Skip to content

build(deps): bump juice from 12.1.1 to 12.2.0 - #1910

Merged
cossssmin merged 1 commit into
masterfrom
dependabot/npm_and_yarn/master/juice-12.2.0
Oct 5, 2026
Merged

cossssmin merged 1 commit into
masterfrom
dependabot/npm_and_yarn/master/juice-12.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 4, 2026

Copy link
Copy Markdown
Contributor

Bumps juice from 12.1.1 to 12.2.0.

Release notes

Sourced from juice's releases.

v12.2.0

Added

  • feat: add addImportantToPseudoClasses option b49fb62
  • feat(cli): inline whole directories 2445b8c
  • feat: support FreeMarker templates in codeBlocks by default 185e043
  • feat: rebuild the demo site and deploy it to GitHub Pages 422b10c
  • feat(cli): support stdin and stdout 5b4aba0
  • perf: import cheerio/slim to avoid loading parse5 and undici e2e6e39

Fixed

  • fix: keep style attributes that aren't valid CSS instead of throwing 52871dc
  • fix: resolve CSS counters in document order with proper scoping b1a6aa2
  • fix: keep template tags between declarations in style attributes 1372905
  • fix(types): type element lists as tag name strings cc08806
  • fix: handle < and CDATA in style tags in xmlMode 9d158d2
  • fix: keep pseudo-element rules that can't be inlined 88938ae
  • fix: throw a clear TypeError for non-string html input 9c1a7b6

Changed

  • docs: document inlineExternal and data-embed on link tags 4f94bbe
  • test(cli): cover stdin codeBlocks and read/write error paths 6cdce53
  • build(deps-dev): bump vitest from 5.0.0 to 5.0.1 f422186
  • build(deps-dev): bump @​types/node from 26.5.1 to 26.6.1 6204651
  • build(deps): bump entities from 8.0.0 to 8.1.0 2b95b81

Automattic/juice@v12.1.3...v12.2.0

v12.1.3

  • build(deps-dev): bump @​vitest/coverage-v8 to 5 alongside vitest 5c863e2
  • build(deps): bump postcss-selector-parser from 7.1.5 to 7.1.6 418c9ec
  • build(deps-dev): bump @​types/node from 26.4.0 to 26.4.1 88ae3cb
  • build(deps): bump postcss from 8.5.26 to 8.5.28 b38a247
  • build(deps): bump postcss-safe-parser from 7.0.1 to 7.1.0 27d5a66
  • build(deps-dev): bump @​types/node from 26.2.0 to 26.4.0 3033bda

Automattic/juice@v12.1.2...v12.1.3

v12.1.2

  • fix: prevent ReDoS in css variable parsing c2f09d5
  • docs: remove cheerio/mensch/slick from 3rd-party section 8c4e15e
  • build(deps): bump undici from 7.28.0 to 7.29.0 ceb1a71
  • build(deps-dev): bump @​types/node from 26.1.1 to 26.1.2 5a4c958
  • build(deps): bump postcss from 8.5.23 to 8.5.25 8861a6a

... (truncated)

Commits
  • a3daadb 12.2.0
  • de0698e Merge pull request #674 from Automattic/fix/tolerate-invalid-style-attributes
  • 52871dc fix: keep style attributes that aren't valid CSS instead of throwing
  • c823e9f Merge pull request #673 from Automattic/fix/css-counters
  • b1a6aa2 fix: resolve CSS counters in document order with proper scoping
  • 8a68243 Merge pull request #672 from Automattic/fix/code-blocks-in-style-attribute
  • 1372905 fix: keep template tags between declarations in style attributes
  • 4e3426f Merge pull request #671 from Automattic/fix/element-list-types
  • cc08806 fix(types): type element lists as tag name strings
  • 294d0aa Merge pull request #670 from Automattic/feat/important-pseudo-classes
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [juice](https://github.com/Automattic/juice) from 12.1.1 to 12.2.0.
- [Release notes](https://github.com/Automattic/juice/releases)
- [Changelog](https://github.com/Automattic/juice/blob/master/CHANGELOG.md)
- [Commits](Automattic/juice@v12.1.1...v12.2.0)

---
updated-dependencies:
- dependency-name: juice
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 4, 2026
@coderabbitai

coderabbitai Bot commented Oct 4, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 9a06b426-30a4-4c1c-8615-4a2869ee2a2c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedjuice@​12.1.1 ⏵ 12.2.0100100100 +196 +2100

View full report

@cossssmin
cossssmin merged commit a0693c1 into master Oct 5, 2026
6 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/master/juice-12.2.0 branch October 5, 2026 08:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant