: Bump various devDependencies to latest (James D. Forrester)

v0.16.0 / 2020-11-19

• Drop Node 8 support (Ed Sanders)
• Require stylelint 13.8.0, up from 13.3.2 (Ed Sanders, James D. Forrester)
• Upgrade chalk dependency from ^3.0.0 to ^4.1.0 (Ed Sanders)
• Pass through --fix to stylelint options (Ed Sanders)
• README: Fix label of 'fix' option, copy-pasted as 'syntax' (i alarmed alien)

v0.15.0 / 2020-04-15

• Require stylelint 13.3.2, up from 13.2.0 (James D. Forrester)
• Upgrade chalk dependency from ^2.4.2 to ^3.0.0 (James D. Forrester)
• build: Replace Travis with GitHub Actions (James D. Forrester)
• build: Bump devDependencies to latest (James D. Forrester)

v0.14.0 / 2020-02-14

• Require stylelint 13.2.0, up from 12.0.0 (James D. Forrester)
• build: Upgrade grunt-contrib-nodeunit from 2.0.0 to 2.1.0 for security issue (James D. Forrester)

v0.13.0 / 2019-09-11

• Bump stylelint dependency from ^11.0.0 to ^12.0.0 (Lars Laade)
• build: Replace handlebars in sub-dependencies for npm audit's happiness (James D. Forrester)

v0.12.0 / 2019-10-21

• Bump stylelint dependency from ^10.0.0 to ^11.0.0 (Nathan Woltman)
• build: Upgrade eslint-config-wikimedia from 0.13.1 to 0.14.3 (James D. Forrester)

v0.11.1 / 2019-07-31

• Don't break but short-circuit when no files are passed in (James D. Forrester)

... (truncated)

Commits

• See full diff in compare view

Updates qunitjs from 2.4.1 to 2.4.1

Changelog

Sourced from qunitjs's changelog.

Commits

• See full diff in compare view

Updates stylelint from 9.6.0 to 16.26.1

Release notes

Sourced from stylelint's releases.

16.26.1

It fixes numerous false positive bugs, including many in the declaration-property-value-no-unknown rule for the latest CSS specifications.

• Fixed: *-no-unknown false positives for latest specs by integrating @csstools/css-syntax-patches-for-csstree (#8850) (@​romainmenke).
• Fixed: at-rule-no-unknown false positives for @function (#8851) (@​jeddy3).
• Fixed: declaration-property-value-no-unknown false positives for attr(), if() and custom functions (#8853) (@​jeddy3).
• Fixed: function-url-quotes false positives when URLs require quoting (#8804) (@​taearls).
• Fixed: selector-pseudo-element-no-unknown false positives for ::scroll-button() (#8856) (@​Mouvedia).

16.26.0

It adds 1 feature and fixes 2 bugs.

• Added: support for customSyntax with function export (#8834) (@​silverwind).
• Fixed: custom-property-no-missing-var-function false positives for style query in if() function (#8813) (@​sajdakabir).
• Fixed: media-feature-range-notation false positives for multiple queries and except: exact-value (#8832) (@​jeddy3).

16.25.0

It adds 3 new features, including experimental support for bulk suppressions. It's also our first immutable release, with the package published to npm using trusted publishing and our dependencies updated on a cool down for improved supply chain security.

• Added: support for bulk suppressions (#8564) (@​ryo-manba).
• Added: ignoreAtRules: [] to no-invalid-position-declaration (#8781) (@​jrmlt).
• Added: rule name to custom messages (#8774) (@​jhae-de).

16.24.0

It adds 1 new rule, adds 1 option to a rule and fixes 2 bugs.

• Added: rule-nesting-at-rule-required-list rule (#8680) (@​sw1tch3roo).
• Added: ignoreAtRules: [] to nesting-selector-no-missing-scoping-root (#8743) (@​karlhorky).
• Fixed: function-no-unknown false positives for contrast-color() and sibling-*() (#8729) (@​Mouvedia).
• Fixed: selector-pseudo-class-no-unknown false positives for :heading (#8749) (@​Mouvedia).

16.23.1

It fixes 7 bugs.

• Fixed: no-invalid-position-declaration false positives for embedded styles (#8701) (@​sw1tch3roo).
• Fixed: property-no-deprecated erroneously autofixing clip (#8699) (@​immitsu).
• Fixed: property-no-deprecated false positives for -webkit-box-orient: vertical; (#8699) (@​immitsu).
• Fixed: selector-pseudo-*-no-unknown false positives for some meter pseudo classes/elements (#8708) (@​Mouvedia).
• Fixed: selector-pseudo-class-no-unknown false positives for :unchecked (#8705) (@​Mouvedia).
• Fixed: selector-pseudo-element-no-unknown false positives for ::search-text (#8707) (@​Mouvedia).
• Fixed: selector-type-no-unknown false positives for selectedcontent (#8716) (@​Mouvedia).

16.23.0

It adds 5 new rules, 1 option to a rule and fixes 3 bugs. We've turned on the new rules in our standard config.

• Added: block-no-redundant-nested-style-rules rule (#8684) (@​sw1tch3roo).
• Added: media-type-no-deprecated rule (#8668) (@​immitsu).
• Added: nesting-selector-no-missing-scoping-root rule (#8674) (@​sw1tch3roo).
• Added: no-invalid-position-declaration rule (#8669) (@​sw1tch3roo).

... (truncated)

Changelog

Sourced from stylelint's changelog.

16.26.1 - 2025-11-28

It fixes numerous false positive bugs, including many in the declaration-property-value-no-unknown rule for the latest CSS specifications.

• Fixed: *-no-unknown false positives for latest specs by integrating @csstools/css-syntax-patches-for-csstree (#8850) (@​romainmenke).
• Fixed: at-rule-no-unknown false positives for @function (#8851) (@​jeddy3).
• Fixed: declaration-property-value-no-unknown false positives for attr(), if() and custom functions (#8853) (@​jeddy3).
• Fixed: function-url-quotes false positives when URLs require quoting (#8804) (@​taearls).
• Fixed: selector-pseudo-element-no-unknown false positives for ::scroll-button() (#8856) (@​Mouvedia).

16.26.0 - 2025-11-21

It adds 1 feature and fixes 2 bugs.

• Added: support for customSyntax with function export (#8834) (@​silverwind).
• Fixed: custom-property-no-missing-var-function false positives for style query in if() function (#8813) (@​sajdakabir).
• Fixed: media-feature-range-notation false positives for multiple queries and except: exact-value (#8832) (@​jeddy3).

16.25.0 - 2025-10-03

It adds 3 new features, including experimental support for bulk suppressions. It's also our first immutable release, with the package published to npm using trusted publishing and our dependencies updated on a cool down for improved supply chain security.

• Added: support for bulk suppressions (#8564) (@​ryo-manba).
• Added: ignoreAtRules: [] to no-invalid-position-declaration (#8781) (@​jrmlt).
• Added: rule name to custom messages (#8774) (@​jhae-de).

16.24.0 - 2025-09-07

It adds 1 new rule, adds 1 option to a rule and fixes 2 bugs.

• Added: rule-nesting-at-rule-required-list rule (#8680) (@​sw1tch3roo).
• Added: ignoreAtRules: [] to nesting-selector-no-missing-scoping-root (#8743) (@​karlhorky).
• Fixed: function-no-unknown false positives for contrast-color() and sibling-*() (#8729) (@​Mouvedia).
• Fixed: selector-pseudo-class-no-unknown false positives for :heading (#8749) (@​Mouvedia).

16.23.1 - 2025-08-07

It fixes 7 bugs.

• Fixed: no-invalid-position-declaration false positives for embedded styles (#8701) (@​sw1tch3roo).
• Fixed: property-no-deprecated erroneously autofixing clip (#8699) (@​immitsu).
• Fixed: property-no-deprecated false positives for -webkit-box-orient: vertical; (#8699) (@​immitsu).
• Fixed: selector-pseudo-*-no-unknown false positives for some meter pseudo classes/elements (#8708) (@​Mouvedia).
• Fixed: selector-pseudo-class-no-unknown false positives for :unchecked (#8705) (@​Mouvedia).
• Fixed: selector-pseudo-element-no-unknown false positives for ::search-text (#8707) (@​Mouvedia).
• Fixed: selector-type-no-unknown false positives for selectedcontent (#8716) (@​Mouvedia).

16.23.0 - 2025-07-29

It adds 5 new rules, 1 option to a rule and fixes 3 bugs. We've turned on the new rules in our standard config.

... (truncated)

Commits

• b968143 Release 16.26.1 (#8857)
• 2b24b9c Fix selector-pseudo-element-no-unknown false positives for `::scroll-button...
• f152564 Fix *-no-unknown false positives for latest specs by integrating `@csstools...
• 431cb53 Fix at-rule-no-unknown false positives for @function (#8851)
• 119097e Fix declaration-property-value-no-unknown false positives for attr() and ...
• 4b9c68b Fix function-url-quotes false positives when URLs require quoting (#8804)
• 8cc4ced Bump rollup from 4.52.5 to 4.53.2 (#8848)
• 4383feb Bump file-entry-cache from 11.1.0 to 11.1.1 (#8846)
• a8a7560 Bump the eslint group with 2 updates (#8845)
• 947ad33 Fix patch-package warning about mismatched @types/css-tree version (#8844)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for stylelint since your current version.

Updates stylelint-order from 1.0.0 to 7.0.0

Release notes

Sourced from stylelint-order's releases.

7.0.0

• Dropped Node.js 18 support
• Dropped support for Stylelint older than 16.18.0
• Changed: Ignore properties case for properties-order and properties-alphabetical-order
• Added support for more properties shorthands
• Fixed order autofix not applied, when Stylelint disable comments are present
• Fixed properties-alphabetical-order autofix not applied, when Stylelint disable comments are present
• Fixed properties-order autofix not applied, when Stylelint disable comments are present
• Fixed: Don't apply properties-alphabetical-order autofixing if there are no violations
• Fixed: Report warnings if they weren't fixed by autofix in properties-alphabetical-order

6.0.4

• Added support for Stylelint 16

6.0.3

• Fixed sorting inside CSS-in-JS css helper

6.0.2

• Added Stylelint v15 to peerDependencies

6.0.1

• Fix regression causing root of CSS or SCSS to report violations

6.0.0

• Dropped Node.js 12 and 14 support.
• Added support for postcss-styled-syntax.

5.0.0

• Breaking change: Dropped Node.js 8 support. Node.js 12 or greater is now required.
• Breaking change: Dropped support for Stylelint 13 and earlier.
• Added support for Stylelint 14.

4.1.0

• Added name option to extended rule object to improve error messaging (for order).
• Fixed order not reporting warnings, if autofix didn't fix them.

4.0.0

• Breaking change: Dropped Node.js 8 support. Node.js 10 or greater is now required.
• Breaking change: Always remove empty line before the first property if this property has any emptyLineBefore* option targeting it in properties-order. Even if option set to always empty line before the first property will be removed.
• Fixed false positives for emptyLineBeforeUnspecified.

hudochenkov/stylelint-order@3.1.1...4.0.0

3.1.1

• Added stylelint@11 as a peer dependency.

hudochenkov/stylelint-order@3.1.0...3.1.1

3.1.0

• Added emptyLineBefore: "threshold" option, and related options (emptyLineMinimumPropertyThreshold, emptyLineBeforeUnspecified: "threshold") to properties-order.

... (truncated)

Changelog

Sourced from stylelint-order's changelog.

7.0.0

• Dropped Node.js 18 support
• Dropped support for Stylelint older than 16.18.0
• Changed: Ignore properties case for properties-order and properties-alphabetical-order
• Added support for more properties shorthands
• Fixed order autofix not applied, when Stylelint disable comments are present
• Fixed properties-alphabetical-order autofix not applied, when Stylelint disable comments are present
• Fixed properties-order autofix not applied, when Stylelint disable comments are present
• Fixed: Don't apply properties-alphabetical-order autofixing if there are no violations
• Fixed: Report warnings if they weren't fixed by autofix in properties-alphabetical-order

6.0.4

• Added support for Stylelint 16

6.0.3

• Fixed sorting inside CSS-in-JS css helper

6.0.2

• Added Stylelint v15 to peerDependencies

6.0.1

• Fix regression causing root of CSS or SCSS to report violations

6.0.0

• Dropped Node.js 12 and 14 support.
• Added support for postcss-styled-syntax.

5.0.0

• Breaking change: Dropped Node.js 8 support. Node.js 12 or greater is now required.
• Breaking change: Dropped support for Stylelint 13 and earlier.
• Added support for Stylelint 14.

4.1.0

• Added name option to extended rule object to improve error messaging (for order).
• Fixed order not reporting warnings, if autofix didn't fix them.

4.0.0

• Breaking change: Dropped Node.js 8 support. Node.js 10 or greater is now required.
• Breaking change: Always remove empty line before the first property if this property has any emptyLineBefore* option targeting it in properties-order. Even if option set to always empty line before the first property will be removed.
• Fixed false positives for emptyLineBeforeUnspecified.

3.1.1

• Added stylelint@11 as a peer dependency.

3.1.0

... (truncated)

Commits

• bac91db 7.0.0
• 38cedd1 Update engines for Node.js 20+
• 87b8750 Exclude tests from published package
• d83cbc5 Prepare 7.0.0
• 8a28522 Add support for more properties shorthands. Supersedes #162
• 646ecef Ignore properties case for properties-order and `properties-alphabetical-or...
• 8ee41d0 Remove some ESLint violations
• 029d912 Stop supporting Node.js 18
• 3f9e901 Bump Stylelint peer dependency version
• 3e03166 Fix order autofix not applied, when Stylelint disable comments are present....
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.